Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File:                     SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier:          LM8rn7T0/2yTzc2q+07LQveZk+0FLD6q8m4A971TiVA=
Subject key identifier:   E7:19:E4:6B:3A:54:B6:C5:D0:ED:37:4D:54:9F:C6:1F:99:98:C3:4C
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer:       /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial:       019D37F740140C7C17E79C873FAB0C301E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number:          0E6B
Signing time:             Sun 29 Mar 2026 05:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:43 +0000
Files and hashes:         1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: NuIEDUSDhwA8NRqws+s1b3g+RTpKQIjQF/sPvhi6uaE=)
                          2: Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (hash: 1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:40:14:0c:7c:17:e7:9c:87:3f:ab:0c:30:1e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
        Validity
            Not Before: Mar 29 05:00:43 2026 GMT
            Not After : Mar 30 05:00:43 2026 GMT
        Subject: CN=e719e46b3a54b6c5d0ed374d549fc61f9998c34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:3a:fc:2c:9e:a6:18:b6:81:42:ab:75:ef:
                    c9:5f:55:1d:ef:ab:64:be:a8:14:69:a5:fb:9c:6d:
                    6f:95:99:49:cc:60:5b:e2:e1:8a:f6:e1:b1:79:ef:
                    9f:19:e2:38:1c:8c:e0:0b:e3:5c:db:39:55:00:50:
                    c1:56:51:60:f5:98:ed:41:55:2b:ed:a5:8b:64:9e:
                    24:d8:08:29:dd:40:46:70:96:b3:ec:49:70:e9:8b:
                    a8:08:50:73:04:34:32:42:22:d9:f3:05:f0:ce:03:
                    c8:e4:c7:2c:ff:5c:dc:b9:1e:d5:14:67:e3:9d:d1:
                    4a:82:5d:9d:ab:b1:57:db:c3:5a:04:95:4b:18:f0:
                    52:b5:ef:d2:15:66:6a:e7:e6:88:97:43:24:c4:da:
                    9b:bd:4d:5a:d7:c1:d8:f5:3b:eb:1a:0a:1f:c3:54:
                    34:22:39:e9:11:31:d8:7e:b4:24:07:4c:34:3e:e0:
                    ea:01:65:1e:a8:8d:1c:16:6a:fc:3c:da:21:8f:13:
                    b0:12:60:e5:58:f1:44:3f:2d:86:a3:ee:42:1f:0c:
                    21:b5:c2:19:95:40:da:b4:82:49:86:92:3c:98:ee:
                    c5:ff:b8:e5:17:8d:a9:55:69:c5:7b:fe:de:89:9f:
                    e2:8d:33:35:73:97:c2:01:82:78:47:47:bc:f6:50:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:E4:6B:3A:54:B6:C5:D0:ED:37:4D:54:9F:C6:1F:99:98:C3:4C
            X509v3 Authority Key Identifier:
                keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:9d:56:db:3d:a3:53:bf:99:45:ab:23:3d:40:2b:97:2a:
         13:49:f7:64:2c:f4:1a:3e:51:71:b0:cc:3f:ac:0e:00:c8:45:
         49:7d:dc:4b:c2:76:44:80:1a:55:bc:b1:c6:3a:4e:2e:3f:92:
         98:4b:dc:9c:2e:c0:9d:75:1b:8e:2f:48:b5:1d:89:b0:40:75:
         3d:4a:d9:73:4c:12:5a:71:86:47:8c:aa:65:02:fd:dd:79:51:
         df:bf:10:49:4f:9a:67:26:c5:86:33:b6:fe:a7:0c:ec:de:da:
         99:15:de:eb:8e:30:11:ae:84:40:f7:25:d6:72:5e:bb:50:94:
         cc:54:c3:ba:11:1f:86:5d:c2:92:e3:2e:5b:00:04:1e:00:40:
         58:13:15:90:8e:b3:f2:05:4c:b5:c4:bb:3c:de:d5:cc:c4:4b:
         0e:c9:9a:4c:5e:21:e1:60:7b:00:af:b4:90:f8:93:1f:8e:7b:
         f5:8a:5e:32:d4:b5:fd:cf:15:34:ff:34:12:a9:7c:75:5b:7e:
         48:c1:cb:df:14:5f:0f:a2:ce:39:05:58:58:7a:6d:77:b2:51:
         80:be:05:db:25:86:e9:6e:94:29:37:8e:cc:0b:f6:49:26:0e:
         2e:5f:e7:33:02:ed:79:73:44:cd:5f:ec:a0:b7:c1:63:16:87:
         64:d2:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:45 2026 by rpki-client