Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File:                     j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier:          6xG15ZnlTbwBNw0V/zNU02imDfe8n1oyUqXwTyaW99o=
Subject key identifier:   7C:C1:3A:D1:94:4B:55:56:A4:94:8D:9F:99:DE:2B:9C:1E:FE:E4:15
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer:       /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial:       019D36E43BCAF08F632760F4D212CCC422CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number:          0D6F
Signing time:             Sun 29 Mar 2026 00:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 00:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 00:00:20 +0000
Files and hashes:         1: h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa (hash: zud6rrdKB68sPZedKRRSWbaDWeVhd50z7EdhQ7bDmyk=)
                          2: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: bY8dbiLJSpYRl4l/dYq0ZdhELmOQF2daH0/o3JE1Bg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:e4:3b:ca:f0:8f:63:27:60:f4:d2:12:cc:c4:22:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
        Validity
            Not Before: Mar 29 00:00:20 2026 GMT
            Not After : Mar 30 00:00:20 2026 GMT
        Subject: CN=7cc13ad1944b5556a4948d9f99de2b9c1efee415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:40:21:75:e3:15:d0:85:3a:c2:de:eb:2f:
                    59:c5:05:cb:07:c1:da:94:d9:66:aa:13:0b:f9:57:
                    37:16:40:8e:eb:13:9d:0f:7e:3a:62:30:c4:09:3b:
                    d3:02:c5:31:fa:cf:bf:90:31:f5:61:70:82:80:d5:
                    33:fd:29:a2:d8:90:48:88:fb:be:a6:cd:00:43:67:
                    c2:27:9b:98:1b:a9:6a:5c:38:55:ba:f8:7d:58:e5:
                    a9:ed:a0:b8:74:e7:5d:a2:6d:4f:6a:d9:0a:98:ad:
                    8a:a6:79:9a:9c:af:1a:3e:98:67:6c:21:9d:ec:d0:
                    bf:0c:1c:bc:c6:39:2b:ca:a4:73:47:7a:2b:89:56:
                    47:cd:01:c4:bc:39:a9:9d:1e:e9:05:1d:91:9b:53:
                    bf:29:c7:fd:3c:8c:5f:9e:74:85:7e:6b:8b:69:5d:
                    7c:43:a8:86:8a:ba:fe:69:9e:bb:e2:9e:f4:ed:04:
                    3e:f8:b7:80:03:e9:3e:f9:5e:52:1f:39:5b:b3:15:
                    47:55:43:f2:a4:10:b5:6f:a5:4e:db:d6:65:bf:12:
                    be:a0:dd:aa:e2:21:ba:58:81:9d:1a:9b:9f:e3:e8:
                    7c:77:ee:d2:c1:df:cb:b4:b0:8c:20:a1:ef:b7:00:
                    44:5e:f5:6c:dd:02:01:7c:94:0a:8c:3f:c6:c6:f3:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:3A:D1:94:4B:55:56:A4:94:8D:9F:99:DE:2B:9C:1E:FE:E4:15
            X509v3 Authority Key Identifier:
                keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:bf:46:7b:df:15:59:bf:55:f4:c3:49:86:5e:33:1b:8d:
         e1:87:26:3b:dd:24:3b:07:36:b6:da:1c:12:c4:af:87:6f:6b:
         d4:5f:7c:02:d3:0b:df:99:80:e4:8d:00:b4:3a:ce:4f:ae:d9:
         0e:cb:3e:74:10:43:02:48:5f:a7:ec:55:ee:d1:8b:d3:ff:cd:
         ec:e7:02:a3:70:af:a9:4f:82:83:03:74:98:19:73:5e:93:31:
         d5:73:63:1a:77:ac:f6:8f:be:f6:ce:bb:3c:df:06:c1:98:66:
         11:45:c2:09:3d:fb:c7:45:93:43:61:be:ef:10:e3:93:1c:d2:
         79:e5:8c:87:85:da:dc:c0:9b:e0:2f:e6:56:60:e6:fe:95:5a:
         de:f8:97:54:95:e8:9f:c1:89:6a:11:46:f7:b5:ca:3d:32:68:
         35:a5:1d:f3:69:1d:f5:f4:b2:98:82:d0:45:3e:b0:92:95:a4:
         92:98:57:8a:c4:ea:03:b2:c6:9e:86:32:17:80:2b:97:3e:ed:
         62:9f:05:13:5d:35:e4:be:b5:c1:7a:3a:c7:85:f0:d4:4f:2e:
         6e:f5:43:66:cf:2b:27:c4:8a:9e:7e:37:d7:5e:06:74:a8:80:
         6d:47:e1:9e:14:7d:46:f5:7a:81:9d:ce:a4:9e:ac:39:a6:23:
         13:36:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client