Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          pekzALC4ljHzU8kH4urc/EJqJ4+RUaRnMA6VH2qUeEs=
Subject key identifier:   62:72:C8:6B:0B:C3:1F:C1:61:D7:51:3A:0C:D1:92:C9:EF:75:90:68
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       019D378986955518CE93CE2FC49F035C8545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          0B8B
Signing time:             Sun 29 Mar 2026 03:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:52 +0000
Files and hashes:         1: OI678exd-nLeHUEfOxB3Wwb9ZJI.roa (hash: WlEEPa3tPqSDyIk1vz7Wm/A/Yv8DcUi3nrYAumkqlDc=)
                          2: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: 4BssFUlVCn15IjMLZh1RoRLU72ih7BEBOSGN6KztWeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:86:95:55:18:ce:93:ce:2f:c4:9f:03:5c:85:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: Mar 29 03:00:52 2026 GMT
            Not After : Mar 30 03:00:52 2026 GMT
        Subject: CN=6272c86b0bc31fc161d7513a0cd192c9ef759068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:db:df:f6:2a:e4:fc:b2:57:1c:dc:01:45:
                    99:a8:ba:90:c7:93:60:c8:c7:38:b2:78:bd:27:34:
                    67:94:91:16:69:2d:67:0d:cb:d1:08:66:de:02:a6:
                    ca:39:c4:9b:a4:42:41:03:e5:c6:82:77:37:bc:cc:
                    29:90:0c:08:53:87:b6:42:8e:45:5d:dc:86:33:57:
                    f9:03:d5:59:45:42:07:f0:d3:bb:c8:a9:f2:bd:08:
                    c4:dc:fc:6b:2c:37:d2:94:33:b7:f2:74:94:c9:a3:
                    69:17:3e:a8:36:d3:a1:a3:19:a7:b4:e3:33:89:1d:
                    9f:32:29:49:9b:07:61:d6:e4:12:08:0c:68:52:09:
                    7e:71:2d:5c:cf:72:0d:d3:15:c6:98:02:f0:35:cf:
                    3d:f1:7e:ea:8d:c5:2c:7e:87:69:a4:4a:08:0a:cf:
                    74:df:cf:ba:ad:5d:cd:2f:68:7b:e2:9b:2b:35:cf:
                    f5:e7:f6:8e:d7:8d:f8:c0:f5:0d:76:7b:24:fd:a7:
                    42:1e:8e:42:07:01:10:fe:0f:17:b6:c1:18:b4:69:
                    ed:da:47:96:40:0d:5a:3b:b6:1f:ce:10:b5:91:e2:
                    17:18:e0:cd:a0:30:c4:93:f2:cf:94:5e:7f:0d:b4:
                    7a:43:ca:b1:a8:1e:e0:04:83:8e:5f:83:66:3e:37:
                    0d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:C8:6B:0B:C3:1F:C1:61:D7:51:3A:0C:D1:92:C9:EF:75:90:68
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:31:ef:ab:df:68:53:f1:ef:71:f1:56:50:93:cd:4e:b6:7b:
         f7:e5:7c:b8:b2:c3:76:fa:27:97:2c:94:53:1b:a7:27:ff:b3:
         01:d6:a2:90:b9:12:af:80:13:ea:49:91:1b:8f:10:37:56:8a:
         23:2c:94:3d:f6:d3:b8:54:ec:7e:7f:14:c6:b2:e1:be:f7:54:
         3c:6f:eb:5d:39:ee:12:d4:80:62:69:dc:e2:1c:1a:4a:45:9f:
         96:5f:5b:53:53:d9:61:73:ed:0c:da:f9:f0:99:af:b9:9b:d1:
         11:28:1b:d4:ad:00:b8:f0:88:7c:c9:35:58:1a:7a:f5:13:eb:
         e6:3b:20:53:b3:4e:7d:27:44:48:45:9f:55:76:15:a0:79:fe:
         e2:55:1c:c5:14:da:ad:cf:a8:ec:27:1f:63:e8:ec:68:e3:d7:
         10:53:e3:e7:84:2c:8e:e8:8a:14:fc:98:0e:56:9c:91:f5:e6:
         7d:23:59:5e:4b:d9:b5:53:03:2d:f8:8a:cc:1e:f1:60:9a:f3:
         10:01:46:b4:5e:e7:5a:eb:c4:63:39:69:de:11:0b:53:85:f8:
         6b:98:2b:b7:c4:00:ab:e8:74:af:b1:77:dd:30:3a:ab:bd:9d:
         03:c5:a3:af:e4:96:84:31:79:e1:6b:3e:ed:e9:2b:f3:69:58:
         2f:48:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client