Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File:                     6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier:          YgWXrA/S7JmDnxNOSrLt4vD4w/spS/hJjYhxM2Zpq9Y=
Subject key identifier:   53:75:EB:E5:52:A9:7D:F7:F9:CD:57:7D:45:C4:17:BC:BA:7C:88:10
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer:       /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial:       019D3977A2426D76EE58C0A5B0FDF5A2207C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number:          0CF3
Signing time:             Sun 29 Mar 2026 12:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:34 +0000
Files and hashes:         1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: j2nmBgyZHGFGS4xTb6O0rYsJW/Z55e7a30looI++svg=)
                          2: CT0Lo8VqgOEZdE58c7bBWBtTHnI.roa (hash: COzxSOoTIXr0/+GY0oTls2bQVmuSF6l3DwdEZltDeBI=)
                          3: NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa (hash: z833UxZscO7V0+hUaFeEIUPRXOX0hAwFsN5RSRmYdiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:a2:42:6d:76:ee:58:c0:a5:b0:fd:f5:a2:20:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
        Validity
            Not Before: Mar 29 12:00:34 2026 GMT
            Not After : Mar 30 12:00:34 2026 GMT
        Subject: CN=5375ebe552a97df7f9cd577d45c417bcba7c8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:0e:fe:18:f3:4c:a0:f1:b2:9d:e0:a8:01:
                    3a:73:a3:5d:75:85:1c:db:e4:b6:e7:77:b4:2b:90:
                    5b:ca:30:db:7a:68:b8:23:35:a4:8c:dd:c7:90:70:
                    d0:83:c6:36:a7:c2:4c:1f:f9:ec:32:44:43:ec:2a:
                    ad:4b:f1:c5:2f:b3:ac:43:98:e0:0a:59:f1:ae:ac:
                    db:9f:47:68:8d:fb:01:ae:03:b3:bd:49:33:4b:22:
                    d5:ae:34:96:60:82:57:9a:41:86:f3:46:5a:f7:27:
                    99:c7:35:7f:d2:73:c6:e6:4f:b5:80:a6:cf:96:9b:
                    da:e9:cb:65:d5:a4:51:98:af:cc:3b:4a:11:e6:98:
                    ca:91:3f:a9:20:90:51:73:d4:6e:21:b7:6f:71:83:
                    3a:16:e2:d4:b3:1e:0b:77:52:f1:d3:a7:3e:e3:70:
                    3c:b9:4e:58:aa:be:50:4e:34:76:e2:90:45:8c:42:
                    f4:08:95:a7:99:cb:e5:97:22:13:f4:45:ba:62:08:
                    32:6d:b0:7a:8b:58:d4:b6:fe:42:c7:15:08:89:2b:
                    81:2a:e4:d7:e7:a5:fe:72:ae:97:2f:f5:94:9b:6e:
                    4b:44:65:50:c9:7d:11:80:94:f6:7d:d8:f5:7a:a1:
                    e1:cb:e2:df:69:f5:a0:13:9f:7a:45:34:15:f7:f1:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:75:EB:E5:52:A9:7D:F7:F9:CD:57:7D:45:C4:17:BC:BA:7C:88:10
            X509v3 Authority Key Identifier:
                keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:08:32:2d:42:82:14:cc:b0:12:ee:5e:f9:7a:22:64:36:99:
         7a:d0:a9:d5:48:eb:c5:5e:18:54:39:84:c3:f6:81:81:50:c8:
         4f:f8:b3:29:64:aa:87:e3:ff:23:51:d7:35:92:62:37:90:65:
         83:21:5d:5e:5c:f7:52:77:8b:0b:55:ac:0b:7a:bb:cc:ab:31:
         53:14:65:be:1e:b4:cf:06:25:7a:c3:01:9e:8c:47:6b:b9:66:
         e9:2d:43:d9:4f:08:8a:5d:3c:ad:71:49:44:a3:fe:32:ee:ff:
         5e:ed:e3:02:66:8e:13:5e:0d:b5:79:68:32:e7:4d:5e:22:b9:
         ab:3e:39:e4:07:50:17:11:2c:1b:63:b7:0b:8d:cb:8e:78:9f:
         e6:b5:5b:36:fd:2b:c7:1a:20:94:d1:24:2b:e7:12:a0:77:cc:
         a3:79:9b:e1:00:44:ae:bc:bf:70:1d:1b:ab:e4:c7:3d:4f:30:
         67:8b:db:a9:df:69:5e:18:a4:2c:01:da:b0:ef:0f:4e:26:28:
         72:50:69:a1:a6:01:90:3e:d9:f2:f2:13:ec:78:9b:d1:37:ac:
         ff:1e:ee:b5:da:22:c4:c5:07:0e:73:03:75:bb:82:5b:55:2b:
         16:9c:ba:fa:1c:39:c7:6b:85:8e:d0:01:cd:da:0c:ad:1e:c7:
         96:a0:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:16 2026 by rpki-client