Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          8Sr0x09cajdt4glZLBMoCLoaM/HUK09mgoyTnRG1cdM=
Subject key identifier:   A1:75:8D:88:97:DD:5D:1A:EF:50:09:37:EA:AE:0A:A9:22:6B:89:C0
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019CE5240160246848627AAEED759E93689D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          0377
Signing time:             Fri 13 Mar 2026 03:01:07 +0000
Manifest this update:     Fri 13 Mar 2026 03:01:07 +0000
Manifest next update:     Sat 14 Mar 2026 03:01:07 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: EIjIjQ8bieo7VuBZ/4udcU+TIODv5MzIW6c9onErpyg=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:24:01:60:24:68:48:62:7a:ae:ed:75:9e:93:68:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Mar 13 03:01:07 2026 GMT
            Not After : Mar 14 03:01:07 2026 GMT
        Subject: CN=a1758d8897dd5d1aef500937eaae0aa9226b89c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:7b:5a:5f:d2:00:d0:27:5b:24:4f:64:f3:
                    4b:3b:b6:06:3b:c5:07:8d:57:bc:dd:53:7d:28:85:
                    c0:4c:a9:fb:3c:4d:f5:e4:a5:ab:4f:6e:dc:c2:48:
                    a5:e6:70:30:b6:a2:29:e8:ea:95:0c:96:a4:3a:1f:
                    d8:e1:80:f7:89:aa:1a:5c:9e:54:85:a0:28:96:5d:
                    d6:96:a8:d5:b9:5c:39:3f:65:fc:64:ed:b3:0c:07:
                    aa:ff:6f:91:2e:c9:51:fd:84:9e:23:3a:d2:57:d1:
                    d7:8e:a6:a2:0a:54:5d:eb:4b:32:a1:8c:19:38:8f:
                    37:d7:f6:5f:b5:80:70:ac:d8:67:bc:81:e2:cc:9e:
                    4b:a3:d2:00:90:b0:da:b3:2a:ac:2e:1b:b3:d3:cf:
                    d7:91:8e:8c:5b:97:f2:e8:fb:bd:35:22:6a:4e:64:
                    ad:3f:82:31:30:b1:d2:39:8a:d8:cc:79:98:f6:9f:
                    4f:b2:b8:e4:bd:b5:d1:13:8f:9d:30:3a:1f:a3:22:
                    b0:91:b1:8f:11:9a:6d:4d:e6:76:a7:aa:e4:d4:c9:
                    75:1f:19:b8:28:c4:fa:75:8f:f8:82:6a:18:f1:d9:
                    0d:b2:3a:88:2c:c7:30:94:02:e4:33:f1:04:9b:f6:
                    bb:04:cc:45:30:f0:51:3a:eb:e8:1b:b6:b9:95:dd:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:75:8D:88:97:DD:5D:1A:EF:50:09:37:EA:AE:0A:A9:22:6B:89:C0
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:0d:05:f4:ea:7d:da:25:d8:d7:21:00:27:3d:4e:53:9b:
         51:d5:62:06:8b:24:68:18:f1:f9:cb:cb:60:d6:12:8e:40:b8:
         b9:ac:b2:d6:87:33:09:d0:1a:84:29:11:8b:06:c0:31:ef:5c:
         00:0c:91:e6:5b:81:7c:02:62:e6:aa:33:c9:3d:71:03:00:4d:
         e8:58:d4:3c:16:5c:90:4f:aa:03:f9:09:87:d1:df:05:41:12:
         90:71:e0:ca:bf:a8:43:d1:bc:bf:1a:ef:61:81:be:67:68:cd:
         a8:fe:93:b5:e0:c5:81:38:6a:bf:8f:b5:5f:a9:14:f8:78:3a:
         17:6b:c9:23:9c:07:b9:53:32:fc:85:bc:6b:86:bd:1a:56:a8:
         70:79:08:34:5f:d9:4b:bd:7a:f9:e3:45:4e:97:46:e8:3f:50:
         5d:45:82:1a:4d:42:1b:07:d4:8f:b6:b3:57:82:4e:05:28:c7:
         54:ea:37:00:84:67:13:df:be:17:4f:51:96:54:41:4d:42:e3:
         70:ab:ec:ed:3b:24:1e:bf:e3:a5:01:34:55:cb:06:0c:5b:e0:
         d3:55:da:29:56:76:dc:04:18:d7:8e:69:fc:e9:47:2e:f7:1f:
         1d:75:70:5c:df:2e:4d:51:3d:48:d7:b8:3b:98:b7:58:fa:76:
         dc:b4:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:21:25 2026 by rpki-client