Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          iTN7FkgGio6V5jmTxDKxS3qjL1SpvhmYtth0dVfTp+A=
Subject key identifier:   E1:16:EC:A0:EF:F1:88:BA:7F:69:73:88:3C:EF:DC:10:E9:C3:FA:03
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       019D389C483C79029B77632BEBAB7ED51062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          0F0D
Signing time:             Sun 29 Mar 2026 08:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:59 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: P9GK2SgUV2vbr+7SwvAlTpGLUOWCr9QTLa3ZUpsnUDs=)
                          2: 7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa (hash: 9/Cnn9Mz/GVeQ/OrX2MtzdspTFn1KWilYOYP/ODpG8E=)
                          3: 9KB6jsA15iDe5hTvYqZPtVlVLBA.roa (hash: dgedybpWr2Mko0EXnuNN0p3FXF1lj/f5Eij3mnR2u6A=)
                          4: rWa57xsNqA6h9p133SuFrfwT1jU.roa (hash: nyGSyY5avNWGsV5nwcg1OwYhIlMW5PE6DQJT9vvTzMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:48:3c:79:02:9b:77:63:2b:eb:ab:7e:d5:10:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Mar 29 08:00:59 2026 GMT
            Not After : Mar 30 08:00:59 2026 GMT
        Subject: CN=e116eca0eff188ba7f6973883cefdc10e9c3fa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:bc:19:a0:d8:e3:c7:33:22:50:49:9a:ca:
                    17:d3:cc:1b:ea:67:7e:71:be:21:16:95:2f:b0:e5:
                    d1:21:be:b6:3c:34:9b:02:7b:34:e0:90:28:48:93:
                    82:c1:64:e6:43:24:03:13:81:d6:9a:f4:56:d9:b4:
                    61:bb:ba:3a:6d:fe:52:5f:27:3a:40:1b:a1:df:21:
                    b4:9c:95:f0:13:1c:28:d3:d3:be:62:ca:6b:42:38:
                    52:f3:24:7a:8e:cb:ab:71:c8:f3:b0:e9:69:00:7c:
                    cf:dc:51:be:34:11:d6:8c:fe:61:9c:1f:60:3a:b1:
                    a5:2a:e7:32:19:38:d9:0a:6a:ef:7c:da:64:ac:24:
                    57:75:c5:c4:ad:1e:c0:c3:e8:6a:57:98:13:ff:e9:
                    eb:6b:d9:9f:9e:ed:07:3a:9d:63:d7:ed:43:aa:da:
                    26:44:bf:10:01:22:6e:ab:90:87:41:44:6f:00:ec:
                    5d:14:41:b8:1e:1e:8c:70:aa:04:97:0c:fe:d5:3a:
                    fc:86:4e:69:69:47:70:3d:3b:95:1d:52:ff:b5:9d:
                    a2:31:70:ea:01:08:84:94:4f:18:1e:be:83:5f:4b:
                    98:97:eb:5c:d7:9a:a1:51:c3:f4:ac:ce:0a:3b:7c:
                    e6:5b:a7:c3:a8:14:7d:ac:68:9f:78:fd:ab:cb:22:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:EC:A0:EF:F1:88:BA:7F:69:73:88:3C:EF:DC:10:E9:C3:FA:03
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:14:a7:54:1c:b2:d1:d3:e3:de:64:af:ad:9c:47:d3:69:
         8a:63:1e:8d:11:94:7c:68:40:e8:25:97:b7:92:44:d8:a9:ab:
         54:4a:2c:f0:00:0f:9e:c9:74:9c:b9:fa:49:4a:4d:27:d3:2c:
         84:31:d0:e0:c0:45:9d:67:79:8d:d4:cd:f5:20:59:e7:81:ff:
         3d:59:d0:6e:06:08:dc:6c:b3:65:e7:93:06:cc:19:c5:ff:4c:
         e6:18:32:98:ad:71:db:0a:63:b3:ed:4c:c9:21:9b:c4:32:c5:
         2c:b1:26:b5:95:7b:ce:4f:09:2a:95:e7:6f:a5:0d:46:6e:5a:
         73:fd:95:f6:b8:25:9d:9a:e5:f4:48:22:b4:4e:aa:58:bb:d2:
         89:f8:bf:e9:36:c2:56:48:1e:e1:3a:ef:ed:fa:23:ad:53:a6:
         1c:b8:b7:f7:57:f9:1c:c1:37:fe:82:77:36:f2:32:0b:eb:05:
         f2:77:3b:dc:36:46:b6:6b:55:c5:e3:b6:e3:f9:c9:e5:80:ff:
         35:fc:07:4a:59:d8:72:2b:f9:a7:87:fe:f3:28:ef:fb:be:64:
         7f:5e:b3:2a:6f:4c:cd:d0:aa:2e:74:58:2b:14:0b:c8:0c:6b:
         81:96:09:97:44:4c:fd:93:34:c5:d1:18:ea:83:ff:06:5a:cb:
         e3:e2:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:47 2026 by rpki-client