Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          aMsZBj+ghdQOL4j2dUbSQopJa92ovCQUC+gCHML7WnQ=
Subject key identifier:   A1:1E:FE:7B:F4:66:8C:4E:BC:42:0D:3A:30:15:98:0E:A5:BC:67:C1
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       019D1AC97346A02844E864A34C9BDA4A89D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1811
Signing time:             Mon 23 Mar 2026 13:01:42 +0000
Manifest this update:     Mon 23 Mar 2026 13:01:42 +0000
Manifest next update:     Tue 24 Mar 2026 13:01:42 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: h6Nb6RyqBA/E0htPJEEprRtEe56NysotF75ocbIUiyw=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1a:c9:73:46:a0:28:44:e8:64:a3:4c:9b:da:4a:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Mar 23 13:01:42 2026 GMT
            Not After : Mar 24 13:01:42 2026 GMT
        Subject: CN=a11efe7bf4668c4ebc420d3a3015980ea5bc67c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:5d:e1:f7:7a:93:68:27:45:b6:83:84:2b:
                    7d:69:f6:13:a2:96:eb:0e:75:a9:6e:8a:01:3b:10:
                    05:d9:67:7d:c4:c8:bc:db:97:65:c9:19:4d:d2:75:
                    9a:a7:f6:54:84:8f:2c:a2:82:fc:e7:ab:fe:9f:61:
                    8e:76:cd:fb:3e:9a:a3:af:b6:a1:e1:92:83:e3:9f:
                    cf:db:33:66:43:38:92:d7:8e:ab:a5:50:8a:da:31:
                    22:ee:8e:c2:5c:b4:9a:8b:b5:ef:46:43:3f:25:98:
                    8c:2d:ed:a6:b6:b7:62:f5:a8:27:20:dd:9d:94:19:
                    90:6f:8b:07:b1:ce:f2:24:d4:81:1c:bb:5f:9a:f6:
                    a7:33:96:eb:47:3c:55:0c:5e:68:65:cc:47:92:1b:
                    f6:fe:12:05:fc:d8:74:2c:85:ba:4e:a9:ea:c5:be:
                    5f:2e:17:45:6a:00:e1:28:ab:f5:08:4e:db:7f:15:
                    59:5e:00:9a:8e:8f:0e:de:0a:d3:54:d5:7f:5e:95:
                    3d:18:56:af:3e:33:d8:22:46:8b:ce:45:93:b6:f4:
                    43:93:5c:6d:b7:ac:6a:9e:cf:7a:23:90:8e:bb:fd:
                    60:74:75:94:49:bb:a8:58:25:6c:18:36:0c:4f:53:
                    26:1d:0e:64:c7:0a:78:6e:11:87:73:c1:b1:61:17:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1E:FE:7B:F4:66:8C:4E:BC:42:0D:3A:30:15:98:0E:A5:BC:67:C1
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:dc:a6:68:5a:7a:28:35:93:31:e9:e1:4f:43:7b:cd:bd:
         93:da:a4:42:38:00:ef:62:fd:2b:f1:07:82:e3:67:90:be:62:
         ce:72:32:b9:e5:cd:c7:8a:49:bb:c0:df:9a:23:b4:bd:b3:d1:
         57:b8:7f:36:7a:91:25:ef:8c:9a:3d:d4:4f:0a:82:58:79:bd:
         a0:c5:1e:79:26:ec:e7:27:0c:0b:f4:2f:75:9b:9e:85:b1:29:
         9c:d5:3d:63:ff:38:b5:24:7a:90:c8:15:f4:69:ee:bc:e5:21:
         38:f8:6e:23:7c:49:c4:be:cf:18:47:8b:ef:91:74:93:f5:83:
         9d:09:08:a0:c3:e9:8d:e5:56:de:e9:74:5d:99:9e:34:2f:a6:
         4a:7c:ce:ee:62:1f:fd:fb:2c:75:62:39:23:03:a3:0b:26:a3:
         27:b6:dd:e5:c4:bf:cb:07:c0:09:46:52:38:1d:8c:70:70:94:
         31:94:ac:47:c5:7a:ad:0b:85:84:16:1e:6b:ca:88:b6:ec:35:
         54:c6:e0:30:f6:21:0f:07:f3:5d:6b:60:e9:47:f0:8c:cb:24:
         97:92:9f:9b:c4:69:23:db:7c:df:5a:5c:cf:c3:51:08:a2:e7:
         40:e6:35:d2:c4:21:3e:d3:3d:7e:34:77:45:76:e1:b2:19:7b:
         29:82:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 17:26:23 2026 by rpki-client