Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          8ADJMFrq5ksDeOJRhntpl+k4wsMF8/rk7hrdwfV0unQ=
Subject key identifier:   15:E2:31:70:E9:6A:62:5B:19:17:E8:8A:53:02:2C:0D:D9:50:B4:CF
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       019D18DA279B3FE1144F4DC5A9E589BD494A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1810
Signing time:             Mon 23 Mar 2026 04:00:43 +0000
Manifest this update:     Mon 23 Mar 2026 04:00:43 +0000
Manifest next update:     Tue 24 Mar 2026 04:00:43 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: kMR8doRqAGW5Fh+X/8ZeBK9z2kshEdAQ5BnibHBrDtU=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:18:da:27:9b:3f:e1:14:4f:4d:c5:a9:e5:89:bd:49:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Mar 23 04:00:43 2026 GMT
            Not After : Mar 24 04:00:43 2026 GMT
        Subject: CN=15e23170e96a625b1917e88a53022c0dd950b4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:79:f0:65:3f:c8:66:17:1a:52:cc:24:9e:
                    34:0a:64:d6:89:2d:0d:35:30:0e:a4:ae:da:b6:9f:
                    e7:9a:5d:b8:ab:ad:82:a9:82:13:4d:26:11:6e:81:
                    79:c4:5c:e7:9b:92:7c:72:bb:fe:ad:92:5c:71:2b:
                    20:98:6f:77:55:ca:aa:97:c6:29:49:3b:bb:72:b7:
                    c9:c9:16:41:32:84:30:5e:00:24:58:a3:2d:22:65:
                    4a:8a:c0:78:62:8b:df:46:58:d5:aa:ae:e7:ad:62:
                    79:b9:d9:30:1f:86:e2:06:f6:72:4e:33:5f:27:2d:
                    74:29:7b:d5:7b:81:8c:83:0d:fc:cc:7f:d3:a8:23:
                    d5:9e:81:de:2a:3a:5a:ff:40:7a:3d:4a:40:97:a8:
                    3d:f2:e0:cd:eb:6f:c4:ec:f4:3f:7c:33:c4:85:51:
                    47:f9:35:c6:f7:27:4f:9a:7e:81:8d:c7:e0:ab:af:
                    14:a4:ba:82:3f:d9:37:64:39:f8:b5:cb:d9:33:58:
                    5d:71:4e:f8:06:59:30:0c:4c:33:25:45:85:e3:3b:
                    c9:20:3f:97:c8:2e:6d:b8:43:44:88:8f:50:0b:7b:
                    4f:25:d6:af:82:41:bc:7a:58:45:a6:03:47:2f:d7:
                    90:d5:3c:39:92:ac:c1:2b:4f:6d:50:40:1a:f3:2f:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E2:31:70:E9:6A:62:5B:19:17:E8:8A:53:02:2C:0D:D9:50:B4:CF
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:ec:fc:5b:fa:75:95:ca:4d:85:ae:29:67:2e:cb:87:5e:
         ee:23:78:3f:d0:ad:d6:0b:9a:0c:df:de:fc:f6:56:97:31:a6:
         74:68:61:17:b2:e6:ad:f3:85:ca:7c:49:53:c7:e7:9f:21:da:
         68:56:65:59:ab:80:ba:e7:04:9b:36:16:c2:74:61:00:cf:b9:
         d7:69:f4:7a:b1:e8:69:fd:c7:1c:0a:60:19:f8:21:6f:03:c9:
         d9:e3:2b:2f:ad:23:e8:4a:b5:8d:dc:ca:72:23:7d:a7:ba:5a:
         fa:98:b4:ae:0c:f6:24:64:f5:02:56:94:c7:b7:b7:e2:b8:43:
         b5:75:6c:1b:b0:45:41:2c:fb:86:02:18:dc:e6:60:1a:84:4b:
         59:d9:1b:bf:ad:b7:97:13:41:5a:67:12:77:96:9e:db:18:76:
         be:ba:90:00:50:e4:9e:e5:5c:6f:9d:17:af:65:29:3c:ae:14:
         c5:38:db:c7:d8:46:af:d4:e9:0f:f3:5e:28:9b:08:d3:ed:dc:
         54:47:25:dd:22:95:58:97:18:63:27:82:4b:1a:97:db:07:df:
         35:ba:ad:b8:4a:5e:d9:db:df:06:a6:f3:84:32:f5:ee:8b:eb:
         33:43:01:0f:47:07:d7:a7:05:4b:0e:8e:91:06:75:4d:2e:52:
         2b:f6:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:50:40 2026 by rpki-client