Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File:                     KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier:          fCNDg2G5Jp6KNnMJshA8jzavO7KJD4W+7ttObuEAaUw=
Subject key identifier:   BF:B3:B7:58:88:A0:B3:9C:DF:D2:09:93:CA:F0:23:7F:ED:29:7D:B8
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer:       /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial:       019CEA80EE147BF407C42A673991D67F124A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number:          0E66
Signing time:             Sat 14 Mar 2026 04:00:43 +0000
Manifest this update:     Sat 14 Mar 2026 04:00:43 +0000
Manifest next update:     Sun 15 Mar 2026 04:00:43 +0000
Files and hashes:         1: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: WH/k+EPQPplXUh8RX4TMy41GktN66AkB4+gDtVX9Fnk=)
                          2: kIs6vU_5ljQb4cSVoWNBteZ0-H8.roa (hash: OabjMAb0W2uKoTkr5HE3JkbIzlM2xxJX+I93/41q8w0=)
                          3: tFlecPj9faE5UuJPSXthpqNarpA.roa (hash: 5jCL7O74oBD5Kbdkv9c3bpe0JfXJwQwzffhIipXmb94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:80:ee:14:7b:f4:07:c4:2a:67:39:91:d6:7f:12:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
        Validity
            Not Before: Mar 14 04:00:43 2026 GMT
            Not After : Mar 15 04:00:43 2026 GMT
        Subject: CN=bfb3b75888a0b39cdfd20993caf0237fed297db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:50:53:d7:2c:78:8f:91:35:a1:49:d8:06:f9:
                    49:6f:10:c9:07:fb:cc:91:a1:dc:c7:51:6a:e4:95:
                    fa:07:5c:f9:03:54:13:47:a4:92:66:65:89:f3:2a:
                    c3:fe:4d:fb:6c:92:b5:95:ed:ca:43:71:08:32:7c:
                    36:34:90:4c:ee:af:e2:e1:8c:6c:76:cd:73:08:9f:
                    61:88:d2:c7:d4:6f:00:f6:cf:bc:eb:57:6c:1f:67:
                    2e:6e:5f:f5:09:44:a6:1e:84:6e:65:18:4b:84:64:
                    2d:d0:bb:15:e7:1d:e9:9d:ae:4a:b1:28:9f:76:c8:
                    69:46:b6:c5:99:38:c4:bf:66:5d:cf:2f:63:85:22:
                    7a:6f:a6:d8:a2:3d:93:84:66:2f:02:42:28:20:37:
                    35:68:e0:91:32:2d:da:1b:d0:af:1a:e5:9c:f8:03:
                    7e:17:04:9d:80:1f:66:9b:55:fc:02:ae:a6:93:68:
                    d1:b2:3f:17:a3:12:2a:7a:a0:34:ca:7b:4b:b3:47:
                    fd:54:6f:25:32:26:d8:b7:a3:00:3d:1c:ac:99:df:
                    6e:4d:70:80:03:1d:14:e8:2b:f2:54:eb:a5:8f:01:
                    cd:0b:61:f1:42:7c:d4:1a:38:ab:bd:58:b6:c7:d8:
                    25:81:2b:1d:63:02:3a:28:61:5c:e1:99:c5:2c:6b:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:B7:58:88:A0:B3:9C:DF:D2:09:93:CA:F0:23:7F:ED:29:7D:B8
            X509v3 Authority Key Identifier:
                keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:27:df:95:f8:57:f7:63:86:39:08:7e:50:2d:f7:64:d9:3d:
         45:0b:d3:1c:df:1b:71:2e:2a:e0:f7:1e:c7:74:08:e4:1f:62:
         60:ce:75:a0:22:8a:93:eb:77:07:a7:41:38:3a:36:9b:bf:ab:
         bf:17:ea:a5:b5:8f:1a:c8:dd:f7:79:86:4f:3b:2d:0a:db:74:
         b3:65:62:0d:e1:bf:5d:74:6c:85:ef:05:4d:29:46:3b:04:d5:
         3c:c7:88:79:37:d5:d9:ea:e3:79:a2:4f:81:17:ba:ad:40:6d:
         14:9b:4c:9a:43:1b:3c:1a:60:61:93:e6:30:20:11:8a:fc:6b:
         85:8d:ce:95:7a:dc:0e:dd:a3:0e:96:4c:80:b9:97:ba:3a:0d:
         bb:6e:92:3a:04:ff:7d:96:ee:e4:f7:e1:23:5a:85:6e:f6:fb:
         26:58:ab:41:c2:28:b1:79:3a:bb:00:93:cc:8b:48:8c:c6:bf:
         7d:9a:5f:76:2f:a3:1a:54:8e:8f:fe:4e:e2:7c:69:57:cb:80:
         f2:e3:ef:34:7f:2e:c4:2d:80:79:60:e8:77:00:30:e1:7b:0a:
         01:28:1c:78:e9:67:c5:45:dd:8e:7c:95:f7:be:f0:3f:87:11:
         f6:62:7a:d4:30:51:9d:b6:0e:8e:3c:0a:9a:9f:29:a7:37:64:
         c6:3d:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:22:12 2026 by rpki-client