Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File:                     qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier:          VBunaQYxgbQ7egCQ7jytLGANaYUlSZg/VaTunhDtYZI=
Subject key identifier:   32:3F:20:B7:4E:7E:96:F9:D4:CB:67:4B:42:F6:2E:93:64:EE:46:B4
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer:       /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial:       019D39AECCBB35981EBA125729EE9C5C92BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number:          0DEB
Signing time:             Sun 29 Mar 2026 13:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:50 +0000
Files and hashes:         1: okBlAs2MxKegFun8jqPmx6S71TI.roa (hash: ROgvc03TJnSVXqJkAtutWAdPihx/iJeoNeNlOaYR9fo=)
                          2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: omkl+3w3QMnqtPjfOQp0HP0tf2E/gDsfFbm0x5fGIA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:cc:bb:35:98:1e:ba:12:57:29:ee:9c:5c:92:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
        Validity
            Not Before: Mar 29 13:00:50 2026 GMT
            Not After : Mar 30 13:00:50 2026 GMT
        Subject: CN=323f20b74e7e96f9d4cb674b42f62e9364ee46b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:1a:7b:99:05:5a:93:9d:de:bc:08:e7:d4:
                    bd:61:bc:36:5b:51:10:69:84:c9:db:52:ae:fe:60:
                    b5:3c:41:64:29:4f:89:2e:f2:85:d8:2a:b6:5b:1d:
                    96:07:55:6b:4b:b7:01:c7:5d:f6:2c:7c:1c:af:7e:
                    26:73:1b:e6:4f:41:5a:35:52:64:31:b5:15:c0:f1:
                    a1:a5:1a:82:e1:76:b4:55:86:1d:4e:c6:50:59:a6:
                    2b:77:85:43:1f:ec:4d:c1:8f:07:7f:88:d8:dc:c9:
                    38:eb:02:70:33:11:2f:ce:b6:19:c6:9f:ff:7f:62:
                    fa:f7:1c:14:89:bf:53:a8:2d:ef:d8:dd:e1:7a:5e:
                    21:53:e0:4c:ad:13:1d:09:64:fd:66:fe:48:6f:a9:
                    e2:f0:6c:e8:2b:97:ee:03:ba:3b:1f:12:a1:6a:49:
                    60:6e:9b:2c:87:4c:90:4f:a0:b8:1a:88:c3:ce:af:
                    6a:10:82:e7:06:d6:74:76:c6:19:51:c8:34:6f:80:
                    34:48:23:71:c5:84:e0:5a:95:52:88:f6:99:35:e7:
                    aa:2c:4c:da:47:9a:8f:2a:e8:f4:33:07:de:b2:41:
                    b7:06:f2:6a:67:77:4a:3e:f2:38:c3:90:be:71:91:
                    6c:54:92:db:d8:66:a5:91:16:1a:17:9e:40:e9:a1:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:20:B7:4E:7E:96:F9:D4:CB:67:4B:42:F6:2E:93:64:EE:46:B4
            X509v3 Authority Key Identifier:
                keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:14:2e:99:41:ab:31:be:35:55:af:9c:0d:59:de:f1:f7:99:
         c7:5b:99:90:b2:58:df:9b:e4:f6:bf:2f:44:e6:8d:18:c3:97:
         a9:cc:f1:3b:58:e0:81:ec:b8:0d:11:cd:bd:a6:98:86:78:34:
         5b:0d:9c:e0:33:df:9c:43:0c:5c:c6:6f:ed:33:ec:ec:b0:3a:
         72:77:a6:5f:a3:34:0d:55:cc:41:7d:4d:e7:02:86:b8:c1:a9:
         8b:f7:ea:ec:f6:b5:6b:54:64:c4:45:cb:55:29:fe:87:0e:80:
         dd:1c:72:e6:43:47:2b:5c:2e:bb:21:7c:dd:07:e4:64:6c:f1:
         cb:39:cb:8a:32:c2:f7:15:20:96:71:39:4d:85:e6:b0:61:ba:
         ac:42:8d:5d:00:36:25:6a:67:ed:99:85:8f:ea:7a:6c:20:8c:
         58:67:da:e0:a9:b4:93:49:ab:11:20:5d:1d:70:ff:09:8c:72:
         c5:db:1f:23:5a:40:98:a3:eb:17:48:41:cc:41:b9:d1:b3:01:
         ca:ec:ff:d2:b0:78:0f:a1:86:08:9d:28:04:cb:c0:ba:41:4d:
         3b:b2:a2:da:41:2c:19:e4:27:47:b7:16:b0:37:75:5e:3e:6c:
         36:dc:21:b4:64:a4:fc:a5:10:3c:35:f4:26:60:9d:e3:d3:f2:
         f3:f9:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:37 2026 by rpki-client