Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          9tfHLd68vWA8gnKdhEwVaWuZtTiayA9tLNwJ+ZyYbnA=
Subject key identifier:   48:66:A8:AF:FF:B1:1B:EC:00:34:85:B0:6B:0B:51:05:D9:6D:F5:C7
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019CC117313D8BE66371F569F83D85EC63EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0ED5
Signing time:             Fri 06 Mar 2026 03:00:48 +0000
Manifest this update:     Fri 06 Mar 2026 03:00:48 +0000
Manifest next update:     Sat 07 Mar 2026 03:00:48 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: bDMTfiUvjLLbqyCHAyg3bFgLYyQbSdyxdfMNPihRoW0=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c1:17:31:3d:8b:e6:63:71:f5:69:f8:3d:85:ec:63:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Mar  6 03:00:48 2026 GMT
            Not After : Mar  7 03:00:48 2026 GMT
        Subject: CN=4866a8afffb11bec003485b06b0b5105d96df5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:ed:08:e3:cf:9d:16:4c:e9:37:5b:d1:a8:
                    2b:fb:99:94:cd:86:3e:a7:64:50:f7:6b:32:3f:b2:
                    8b:3f:9c:89:e3:b4:45:13:be:1b:8f:e7:d9:a0:e2:
                    fb:89:a4:73:20:d4:a9:41:19:d5:5a:61:5e:04:c9:
                    87:0e:9c:1f:61:5c:18:da:e4:ab:0c:0a:6c:4b:d8:
                    39:cb:ef:64:42:75:9c:b4:ec:ff:a9:c7:7b:ef:c2:
                    f5:cb:99:46:09:f0:e9:1f:9e:46:8f:02:80:f7:48:
                    6e:19:7c:f9:39:a6:7b:fc:a7:14:54:7d:23:7f:f3:
                    35:fe:61:de:ff:8d:32:84:08:05:98:33:fb:60:5f:
                    6e:fb:76:09:d4:a7:a7:1e:39:a1:d4:99:2a:99:71:
                    f7:e2:11:52:90:5c:66:c2:5a:1e:26:18:f7:63:c3:
                    09:b7:46:8c:92:85:97:44:9f:d5:91:f4:76:23:87:
                    a7:53:0a:34:90:f4:82:3c:8a:41:e4:1a:9e:85:83:
                    a8:c7:04:9e:df:06:c6:a3:8b:bc:44:8a:0c:ed:1a:
                    78:56:7f:46:65:73:1b:91:50:0c:23:83:86:3a:45:
                    66:54:b6:a4:47:7b:da:e3:ab:8e:90:2b:b2:ef:59:
                    e0:38:b3:06:e1:9e:ad:28:c4:98:6b:28:c7:56:5d:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:66:A8:AF:FF:B1:1B:EC:00:34:85:B0:6B:0B:51:05:D9:6D:F5:C7
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:29:28:44:82:eb:fd:18:52:31:15:39:0d:f6:ff:1e:2a:
         01:c7:08:b1:65:b3:e9:63:1c:8a:cc:d4:76:d7:fd:e8:f3:42:
         48:6e:2e:56:05:f6:b5:b9:2a:be:35:65:d5:1b:b7:11:d0:b4:
         a9:27:db:c4:86:33:a5:6b:a1:a2:60:1a:f4:85:15:a9:3e:e8:
         32:99:93:af:c0:c2:c6:04:5c:5f:f0:ef:13:65:84:75:09:87:
         c1:0c:1c:69:1b:a1:79:8c:6b:7a:bc:77:67:21:3c:9b:f0:75:
         d6:6e:da:ad:18:73:08:2f:99:d1:e4:76:f3:c7:8b:e3:f4:5a:
         e4:25:9f:d1:4f:36:5b:27:75:da:df:1f:bf:9c:73:43:d8:b0:
         e4:f1:8a:af:92:48:cd:f0:cd:4e:d2:76:bc:80:1f:aa:65:98:
         33:d1:5d:70:14:f6:31:22:bc:67:77:be:5a:c5:fb:6d:e0:db:
         ea:cd:e7:98:7d:ed:47:c5:7c:1c:d3:e5:4c:6e:92:4a:0c:46:
         78:14:2c:11:cf:f9:43:88:99:8e:be:d8:4d:b5:86:a7:77:7d:
         d3:6b:c8:65:58:6e:e1:fd:1a:3a:e2:1a:92:cf:e9:08:74:f5:
         f4:5f:ee:76:21:45:6d:83:39:14:49:6c:ed:bf:0b:1c:4f:a4:
         4f:e8:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:48:15 2026 by rpki-client