Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File:                     5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier:          PNNIDpTDQ8adu0uo0QjCM3TscgJybhMKCF1car25/H4=
Subject key identifier:   41:D1:6A:22:4E:B2:8F:AD:4B:0E:DD:36:DA:9C:A9:EE:A6:BE:23:3E
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer:       /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial:       019CE47F41E67EFBDEE791EE3C055677E983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number:          0117
Signing time:             Fri 13 Mar 2026 00:01:10 +0000
Manifest this update:     Fri 13 Mar 2026 00:01:10 +0000
Manifest next update:     Sat 14 Mar 2026 00:01:10 +0000
Files and hashes:         1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: qdknoMXScYVLEMhBCONcOu828UYzi+25rQr6V5zH3JQ=)
                          2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:41:e6:7e:fb:de:e7:91:ee:3c:05:56:77:e9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
        Validity
            Not Before: Mar 13 00:01:10 2026 GMT
            Not After : Mar 14 00:01:10 2026 GMT
        Subject: CN=41d16a224eb28fad4b0edd36da9ca9eea6be233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:20:c8:b0:8a:b2:09:fe:ee:d4:d9:21:20:
                    cc:3b:ed:7d:fd:3a:da:d1:fe:08:50:48:15:86:e9:
                    2c:9c:56:00:93:e8:49:bc:81:c3:94:6f:6d:d0:67:
                    5d:94:c2:55:07:31:ea:8d:42:f1:2b:61:97:a6:4b:
                    27:9b:bd:4a:73:26:6e:0c:eb:d2:ae:2f:52:1c:6f:
                    2c:89:27:0e:2a:9a:90:93:31:14:ae:7e:91:07:f7:
                    8e:0e:70:70:c8:cd:11:bc:09:b6:da:0f:9e:6a:64:
                    e8:fb:b7:e1:8c:8a:27:3c:67:b9:93:13:36:c5:57:
                    5f:51:44:88:66:e0:16:39:35:d8:74:b2:16:2b:96:
                    d2:44:0d:30:3e:c2:41:33:f8:15:7c:69:e6:94:65:
                    8b:c2:b2:73:f9:da:e4:bc:af:2c:9d:67:fa:96:4d:
                    72:7c:e1:85:14:1d:f9:bc:b9:b5:7c:49:07:24:d2:
                    e1:af:96:21:72:ab:14:12:40:b2:5b:d6:fb:6e:4d:
                    ea:c5:e7:02:a8:08:59:51:42:e9:89:f5:9e:d1:9c:
                    27:48:1b:df:12:d6:c0:c1:38:28:11:c9:39:0e:87:
                    23:28:07:57:3f:89:dd:49:d4:ae:9d:9c:ac:70:aa:
                    ff:0f:58:47:f6:74:4f:d2:fe:f6:e0:d6:3a:a7:ad:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D1:6A:22:4E:B2:8F:AD:4B:0E:DD:36:DA:9C:A9:EE:A6:BE:23:3E
            X509v3 Authority Key Identifier:
                keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:65:3f:70:a2:14:63:55:45:46:bd:a6:78:4c:8c:91:c9:
         24:51:35:f3:4d:05:65:8b:76:1a:94:b3:f1:2a:9d:8e:bf:61:
         1e:f3:96:76:b6:30:a8:26:b0:f9:93:57:eb:4c:88:a5:dd:13:
         f0:bc:73:da:cc:52:76:35:53:c6:72:b1:ee:2c:e3:65:a1:c6:
         d1:a2:74:98:de:39:28:a4:5e:31:c5:26:ee:83:3a:97:f7:6a:
         1b:ff:18:0c:0f:b4:09:a7:4c:e8:38:58:14:27:9e:3a:78:c3:
         db:32:92:4a:62:50:5f:fb:24:6e:46:0a:6f:2c:63:8f:d2:c4:
         6d:f8:67:4d:05:16:ca:f2:5d:8c:66:77:04:b3:a4:7e:c2:3a:
         3b:9f:3d:ab:b3:72:ec:00:80:b4:7d:15:93:bc:84:a0:97:6a:
         80:3b:b0:51:32:41:89:c9:f4:a2:57:fa:a6:ca:d8:6d:51:06:
         01:92:b7:4a:b7:81:d9:4d:de:10:6e:38:05:c6:60:45:a8:d8:
         5c:75:4c:71:6f:c8:60:2f:93:7a:61:af:98:d1:71:be:17:77:
         78:6d:47:ae:79:1d:a1:d9:e5:d1:46:6a:c6:81:ee:58:a9:c5:
         f9:94:90:2f:94:87:a7:74:cb:81:91:7a:82:ce:a8:f7:c5:74:
         66:3c:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:15 2026 by rpki-client