Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          vBXa3zR3/zbrd3uJG0seNqUGDIzKPE/BilLQen6nYrI=
Subject key identifier:   F9:7F:AF:CD:85:5F:72:D2:4B:E1:C7:BD:7B:4F:84:E0:B4:6C:34:9C
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019D389C4A301FDADCB08C10637DE945571B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          0144
Signing time:             Sun 29 Mar 2026 08:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:59 +0000
Files and hashes:         1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
                          2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: o7E94dIO+QqPW94hU72R6yu37kugUdBwkC8R8H6n8kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:4a:30:1f:da:dc:b0:8c:10:63:7d:e9:45:57:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Mar 29 08:00:59 2026 GMT
            Not After : Mar 30 08:00:59 2026 GMT
        Subject: CN=f97fafcd855f72d24be1c7bd7b4f84e0b46c349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:d6:85:e7:00:7d:a2:41:f5:c0:71:6c:2d:
                    2c:bd:13:d9:93:8e:62:4c:82:ea:bb:da:62:1a:30:
                    aa:ee:7e:1f:d2:c0:f1:f8:d3:d1:b0:b8:0b:68:11:
                    5a:f4:7c:4a:0b:8d:87:e4:fd:d9:e3:23:95:cc:c2:
                    28:7e:92:75:8b:74:70:93:29:82:0b:ea:2a:ab:d5:
                    1e:d5:4d:8d:ef:35:0e:d5:fc:c4:a2:f0:0d:bb:5c:
                    7e:21:ac:31:8d:e8:60:c9:bf:71:7f:87:8c:83:e1:
                    3b:11:b4:3c:64:04:da:5a:5c:71:44:a2:b2:a4:1b:
                    c7:10:3d:f4:ed:e8:81:a3:55:9c:b3:40:7c:05:65:
                    6f:0d:c2:70:4c:92:21:0f:c3:32:0a:1a:e9:a1:e0:
                    f8:78:df:81:eb:eb:0b:6a:01:ee:5a:36:87:97:64:
                    60:21:0d:80:78:82:81:f5:1b:2e:96:44:85:1e:7b:
                    ea:24:f7:d2:49:b7:cb:be:25:57:8e:ca:f8:6b:63:
                    bd:d1:40:fe:90:9d:a5:9f:93:d3:c1:73:eb:6b:6d:
                    d4:09:a4:15:c6:80:90:9f:01:99:06:7d:22:f0:6e:
                    12:d4:d7:64:ae:a8:1c:4f:57:26:84:4b:f5:1e:0e:
                    44:8f:01:f3:a2:d8:fd:b5:1f:31:73:a4:5b:06:13:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:AF:CD:85:5F:72:D2:4B:E1:C7:BD:7B:4F:84:E0:B4:6C:34:9C
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:a3:f6:cc:97:2a:9d:3b:1c:1e:3a:49:1a:34:c0:53:1b:
         90:04:8e:32:98:ee:e9:46:ec:6d:38:04:d6:e6:e6:93:59:4b:
         34:d4:f7:1f:d7:3a:db:50:88:f8:0b:83:19:55:ff:0d:c8:aa:
         7c:c5:ac:b8:6e:e4:29:7b:51:dc:26:d5:08:79:d0:0a:7f:60:
         19:f3:37:2e:d2:02:6a:83:ed:92:fb:ed:0a:cf:07:8c:8f:e3:
         62:26:f7:80:4b:4c:4e:e3:67:a1:b5:8d:52:02:cf:7d:c6:46:
         d6:cc:f6:a3:72:be:d7:93:6c:64:bf:12:8a:88:fd:c3:4d:1e:
         7f:90:51:21:df:0f:0b:98:db:23:46:8c:f7:2e:64:86:4e:d1:
         a7:0a:24:5b:a8:74:16:a3:84:fd:21:4f:1a:53:45:2a:33:b9:
         78:39:36:1e:4b:47:f0:40:27:69:0a:d9:ef:17:e8:2b:ce:9d:
         57:ec:f2:6e:5a:cb:c4:89:5c:4b:4b:18:e2:d1:80:8c:80:88:
         d7:2e:11:08:97:ba:9a:be:00:5f:2a:5e:b9:2c:ae:90:57:fe:
         68:a1:47:fd:43:57:24:72:3d:e4:1e:08:23:af:6f:69:e8:b4:
         f0:b9:ed:3f:9a:71:52:80:b0:73:7c:58:94:1f:39:e3:aa:ef:
         17:54:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:02 2026 by rpki-client