Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
File:                     6suWQTrI8sFrlHlWiRdNenIgHvU.mft (raw, json)
Hash identifier:          CjFcVqkMeyAar6fl/68z6WR78W4EINczAeghH1D5nko=
Subject key identifier:   31:7E:B7:96:2C:7D:F9:87:7C:55:D0:A5:A0:69:9D:C9:50:CE:1B:63
Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Certificate issuer:       /CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Certificate serial:       019D37BFF3E2EC72EE5B8DB4BE0CAF0896D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 04:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:19 +0000
Files and hashes:         1: 6suWQTrI8sFrlHlWiRdNenIgHvU.crl (hash: Qnb0rvfO9gZbo1zp2EEsSd7m5QYQuU8wnmyJ/KXy+yA=)
                          2: FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa (hash: b+lMbH7aGqXO1dA4OC3I2proSJvRuAwpdIs6UIwXrBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:f3:e2:ec:72:ee:5b:8d:b4:be:0c:af:08:96:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
        Validity
            Not Before: Mar 29 04:00:19 2026 GMT
            Not After : Mar 30 04:00:19 2026 GMT
        Subject: CN=317eb7962c7df9877c55d0a5a0699dc950ce1b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:f0:ea:2e:f8:61:18:31:10:c0:f3:24:5b:
                    cc:25:51:72:9f:77:c1:fa:8e:31:2c:67:cf:0d:1a:
                    b5:16:75:06:61:35:a0:1f:8d:12:40:9f:83:0f:db:
                    39:ae:91:ea:8b:59:06:bf:0c:e4:fc:cf:9e:81:17:
                    2d:76:b1:dd:83:3c:da:22:f4:67:87:b7:f8:2e:b9:
                    78:d4:12:bb:05:07:a8:65:12:cd:9c:50:30:ff:86:
                    ab:0b:49:b5:f7:f5:d9:d4:cf:eb:42:74:72:a1:dc:
                    21:71:d4:0a:fe:51:d7:b2:b4:44:43:e4:a5:de:e2:
                    b6:f9:67:42:e4:61:25:99:1d:be:cb:40:88:71:38:
                    f2:74:1a:e0:56:e4:3d:94:2d:60:fd:ab:4d:67:1d:
                    d6:a6:ed:a3:47:f5:ad:ab:f0:31:5c:26:c7:95:b5:
                    34:b1:86:31:59:d0:ec:d5:db:f2:cc:e9:13:94:71:
                    e1:58:29:6b:05:db:1c:17:f7:68:0e:6a:0c:10:3b:
                    f9:ca:ff:cc:8e:f4:9a:50:f9:78:55:87:b7:c5:86:
                    00:b0:26:a3:96:1b:8e:6b:70:24:24:47:19:6b:63:
                    e3:6a:a3:02:d9:48:a3:2a:19:96:b9:52:de:12:5a:
                    32:94:d2:00:42:52:d8:15:5a:61:4d:f9:29:ff:77:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:B7:96:2C:7D:F9:87:7C:55:D0:A5:A0:69:9D:C9:50:CE:1B:63
            X509v3 Authority Key Identifier:
                keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:2d:d0:a3:95:e1:ff:06:e6:96:3d:a0:84:01:f1:12:8f:
         af:04:50:1b:5c:a3:64:84:a0:a0:67:cd:04:a2:9b:dc:c2:9d:
         c8:fc:f4:6c:c4:a4:ec:af:fc:f8:16:02:a0:c4:bb:cf:13:82:
         05:d8:d7:d5:d5:a3:bb:f9:2f:58:22:18:a4:36:d8:2c:50:f0:
         c3:bf:6c:6d:fe:01:34:87:a7:4d:bb:e1:7e:2d:f1:bd:81:83:
         c2:89:b2:a2:f3:c0:a9:cf:46:e3:5a:58:2c:51:51:bd:71:8b:
         67:7b:6b:bb:33:a7:19:5d:91:ba:6b:71:20:02:6d:2c:59:0f:
         16:c2:f9:d2:6b:4f:9e:59:f2:67:4f:b8:d8:56:26:87:29:f1:
         ce:4b:c2:05:cd:b4:42:54:24:14:2c:1a:86:8e:69:65:0a:1c:
         2a:0e:7f:b0:2d:ed:bd:a5:5b:69:07:8f:6e:47:9b:18:92:39:
         13:48:90:44:69:0e:7c:44:06:c5:7e:b5:a7:a4:99:23:c6:c3:
         c8:a8:65:f2:77:18:7c:b8:84:71:0e:84:5e:0a:91:aa:62:e7:
         91:37:d9:1f:9a:02:fc:c1:0b:26:ce:e9:e0:a3:fc:13:51:e8:
         cc:bb:eb:57:48:43:36:23:b0:a5:c1:0a:a5:68:4b:f0:e6:f0:
         f6:0e:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:48 2026 by rpki-client