Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
File:                     0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json)
Hash identifier:          ilzjn6/MT4HPyQgbNN+BucdEugPf4kOitlPtbTEAxSQ=
Subject key identifier:   0F:85:89:DB:D9:50:61:00:20:1C:23:9C:E2:0E:5C:96:5F:25:73:AB
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       019D38D338AAEC835E3FB79EE6245B092210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
Manifest number:          0340
Signing time:             Sun 29 Mar 2026 09:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:59 +0000
Files and hashes:         1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: zbRcFsCxgR3T/7G/zjhMLa00oSUs7ROVEXxD7jJFzjA=)
                          2: AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa (hash: +/pOacDToZziO6c0C1gllfCOdF0TRNPZR7yMX+Y+tz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:38:aa:ec:83:5e:3f:b7:9e:e6:24:5b:09:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: Mar 29 09:00:59 2026 GMT
            Not After : Mar 30 09:00:59 2026 GMT
        Subject: CN=0f8589dbd9506100201c239ce20e5c965f2573ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:9b:47:43:d5:d6:a3:7a:60:84:b6:5f:f2:
                    8b:ce:28:e9:9a:09:fe:e0:6e:2c:45:f7:82:28:7e:
                    db:dd:0d:6d:f3:b5:f1:1a:71:9f:0b:fa:ab:2d:fa:
                    b8:4b:a6:fc:11:ae:46:9a:bd:e1:bd:57:4e:1f:07:
                    28:91:b5:3c:f4:b4:bb:9f:98:dd:a5:01:fc:48:dc:
                    63:db:d6:d3:6b:9a:40:92:f5:cc:13:4b:7c:5d:b8:
                    70:d7:5a:07:f9:64:42:8d:63:f0:37:b0:94:32:8d:
                    95:5d:db:98:fb:6d:5a:b7:54:69:67:21:24:60:b1:
                    e3:76:5d:e7:89:4f:0d:c3:12:4d:ef:70:25:e9:36:
                    1d:7a:93:a2:95:61:f6:6b:8c:6c:a3:5b:40:93:f1:
                    13:67:9b:80:1b:40:b5:17:c3:31:d2:de:66:cf:46:
                    a3:97:a9:10:0b:b9:11:93:2d:ee:c3:0e:5a:85:94:
                    fe:36:fb:b1:58:be:99:40:8c:b2:8d:c6:b0:c0:70:
                    ad:7a:41:03:43:93:2c:b2:50:bb:a3:f5:f7:0e:60:
                    a6:e9:21:a8:7b:51:a0:b4:14:5e:9c:1e:3f:51:80:
                    31:b8:32:e7:27:24:49:50:5b:83:5a:a9:1a:f2:97:
                    d7:91:66:ac:ef:91:87:07:12:7d:4c:14:ef:33:95:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:89:DB:D9:50:61:00:20:1C:23:9C:E2:0E:5C:96:5F:25:73:AB
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:6d:e7:39:dc:7a:46:11:ff:fb:59:d8:d3:fd:4b:eb:7d:
         78:32:31:cb:8a:22:c5:48:a5:10:32:72:7a:57:d2:41:25:74:
         1b:2b:e6:d4:5c:06:c3:71:b6:86:23:4a:e8:dd:93:e9:01:58:
         74:44:be:d2:cf:d9:ab:ae:e9:57:8b:9a:66:a4:22:73:36:4c:
         68:d9:cf:d0:5a:3a:cf:c7:ee:05:f0:02:a1:84:45:eb:ee:25:
         0e:6f:2f:7e:24:30:42:7d:1f:84:38:72:5a:27:1f:52:50:fb:
         98:05:51:ca:38:31:c6:88:87:05:4b:d9:ab:93:a2:53:48:df:
         84:a5:01:22:d6:38:6d:9f:fd:d7:ad:81:51:d3:50:61:4d:2c:
         44:9c:21:25:c9:b1:6e:60:37:e0:5f:75:28:ef:5d:5e:fe:c6:
         83:f0:b7:98:97:21:23:5a:b6:0b:0a:dc:8d:9e:1e:91:47:fe:
         64:7c:94:4e:5e:d4:f1:29:9f:b0:65:18:10:b3:f2:39:c6:51:
         a6:f3:2a:5b:7b:36:1f:a7:08:bf:f1:cd:bd:6a:85:b1:e6:f1:
         a8:5b:2d:2d:a5:41:52:bf:4b:f8:c7:8b:81:4b:de:80:80:8c:
         c1:9b:5d:64:88:68:07:07:26:67:b5:6d:9b:11:f3:59:cc:7a:
         b5:55:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:11 2026 by rpki-client