Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
File:                     E_6bzrriKLNsiDwn6lUY5wTBCZE.mft (raw, json)
Hash identifier:          P5+4mB3bNWj0WersWs2YP0iyYvQjCMN79sj/K+EEOk4=
Subject key identifier:   1A:79:E3:8A:CB:0A:92:3D:22:F6:FD:75:FE:F5:77:85:9F:7C:62:EF
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019DCE6337144E8D62BCCD1EEBE6E6D4D98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
Manifest number:          0CE8
Signing time:             Mon 27 Apr 2026 10:01:41 +0000
Manifest this update:     Mon 27 Apr 2026 10:01:41 +0000
Manifest next update:     Tue 28 Apr 2026 10:01:41 +0000
Files and hashes:         1: 3DD7IN1RUhoFtGejl5QLGTUPcbE.roa (hash: 9QU9RS48p4Gk8eFQ8qLmQJqFrlkSGfDL9zyv/+59Y7I=)
                          2: CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (hash: chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=)
                          3: E_6bzrriKLNsiDwn6lUY5wTBCZE.crl (hash: qh2QbPMO4TjY5wa6O5wwczcti9YqxWI8eg12RKUDouA=)
                          4: QI46eicieX49OrM0OPKuHdePV44.roa (hash: WEPMgLFqdCTHxuIP+JQV+EA0WeN2b1pXmwAA9gvatUY=)
                          5: TMIETZCkfwkv20GhYgXVDmLAdSE.roa (hash: rj6hnXGmK4tKBpRVA2yKPqqLtv9PZV5O4KXBEttP6pM=)
                          6: mjsGoAp4e_kLXrUHiayaH4M0-CA.roa (hash: 6IO5CYtAunsKToiFXX8O2RjnhdZWB3faGoUCU5YD+Ow=)
                          7: n2nCI-ptzMTQlle8XBsEF_kBMlc.roa (hash: R677cLGAhKw+n+X1YDl+AhJzznYJjl/tMQGRlN03THg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 10:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:63:37:14:4e:8d:62:bc:cd:1e:eb:e6:e6:d4:d9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Apr 27 10:01:41 2026 GMT
            Not After : Apr 28 10:01:41 2026 GMT
        Subject: CN=1a79e38acb0a923d22f6fd75fef577859f7c62ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:75:5a:1c:32:0a:38:5c:d0:68:96:b7:88:
                    45:94:29:33:99:fb:9f:ee:e7:fb:ae:5a:53:8e:2c:
                    cf:c9:f1:3b:5f:40:dd:4b:49:d7:38:7b:ac:65:16:
                    22:12:ac:89:fe:d8:90:2f:25:ae:63:32:88:9b:1a:
                    04:06:38:71:5e:25:b5:b2:7f:a6:b6:75:95:99:02:
                    a8:36:05:28:09:92:a1:3e:f3:9b:16:47:a6:32:53:
                    b2:67:0f:7f:35:cd:a6:fa:50:e9:70:c9:51:0d:f0:
                    51:b8:87:d4:39:14:9c:8c:5d:b1:d0:01:a7:22:e7:
                    04:c5:b4:e6:0f:e9:e2:07:64:00:dd:f1:bb:9d:bc:
                    f6:44:72:68:ff:32:67:24:d0:fc:53:56:3f:df:10:
                    01:3c:d3:ea:cf:ff:0e:b8:d9:c1:7d:c4:17:e9:8f:
                    c9:71:3c:92:05:14:b8:ce:da:23:52:f2:81:91:ef:
                    62:77:db:d6:88:a8:12:84:7f:67:ee:a6:89:a9:37:
                    10:66:26:ca:69:86:e4:8f:d6:d7:a2:77:5e:ba:bb:
                    f0:e0:f0:9e:8f:3b:ce:f7:51:92:2d:e2:e3:b1:bc:
                    c5:e3:70:87:d8:93:c2:b5:e0:c2:84:6f:c8:dd:7a:
                    91:0f:76:13:28:4d:51:37:32:5d:61:bf:15:32:db:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:79:E3:8A:CB:0A:92:3D:22:F6:FD:75:FE:F5:77:85:9F:7C:62:EF
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:93:56:cc:08:07:dd:3f:d6:a5:19:d7:aa:4c:a6:56:13:
         e8:bf:2c:da:7a:d5:94:47:64:02:9b:9b:f6:12:8c:4e:db:33:
         c8:fa:ed:26:5b:46:66:ed:df:96:66:61:e4:4a:76:fd:94:c9:
         06:0e:54:85:ef:0a:7b:fd:44:bf:bd:0d:f2:00:d1:10:76:5d:
         b7:41:73:76:a2:50:c8:f8:ce:54:48:c5:e7:b6:cb:18:d4:69:
         ae:1c:4e:75:e7:8e:bd:e9:83:ab:de:f6:31:cd:67:62:23:25:
         df:3f:8e:56:4b:75:ca:71:8c:d2:13:66:54:b3:6e:ad:6a:6e:
         68:16:77:2f:93:b2:2b:e3:56:1f:e1:32:6f:03:da:26:cf:db:
         19:86:d5:76:ac:fc:81:84:f0:57:d1:cc:e5:fb:10:fc:c9:1e:
         c4:17:da:aa:c3:6d:57:8f:e5:ae:7f:80:b4:79:85:f4:a8:3e:
         3d:f2:32:c0:cd:10:b7:fe:d2:b1:60:c3:72:04:00:85:f2:00:
         02:b6:95:64:1c:9f:03:57:92:39:cf:0f:c5:21:96:10:cd:9b:
         48:c3:3f:87:c4:06:8c:5c:e9:e3:49:65:e2:93:f9:03:1b:fd:
         27:27:fa:4e:3e:39:e4:3c:b1:79:30:92:74:49:49:9c:48:47:
         a7:fc:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:29 2026 by rpki-client