Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          BpHTgdu4sZ0a/2WnOX7k0ny7SUJsrCBhUn92l14WdhY=
Subject key identifier:   23:63:64:3D:BB:65:78:77:F9:EF:53:62:49:BE:DE:87:B2:26:FB:43
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019D32D0FFEDC09F44753FAD413043FC4A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0E56
Signing time:             Sat 28 Mar 2026 05:00:50 +0000
Manifest this update:     Sat 28 Mar 2026 05:00:50 +0000
Manifest next update:     Sun 29 Mar 2026 05:00:50 +0000
Files and hashes:         1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: gOsKxZC7T3No5IT7OilyWF3ILJYH1ZigIB0gkmAag2U=)
                          2: gHzzrFjQIf1BnANrNt41xIyuTAI.roa (hash: gdosIj1Y84eNGwiRZ4XKtJBxF5aZNg2EDodOpabV+bc=)
                          3: qbcRyHpM1CjtLF8A8oEnsD79w1E.roa (hash: Z4p1smZj2qkNMUZ5G62ALv7SxS1dQGFfDFqEOgUC9rM=)
                          4: uV7OQJTuC4kYWor682k9f-C0_5I.roa (hash: q4UJtdgviUqdDZKlm/WdXXX7eWbJCWOwGJBJFpte8C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:d0:ff:ed:c0:9f:44:75:3f:ad:41:30:43:fc:4a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Mar 28 05:00:50 2026 GMT
            Not After : Mar 29 05:00:50 2026 GMT
        Subject: CN=2363643dbb657877f9ef536249bede87b226fb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:8f:88:af:3f:a5:36:8f:e9:d7:3b:5b:b0:
                    35:b4:a0:72:f7:bc:ef:85:14:7e:23:6f:f5:ad:5a:
                    21:4e:dc:7a:25:fb:47:1a:a7:14:d2:1c:10:2d:18:
                    43:7a:98:fd:ed:e7:d0:15:33:48:87:2d:0e:f6:85:
                    a1:0d:8f:e8:61:df:fb:0f:4c:b4:1c:e8:eb:1e:95:
                    58:db:64:67:b6:35:a0:81:34:3b:70:cc:23:cf:a3:
                    18:83:29:3b:6b:94:ca:e5:38:05:82:be:9f:03:e1:
                    7a:5d:63:b2:c3:95:ad:a5:ed:39:b7:0c:ae:1a:ba:
                    aa:d0:39:52:9f:cf:d6:ff:fc:3f:da:e5:3f:be:1c:
                    98:88:fb:54:54:55:c1:69:9d:ee:b3:6d:b6:79:da:
                    8c:05:d5:6b:3c:67:6f:83:5a:a1:7e:25:a7:68:37:
                    86:b5:64:7e:5d:df:aa:8a:0b:73:38:82:0a:94:87:
                    91:d1:24:c9:0c:1b:a8:24:c2:8f:00:01:76:4f:77:
                    89:a7:51:c6:6c:f0:5d:a9:cd:53:c0:be:be:be:5e:
                    b2:55:3c:12:61:da:05:15:86:a3:0f:c7:c5:08:21:
                    38:b2:8f:96:1f:4d:1d:88:21:9f:e2:8c:b6:8c:d2:
                    a1:a4:e7:ee:e8:6b:05:de:67:f0:c7:78:7b:3a:8d:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:63:64:3D:BB:65:78:77:F9:EF:53:62:49:BE:DE:87:B2:26:FB:43
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fc:81:44:f0:b9:7e:93:be:49:8f:79:d7:ef:b1:b4:02:fe:
         96:a7:90:59:af:3f:f7:a4:91:be:65:1e:aa:7b:9f:a6:5e:b2:
         f2:5b:e4:21:9b:ed:51:7e:c2:49:2e:7e:20:b5:d8:2a:5f:b9:
         de:40:2a:0b:2b:91:be:2e:f0:24:ab:a2:16:e8:8f:ae:6d:8b:
         ec:bd:8d:54:9f:54:cf:aa:aa:a7:7a:17:19:1d:0e:79:9a:de:
         18:42:95:aa:eb:00:89:aa:83:f1:93:6a:a0:36:77:f2:46:5a:
         62:aa:f0:69:f2:bd:2b:e8:14:2d:03:24:52:ce:77:74:a5:3d:
         f6:ff:ee:7d:90:52:02:76:91:a8:64:d4:19:cb:53:75:33:9b:
         8e:07:38:29:fa:6f:26:14:5a:d7:11:df:cb:9f:83:88:d5:01:
         1c:6c:b1:e3:e2:38:65:aa:d6:b0:cd:45:dc:54:c9:f8:23:76:
         3f:43:d4:5b:8c:d9:d9:da:d9:fe:35:a5:25:a0:81:b7:08:9a:
         31:c9:18:03:28:0e:5e:af:6a:83:f3:16:00:3a:88:a1:16:ab:
         8a:d0:03:e9:60:c0:aa:73:53:8b:c0:bc:35:e2:70:fb:15:d7:
         24:24:e1:27:42:89:8b:78:01:20:11:f3:cd:c0:12:af:d0:b3:
         5d:a1:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:53:15 2026 by rpki-client