Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          Hqfs5BElaciQmIaFNzbXz4kzrecAU44fbSevDDIL4BM=
Subject key identifier:   E0:0E:99:09:9F:AB:49:A6:2B:8A:F6:ED:F9:64:7B:ED:C5:AE:9F:9E
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       019D39099854F28B149283A0570AB3F0C89B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          0977
Signing time:             Sun 29 Mar 2026 10:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:23 +0000
Files and hashes:         1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: j84XaHm6kSAXqRfG4HF0FoNnW0hV+Nh4Alszp0Ta+w8=)
                          2: nfM87_cNIFSFao4mBuo9ap5n_Ds.roa (hash: clZcRSa2WjMsc93x5iPKZEXkrsa/Ap2DM4NOqed4YYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:98:54:f2:8b:14:92:83:a0:57:0a:b3:f0:c8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: Mar 29 10:00:23 2026 GMT
            Not After : Mar 30 10:00:23 2026 GMT
        Subject: CN=e00e99099fab49a62b8af6edf9647bedc5ae9f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:d2:8f:06:f8:4b:4b:08:e7:00:02:3d:b2:
                    f4:25:8a:27:f4:70:31:75:13:15:18:a1:fd:2c:0b:
                    0c:df:2f:02:7c:5c:39:f1:73:22:71:b7:f8:89:2a:
                    a9:b7:78:07:07:81:8e:d4:7f:0b:f2:2b:26:90:ec:
                    7d:e0:17:06:78:40:84:de:28:d0:47:b2:8a:99:c9:
                    bf:de:21:65:d2:e0:e3:74:64:bd:88:ed:48:4e:d5:
                    31:fa:c4:8a:7c:b6:0c:75:95:6a:32:35:4f:6d:6b:
                    82:c3:77:d8:2c:0b:f4:6c:fb:46:56:06:07:d5:27:
                    3b:f0:47:99:99:2b:6c:b0:27:fc:82:13:07:1b:c2:
                    9f:2f:74:70:14:0e:b2:1b:f1:89:88:98:2e:ec:49:
                    f9:14:84:fd:a1:d2:da:38:3f:45:d7:5f:91:8d:8e:
                    95:7a:9a:d7:21:03:61:8b:61:73:a8:ae:44:99:f9:
                    ad:7b:0b:b9:16:c4:09:1d:52:43:56:b4:62:3e:c4:
                    d4:5a:f7:f3:e4:2a:02:62:3c:50:7e:86:4a:5b:b5:
                    3b:d1:d0:53:2f:3d:05:1f:32:54:41:1a:70:48:de:
                    00:ce:c9:0c:8c:6e:26:b8:f1:16:0b:91:c9:07:93:
                    d5:ad:ba:2f:90:12:ac:c0:c5:4a:74:6d:7a:b5:c0:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:99:09:9F:AB:49:A6:2B:8A:F6:ED:F9:64:7B:ED:C5:AE:9F:9E
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b4:b2:99:eb:58:ea:d0:cc:25:8d:ca:34:03:98:0f:09:5b:
         4e:8e:ee:78:8c:c3:ca:1a:6a:53:0e:6f:fb:85:6c:bd:1b:f3:
         a6:34:8d:df:ec:00:9a:e6:16:40:34:0c:4b:dc:ba:e7:72:63:
         ae:a4:30:16:f1:43:35:9d:f3:ed:91:78:a7:c8:b2:67:b2:3c:
         b1:7b:9e:a5:99:69:9b:c0:92:94:1a:b2:73:c0:88:a6:6a:10:
         68:2f:15:76:c8:ba:f7:d3:d4:b8:4e:3d:5e:8b:55:9d:b6:c6:
         34:19:ad:b3:fa:92:61:3c:8e:6c:74:22:17:de:b5:27:5e:df:
         3c:0b:38:ee:3e:68:06:41:e1:6a:45:88:d8:84:39:dc:52:2c:
         ed:bb:3a:e4:b8:a4:fd:37:93:a5:a0:92:76:89:89:b4:7c:34:
         0b:20:1d:b9:50:1b:2e:ad:f3:14:e3:9f:16:39:86:60:16:4b:
         d0:e1:4d:38:65:26:63:8c:3e:a8:7e:25:7c:ac:d2:10:20:f8:
         f5:a8:57:5e:a7:c0:8f:0a:81:bd:76:0f:19:b0:7c:45:3b:bb:
         95:28:ca:d9:c1:4b:89:5e:7d:eb:a2:7b:cf:aa:07:eb:d3:57:
         5f:cd:ae:55:c6:36:90:a4:eb:90:a9:7a:df:b3:f2:b7:b7:a8:
         e0:9c:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:56 2026 by rpki-client