Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File:                     EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier:          DpbSaM83ma+KRA0jl8X8tf707FN0zg2w9BIOgd8KF/o=
Subject key identifier:   E2:32:E0:3D:E8:D4:85:83:FC:66:FA:99:FF:F8:3F:B7:F9:D4:5C:E1
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer:       /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial:       019D39E55E74B2409CEC859276E32D267EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number:          06D4
Signing time:             Sun 29 Mar 2026 14:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:26 +0000
Files and hashes:         1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: wv4grdTT62cIrW2YJhsnXf3R1LNPfBJNhhp98cofa0Y=)
                          2: ygqVEItGIAPq201_EaX3RPM0SYE.roa (hash: nK2V1OaTjiUIms74l37fVU9XwfhRb41uIhN10QlUnmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:5e:74:b2:40:9c:ec:85:92:76:e3:2d:26:7e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
        Validity
            Not Before: Mar 29 14:00:26 2026 GMT
            Not After : Mar 30 14:00:26 2026 GMT
        Subject: CN=e232e03de8d48583fc66fa99fff83fb7f9d45ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:d6:ba:47:a0:2a:e3:4a:ea:62:aa:cc:33:
                    79:dc:71:7f:c4:e2:74:0b:8e:ba:6a:c6:17:b2:98:
                    62:85:cb:76:55:4d:90:95:48:72:46:de:67:1e:ec:
                    9d:86:8e:1f:d4:31:63:f8:7f:88:d8:d2:6c:96:44:
                    2f:87:45:35:e7:f7:56:13:78:4c:20:b8:d0:66:e1:
                    cb:ae:7b:d1:42:97:aa:2a:6f:f0:f0:48:39:b8:28:
                    9f:36:d2:36:00:2b:4e:0b:26:89:65:d1:fe:5d:82:
                    3d:60:31:17:a4:a8:8e:05:bc:6c:20:82:35:9d:2e:
                    a7:61:25:01:91:92:f6:18:3e:aa:70:c4:16:19:d3:
                    01:96:42:42:57:76:cd:2b:da:eb:65:a1:d5:1b:f9:
                    07:b8:0a:38:e4:ee:82:9d:a6:60:4f:94:d2:18:6c:
                    88:b4:b6:eb:f9:f7:c6:1e:c0:3c:50:55:74:b6:7c:
                    23:23:35:70:a1:b6:31:64:e4:75:9f:82:51:e4:77:
                    cb:c9:16:ba:20:b1:32:82:18:2e:48:cd:98:75:e2:
                    2a:05:3d:5d:90:07:2e:9a:09:d9:63:a0:8a:f4:d0:
                    d9:95:e3:17:ac:76:4b:82:dc:92:57:aa:4f:a3:99:
                    fb:b0:f6:f5:d6:2a:0d:38:7f:77:40:a5:f3:9d:ef:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:E0:3D:E8:D4:85:83:FC:66:FA:99:FF:F8:3F:B7:F9:D4:5C:E1
            X509v3 Authority Key Identifier:
                keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:99:0b:61:1f:20:22:a7:cf:5e:58:48:d9:d9:eb:22:7c:
         45:ff:ba:d6:6e:8a:ab:c8:ae:af:e4:e1:89:ea:ec:07:c8:39:
         a4:09:56:78:6b:aa:61:dc:1a:d4:59:df:0e:a5:69:e7:e3:b4:
         82:d5:aa:0f:01:c2:94:ac:4e:48:06:c4:76:77:de:d1:72:9d:
         5d:06:89:51:47:ef:3c:3c:5f:d8:ca:cf:e5:f5:9f:43:c5:1b:
         bb:3e:3f:50:e6:bf:3f:9e:47:38:c6:9a:fd:5d:97:69:ac:ed:
         25:c6:af:e0:78:0d:5e:ea:27:5f:d2:5d:04:9d:b8:ec:e9:76:
         5f:6c:42:0b:1e:a4:7a:42:2e:2d:dc:33:c8:ec:60:35:36:99:
         61:44:f2:34:be:84:ec:cf:a1:6d:07:85:34:9e:0f:54:2c:34:
         79:11:4f:04:85:cf:73:8a:18:05:99:7c:aa:9a:9a:9d:ca:f7:
         a0:1f:3f:91:e9:9a:b7:d1:66:97:e3:32:a4:8f:2b:20:13:69:
         8f:71:2a:47:44:60:10:25:54:8e:3c:31:7a:ae:92:b1:c9:29:
         e1:a0:84:f4:f0:23:09:18:d1:d9:71:db:2e:df:77:31:a3:23:
         3d:02:7d:93:a0:43:02:e5:b2:23:7e:9f:6a:76:b6:e0:ea:58:
         cf:23:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:36 2026 by rpki-client