Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File:                     cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier:          okd9YLoASv1nYORqCQ8W3E64UzZfwMi1H7Yw3b5lV70=
Subject key identifier:   40:78:E0:3E:78:32:F9:4D:0A:F5:C5:81:9B:7E:94:7A:A2:17:87:26
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer:       /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial:       019CE6DAA42EA6543CCE68A20036D168D758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number:          17D5
Signing time:             Fri 13 Mar 2026 11:00:14 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:14 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:14 +0000
Files and hashes:         1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
                          2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: /6x+7fi/gyQaxhqtJUg+TP75BcoydWXmZ7S7f9X+gV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:da:a4:2e:a6:54:3c:ce:68:a2:00:36:d1:68:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
        Validity
            Not Before: Mar 13 11:00:14 2026 GMT
            Not After : Mar 14 11:00:14 2026 GMT
        Subject: CN=4078e03e7832f94d0af5c5819b7e947aa2178726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:64:dd:63:31:dc:7f:22:91:14:1c:e4:e1:
                    53:78:2d:e5:53:a5:f6:c8:f1:c2:dc:cd:a5:4d:82:
                    96:7b:95:03:50:75:cf:19:0e:48:6c:0a:9c:f4:4b:
                    08:91:cf:21:e8:9a:d8:32:03:e4:2b:3c:65:60:d9:
                    77:42:7b:86:0f:1a:20:3c:83:29:99:38:80:31:f2:
                    b5:75:33:71:82:c9:da:27:ad:51:7a:ec:4d:df:20:
                    1a:41:dd:83:ff:5f:e0:15:5d:e0:93:de:4f:ca:b2:
                    2d:1f:c5:83:6a:42:59:87:56:32:f9:cf:ba:f1:2c:
                    6f:4e:db:7a:b2:ab:61:a1:78:8a:28:3d:14:1b:3a:
                    d1:d6:6f:e3:8c:b2:3a:cc:d8:bc:63:ed:7b:0d:14:
                    ca:45:09:93:99:e6:97:8a:5d:d1:2f:11:46:7c:ac:
                    c7:8d:d5:d4:6f:ec:48:72:b2:71:8e:5e:57:31:6a:
                    fe:be:8c:78:3d:4f:3e:da:e1:03:53:73:68:33:fb:
                    97:e7:b8:21:09:f9:e8:53:8b:6f:02:54:bd:f0:1e:
                    a1:57:24:8d:f8:c9:c4:47:f3:29:c4:b4:63:fe:f0:
                    40:34:7e:08:93:0a:0f:eb:b0:44:ca:a5:0c:fa:a9:
                    95:84:ad:d0:e0:cb:1d:c4:cd:d0:9f:ec:8c:9f:05:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:E0:3E:78:32:F9:4D:0A:F5:C5:81:9B:7E:94:7A:A2:17:87:26
            X509v3 Authority Key Identifier:
                keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:d2:48:8f:cf:b8:2b:f3:cc:d7:d8:45:22:fc:dd:65:14:
         2f:2e:18:9b:84:c2:bd:9d:b9:49:f5:b0:a6:08:6a:0c:89:fb:
         00:8a:27:b1:f7:71:da:66:b4:2c:56:22:50:16:40:ba:71:7e:
         0f:ee:6d:1a:29:39:4d:69:be:3c:22:25:94:8e:d6:97:76:ea:
         fc:75:d1:c3:fe:c7:8f:f8:bc:62:31:f8:ad:c8:7c:cf:63:02:
         82:1d:59:f2:32:fe:5e:86:17:a1:b5:fc:4b:43:48:b8:31:4e:
         05:16:ad:1b:61:48:6d:42:a7:90:58:13:e5:6e:a0:71:35:a7:
         6f:d7:fb:b0:ad:56:3b:82:f8:fe:ce:1d:99:49:31:50:6d:d6:
         fc:87:96:64:f5:9b:9f:d1:af:3c:63:85:15:3b:19:35:92:33:
         6a:31:b6:7c:ac:c6:b8:50:f3:b2:fb:e7:de:83:81:b9:2c:8f:
         de:fc:5d:7a:1f:73:87:e3:7c:00:23:8e:08:03:76:32:20:02:
         a5:b9:67:3c:77:18:22:7f:ab:09:69:9f:0f:67:3a:9c:a5:e4:
         07:8f:fa:0f:df:f1:1a:c6:9a:bf:09:ca:45:e2:d6:cf:22:d9:
         a0:79:01:13:ad:19:97:d3:8e:50:44:32:ef:07:cf:61:89:d7:
         2a:57:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:46:30 2026 by rpki-client