Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          gu0X3hUKHNBhyQhtbKoQlT99P/Fn0NueLPL+92pbLCk=
Subject key identifier:   B6:7B:92:61:87:53:41:FD:14:C5:A9:BF:DC:A1:7E:35:BB:C8:55:97
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019D386649E66C20AFE1338067E88DA140B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          071B
Signing time:             Sun 29 Mar 2026 07:02:00 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:00 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:00 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: ahG9Io5VmqsqC0TPRzgldr4sRFMjQ7kL+ch2RpjeIJo=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:49:e6:6c:20:af:e1:33:80:67:e8:8d:a1:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Mar 29 07:02:00 2026 GMT
            Not After : Mar 30 07:02:00 2026 GMT
        Subject: CN=b67b9261875341fd14c5a9bfdca17e35bbc85597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:e8:93:84:55:cf:33:1e:33:b0:e6:b2:3c:
                    69:82:18:09:58:de:30:0f:92:74:61:92:01:8c:ac:
                    20:81:9a:6a:0a:af:53:88:01:af:5a:9a:a2:76:11:
                    15:0b:3a:c8:12:6e:0a:66:4c:cb:1f:06:03:3e:21:
                    a3:76:bd:98:c2:c5:98:31:3f:9c:1d:a6:c5:2b:4d:
                    fa:49:88:b1:77:d3:8d:57:35:ce:33:bf:fc:32:95:
                    07:cb:ba:6b:05:c2:d5:7c:a4:da:1f:09:c7:90:fb:
                    c4:ce:22:a9:16:b4:b5:35:a6:6b:e4:e8:78:c7:cf:
                    bd:c0:b4:e4:6b:41:6c:0a:a9:c7:83:83:e4:e9:dc:
                    de:28:68:c9:46:8e:01:00:e4:55:d4:ae:c0:2d:4a:
                    d4:e4:ad:85:43:58:b3:3d:f9:ce:1a:6f:6b:9a:91:
                    85:1c:73:ea:77:64:eb:aa:f6:c1:52:d3:99:9e:48:
                    f8:5c:3c:c0:a9:c0:29:38:b4:54:a8:cc:b8:60:40:
                    21:95:3a:5a:8f:36:b2:e8:2f:7c:b3:8f:b6:24:8a:
                    1b:41:e5:55:1f:f7:b9:f9:1e:05:dd:60:92:a0:71:
                    a2:73:f6:92:a3:27:0b:10:71:e6:e4:ee:d7:8f:99:
                    64:27:35:6e:2a:78:e0:7c:ca:3c:a9:1b:3f:89:1a:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7B:92:61:87:53:41:FD:14:C5:A9:BF:DC:A1:7E:35:BB:C8:55:97
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:79:37:c5:98:c4:c9:c3:a2:14:80:bf:a0:8d:1d:f5:99:f5:
         e8:54:b5:9d:48:e7:4d:25:e0:87:9b:b1:fc:22:b9:06:aa:c7:
         ea:d6:1d:9d:cc:63:a6:25:14:05:51:e8:3e:4a:38:3b:4b:72:
         f6:a6:f6:0b:8e:a6:d1:7f:f9:1a:51:80:1b:f7:ba:3a:b2:69:
         ac:ac:49:20:9e:3f:76:82:80:ff:40:cc:6e:3f:4a:a3:db:6d:
         b9:fb:f4:16:92:7e:fe:76:39:60:9f:6d:ed:3c:bd:b0:71:36:
         e1:49:4a:dd:3f:d6:36:bc:cd:a6:42:95:aa:62:65:94:08:f7:
         9c:56:e1:98:a0:80:46:d8:8b:30:8c:fc:21:64:f9:44:44:06:
         07:70:1b:be:8f:44:91:a3:2a:8c:ac:60:14:a1:53:29:db:a0:
         2b:94:a1:da:40:c1:9c:db:51:a4:fb:05:e8:df:1b:83:20:4e:
         73:aa:57:5d:02:6c:e4:f0:fb:29:07:f0:60:dc:8f:cb:07:5e:
         62:32:94:23:64:5b:2d:aa:64:99:7d:98:c9:0b:3f:8e:e3:f6:
         77:d0:21:65:39:5b:a2:24:52:b8:97:d0:9d:24:14:3f:28:92:
         e0:e6:4f:80:2e:66:de:05:ed:46:ef:ca:11:b8:51:eb:49:75:
         1f:c4:90:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:37 2026 by rpki-client