Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File:                     xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier:          JfLLZ6cBF3uQthtUCz4cH6dwLhO1k44/W4zzmzcOTOY=
Subject key identifier:   03:9E:2C:C4:AF:56:B3:60:D0:BF:02:F7:A3:08:32:B4:F0:E9:FE:66
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer:       /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial:       019D0E56DEC5738C27EC8E481AAC654B23FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number:          06C1
Signing time:             Sat 21 Mar 2026 03:01:07 +0000
Manifest this update:     Sat 21 Mar 2026 03:01:07 +0000
Manifest next update:     Sun 22 Mar 2026 03:01:07 +0000
Files and hashes:         1: 839re63sqp9J0YrYByZUfzIQurk.roa (hash: 98lbLdsyBHzdkZ4Kud1LUGcup776YisCahQcrBlEZ/A=)
                          2: AFxWP5v-LMiOayi2dIPfo8g0sew.roa (hash: oQfa2Ax5iDTsjYw9BSN32EY9FTl8mwhb+e6fN/Zrk+A=)
                          3: rRVCY9deulKKnDF9lQIosJo2pBo.roa (hash: z9eK7nmNMxVcT62wFywjBLXRE4xnhMoPZGziMsFutWo=)
                          4: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: h1ysty2c84v2wNjjTECnVXtrI/OoKp55qRIS+2C3Y3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:56:de:c5:73:8c:27:ec:8e:48:1a:ac:65:4b:23:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
        Validity
            Not Before: Mar 21 03:01:07 2026 GMT
            Not After : Mar 22 03:01:07 2026 GMT
        Subject: CN=039e2cc4af56b360d0bf02f7a30832b4f0e9fe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:69:c9:d8:4d:44:f6:ce:49:fc:a9:18:46:
                    67:eb:e2:19:7a:d2:cf:ae:ec:fd:dc:d1:93:52:28:
                    39:eb:93:8c:45:2e:3f:ba:85:f8:7e:cf:05:26:8c:
                    27:42:8c:1f:f9:77:17:5f:83:19:29:8f:3f:11:18:
                    07:cf:b3:7a:46:48:38:65:99:34:2f:44:a6:d8:36:
                    9a:99:95:15:b1:3c:9d:85:a0:b7:08:cc:8e:69:89:
                    06:0b:27:2b:f4:24:a6:e2:e8:1a:71:4e:13:cf:f7:
                    ba:0a:ed:17:a8:2c:7d:b3:5c:86:ae:bf:d4:ab:67:
                    b7:94:7c:fe:03:c7:57:8e:cf:92:9c:d7:5e:dc:88:
                    2e:6f:3f:48:6c:a2:17:8d:af:f5:d9:29:18:b3:03:
                    4d:f2:d8:07:0f:2c:ff:c0:a0:56:38:d7:b3:d8:86:
                    68:b7:25:53:90:8e:6e:a9:01:1e:be:c7:c0:e1:a8:
                    4e:ae:fa:5a:81:33:57:10:fa:77:ff:59:08:0a:00:
                    81:74:6e:85:63:1d:7e:0b:39:bd:38:57:05:5f:b3:
                    a5:a8:6f:9f:c0:9b:c4:94:83:44:26:97:d0:85:9f:
                    76:da:83:41:22:97:60:3f:e3:10:10:5a:49:94:20:
                    98:45:df:56:20:b6:d6:ea:d9:a9:14:79:d6:92:24:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:2C:C4:AF:56:B3:60:D0:BF:02:F7:A3:08:32:B4:F0:E9:FE:66
            X509v3 Authority Key Identifier:
                keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:77:a1:ae:1f:a1:15:66:71:3c:fa:f9:1d:5f:f1:45:fc:4e:
         23:83:39:47:2f:c1:c9:ce:ea:be:5b:e2:18:8e:0f:74:05:20:
         cf:4e:78:b2:cc:0f:99:d1:12:1d:86:30:c4:c4:13:9c:c5:17:
         d9:bf:b5:ba:36:38:7c:88:fa:d3:16:05:b6:67:04:2f:24:c5:
         dc:3d:ac:c1:df:63:55:56:ac:32:2c:53:45:8d:1f:11:7c:96:
         16:2b:db:15:b9:b7:25:ca:6d:22:35:2b:e0:de:88:0d:b2:6e:
         88:6e:c4:8b:b7:4a:f1:25:f4:bf:54:0d:da:77:7b:1a:ee:ed:
         e2:8c:44:6e:38:0d:58:cf:f3:0d:6c:1c:57:87:91:17:57:95:
         f2:b4:02:eb:09:e0:7b:d0:13:f2:3b:96:35:b0:e9:dc:2b:69:
         46:3e:51:5b:08:6d:87:97:9d:d8:db:30:67:ad:de:3b:13:c6:
         c0:8f:34:02:27:d3:b5:a2:6b:73:8f:24:e3:fe:47:b2:b9:44:
         5b:2e:04:02:82:7c:ca:9a:af:f4:13:50:46:32:2c:fe:5b:c0:
         cc:78:aa:28:58:9a:23:65:7b:d6:f6:38:94:91:c1:17:0b:ee:
         1f:44:53:01:4c:4f:45:05:36:e0:1d:e4:91:a3:3b:93:f4:fd:
         82:6a:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 13:15:47 2026 by rpki-client