Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          9WMIgPxHt/PrZYph7f+9aFcVOLFTCx7/YVafy/OvAmM=
Subject key identifier:   A2:53:B1:3A:D8:BA:2E:6D:26:27:F6:D2:B9:09:2F:99:F7:A0:D4:8C
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       019CE5C854EC653C480F4FF4BD462FC16FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          0E15
Signing time:             Fri 13 Mar 2026 06:00:37 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:37 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:37 +0000
Files and hashes:         1: brf91ENcAgUp0obWF-s4t0ccdXg.roa (hash: L3X4nsh8efFRGAeVZaXiM6ZqsZGp3bsgy9UCI0jKigw=)
                          2: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (hash: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: +HYgoJHUgf01CLGMoeNAr5wATqfePZaEqGnb2MvRqdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:54:ec:65:3c:48:0f:4f:f4:bd:46:2f:c1:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Mar 13 06:00:37 2026 GMT
            Not After : Mar 14 06:00:37 2026 GMT
        Subject: CN=a253b13ad8ba2e6d2627f6d2b9092f99f7a0d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:dd:57:66:a4:f3:de:06:3e:8c:75:9e:b7:
                    56:68:f4:f4:2a:9a:bc:44:ca:0c:e2:13:fe:a8:5b:
                    38:22:79:60:e3:8e:25:f1:04:2f:f3:97:96:02:ad:
                    08:16:b3:8d:56:da:ea:15:a1:a4:46:be:d8:86:12:
                    92:cf:f2:2a:7f:59:df:8b:38:a1:0c:98:90:c0:22:
                    f1:ab:c4:a2:d5:d3:d4:6b:96:fd:14:20:da:7e:ef:
                    de:0e:41:a5:63:d1:4f:cf:de:54:c2:08:04:7d:da:
                    75:cd:e3:87:c8:90:00:42:20:8c:e4:a3:76:4a:c4:
                    7a:17:85:c5:07:37:c8:94:28:f2:e1:f9:0b:9e:08:
                    8b:24:36:3c:93:01:21:cf:71:08:76:2f:cd:6f:34:
                    98:1f:c4:c8:ba:2d:ff:cf:13:b2:0e:66:f7:71:3e:
                    8a:33:78:5c:62:7f:db:1a:3f:82:fd:be:17:04:a3:
                    d1:ab:98:42:05:4e:03:ea:74:6a:b5:8e:20:1c:30:
                    1f:f9:e4:67:e8:38:db:15:09:f7:c5:36:82:de:26:
                    35:01:a5:fc:75:17:8b:98:f8:9e:58:a7:7f:5e:a6:
                    3a:ca:4a:79:d3:20:35:dd:e6:ad:59:c7:4a:eb:7e:
                    ed:ff:0d:92:57:d4:45:05:ff:31:ea:67:3a:a0:c4:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:B1:3A:D8:BA:2E:6D:26:27:F6:D2:B9:09:2F:99:F7:A0:D4:8C
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:cd:6c:b9:83:45:fa:c2:54:02:3d:e6:db:d9:e6:fd:a9:
         af:63:2d:08:5a:a2:bc:aa:f0:f6:c2:1c:ad:6d:e5:0b:2b:b7:
         51:c3:27:c4:52:2b:65:ec:f0:c7:77:4f:cb:54:7c:f2:7c:7e:
         99:00:3c:0a:33:00:60:55:d1:18:26:24:8b:d9:59:7d:f3:7b:
         04:c5:de:58:a1:69:59:6f:1f:a3:45:3d:a9:0e:15:41:fb:52:
         f0:ee:65:e8:2f:cd:35:81:31:0f:09:52:16:fb:a8:71:5e:fa:
         41:1c:38:57:40:51:bf:8e:ae:fd:19:e4:dc:ea:fe:2d:d3:53:
         4d:f1:1d:3c:a3:56:90:c9:27:55:59:ad:35:b6:1f:67:71:1a:
         11:a6:81:3c:2a:ac:0b:78:e7:4b:15:0e:74:92:ce:12:35:52:
         7c:85:0a:25:f7:a5:c4:7c:ac:d3:62:35:b0:76:a9:6a:cf:ac:
         1f:e4:99:8f:1d:b5:3c:71:f5:25:df:4f:48:b5:85:11:4f:5d:
         c1:78:8b:0f:9f:1f:dc:ab:7d:1d:26:f6:d4:5e:8e:77:21:1a:
         44:c4:82:d0:1a:8f:61:a0:67:96:4d:6e:8d:65:df:cd:0d:5b:
         9d:e7:70:0b:70:17:3a:70:84:23:0a:01:50:11:a9:b0:57:e2:
         cd:09:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:37 2026 by rpki-client