Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          Thi1Fhy31JtEMjmtbh1gaD5TnOH/bYGmFQSb9ns9IT4=
Subject key identifier:   E7:DE:89:63:5F:42:37:DA:21:CB:9D:2D:B2:70:8C:48:BC:A7:2A:46
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019D394184310DAC9233EA134F950DBE64A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          1227
Signing time:             Sun 29 Mar 2026 11:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:28 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: LJWoINXdEoNTJBf3uzIhxhEiA3s8SyMjBkL+CdaidLM=)
                          2: F_7qyDHqywNLF8a2Ln9h7egAvhE.roa (hash: IjqDhnh8x9qZZNGyBMM7Oq3knBWv4p+u6LpclmDjTsQ=)
                          3: c6e857IVOZYjl5N7fY8HNnzYA24.roa (hash: Q3SE15YAjAw2UrzA85zUtD+5MpRr2HDjWbZqQ2fn2Tg=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:84:31:0d:ac:92:33:ea:13:4f:95:0d:be:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Mar 29 11:01:28 2026 GMT
            Not After : Mar 30 11:01:28 2026 GMT
        Subject: CN=e7de89635f4237da21cb9d2db2708c48bca72a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:67:ca:e7:16:78:b1:86:20:a2:1a:b8:21:
                    8f:0b:18:6e:9f:a8:2d:4b:75:7a:a2:ca:7b:c6:6b:
                    8a:dd:45:02:e5:6a:3f:a4:39:cb:07:00:1b:a8:0b:
                    1c:dc:bc:27:d2:0b:2c:c1:1d:62:08:76:33:e6:56:
                    09:d4:4a:66:7c:cc:93:71:5f:3a:31:36:d9:94:36:
                    02:5c:82:b6:5d:4c:37:49:14:a4:8a:92:38:96:9a:
                    28:95:72:6a:90:28:62:a0:70:aa:16:5a:45:ac:d1:
                    ea:f2:bf:87:e9:04:4c:a7:df:83:f6:76:94:69:79:
                    f0:6c:67:8f:fc:04:e3:d9:28:e6:19:f7:48:13:5e:
                    95:c8:ed:f9:e5:7f:c5:8a:cc:9c:da:4b:52:e9:15:
                    31:6e:77:da:ee:34:b0:00:87:75:d4:dc:55:e2:b7:
                    0e:a4:32:7a:8f:8b:f8:22:f9:dd:cf:73:d1:c7:78:
                    b6:3e:c6:7c:91:17:07:17:15:b0:1c:42:37:9e:e0:
                    e8:ea:87:21:f0:a7:23:91:db:05:3c:fd:84:ab:f3:
                    82:f5:16:e8:78:87:fb:f1:a2:17:d6:db:d4:a6:c0:
                    11:29:f7:f3:bb:8b:55:d6:0b:d4:60:5f:4d:bb:aa:
                    49:db:80:0b:fa:f4:29:17:35:76:d4:86:fa:e2:db:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:89:63:5F:42:37:DA:21:CB:9D:2D:B2:70:8C:48:BC:A7:2A:46
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:46:2f:3f:fe:f5:c4:c5:db:f4:16:47:ac:4e:0f:ad:07:bd:
         da:f9:e8:d2:3a:eb:cc:15:10:e1:c3:b6:81:fa:0b:97:50:81:
         e6:7f:a4:eb:b5:f4:fe:a5:88:f1:bc:37:ba:95:80:c2:52:f5:
         79:6d:bd:58:db:3c:b2:de:bf:33:27:aa:aa:d0:58:b1:60:03:
         73:06:5c:de:29:7f:e2:60:b4:2f:94:fd:92:17:09:6d:8e:14:
         73:81:06:ac:d4:45:a4:3e:eb:f7:d1:8f:1b:25:27:27:1a:8b:
         70:86:f7:99:f8:59:37:26:b6:80:e9:30:2d:22:97:2e:33:67:
         16:bb:94:e7:af:8a:81:98:b6:d3:0a:f3:d5:82:95:29:48:8b:
         10:17:75:b9:b8:22:6d:fc:79:59:90:7b:0b:cf:52:06:8c:d4:
         8e:99:f9:ff:26:f1:85:0c:3a:70:a4:ee:21:59:42:ff:55:6c:
         90:b8:8a:96:98:e0:c7:19:e9:53:71:e9:ad:58:8f:37:a3:ee:
         c0:78:ff:7f:56:0c:bc:e2:57:50:f7:1e:d9:67:d5:82:86:2f:
         e8:ec:f3:e7:b8:56:01:a2:62:af:f7:6e:aa:5d:10:6a:02:50:
         8f:56:da:21:b9:a4:6d:b0:81:55:fd:73:95:b8:74:59:2d:e6:
         af:16:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:44 2026 by rpki-client