Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
File:                     6E31KvRgym-oySOkn1y3lepnB_c.mft (raw, json)
Hash identifier:          ai2x+HM+naqwFWYXLx03V1hCUTvVKraU9V+xQHA6pq4=
Subject key identifier:   18:F2:AA:88:80:35:13:03:D9:BB:61:12:81:98:B4:1C:94:7F:5A:F2
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       019D3A1C8C45B29E07415CEE460C475321D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
Manifest number:          0B36
Signing time:             Sun 29 Mar 2026 15:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:42 +0000
Files and hashes:         1: 6E31KvRgym-oySOkn1y3lepnB_c.crl (hash: hbzapcqm/EBdZ+PaI4lReJFvIdMilIZmsWH6hVUiP6s=)
                          2: Gelmt2dyq_XN8YdpKEuPQmN09eA.roa (hash: +DBE2rKsQVPzu0RclwrvCMPoUnuvCaTotWIVnHuK8zc=)
                          3: IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa (hash: AWvg3wl7fzu5i9djaKK4h6Y9sJ9Pr3WgdeDcYIz8ktg=)
                          4: USS4jDeuYyGXL2mwppDmvGGOpAI.roa (hash: 9+rfYSUljt29cuBfSL9LJuPSvB6IhVB21HVxTpdamQk=)
                          5: Yai7LBvRMViiUdeaDjDEDgA3LYU.roa (hash: d6mnraAJOyvr/ycKXQOhXrvBnydjo1H9ixxvEDF+5WU=)
                          6: jSr68ezMymtW56scD11bOLeYI28.roa (hash: xsIbi8zBStn7hsbtROXJNUEF3PIRInOiPGWrPR7zVJ0=)
                          7: kG9o92WtxtdlslnK36VPn0SNf1M.roa (hash: OXeUCoUsqDWHvih8GRMeRQbUwh35avks5fVUQM/vjSE=)
                          8: m3YOl3KcHPw0jUGNX-PfWukNeHg.roa (hash: +MhGdxnaLuhxZ2eCGlUOStLfg0KmoTa8/jNIH8bkEKg=)
                          9: s931y6R-0zlx2ez42IiM1gBgTIo.roa (hash: RTrkv7ongNF6gWxBGWrH9pDs7qZjN5vjg1SAtV6G9Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:8c:45:b2:9e:07:41:5c:ee:46:0c:47:53:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Mar 29 15:00:42 2026 GMT
            Not After : Mar 30 15:00:42 2026 GMT
        Subject: CN=18f2aa8880351303d9bb61128198b41c947f5af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:71:e8:1b:68:3a:82:39:70:36:2d:be:d0:72:
                    39:b0:4e:2e:cd:e9:89:1f:d0:82:77:19:40:e7:94:
                    90:17:6e:79:4c:73:d3:56:f1:12:94:2d:6f:85:2a:
                    0e:b1:a1:84:2a:b0:08:3f:21:2a:1a:9b:00:4c:95:
                    71:dd:9f:a0:ec:73:a0:4e:10:20:eb:d7:9c:46:b6:
                    13:9f:24:40:ba:de:e5:15:b8:8c:1a:fe:de:c2:d4:
                    f5:62:b6:f7:d4:c3:a0:9d:0f:b0:ef:9c:23:20:4c:
                    81:1c:ef:be:cf:b2:02:07:97:ab:c9:2c:4b:5a:75:
                    62:d1:d1:05:e7:5f:d4:20:5c:75:61:52:51:39:9f:
                    09:6e:5d:1f:58:73:23:57:aa:2e:44:c3:ba:5e:bf:
                    e3:bb:65:d9:36:0f:3e:ff:07:b4:fd:ff:f5:75:3b:
                    bd:c1:72:e8:d5:54:0b:6f:65:75:72:08:d3:5d:2e:
                    e9:58:46:4d:85:a6:f7:74:f1:77:2b:15:fa:c0:0e:
                    10:12:a5:4c:f2:c8:db:16:84:06:f1:0f:e7:32:c9:
                    d9:73:77:e1:77:d1:82:00:b3:ef:0f:8c:6f:18:25:
                    7e:47:c9:33:43:64:40:a0:04:b3:53:de:cb:88:e9:
                    84:7b:5e:a5:62:89:e9:e4:0f:a5:e4:d7:31:29:4a:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:AA:88:80:35:13:03:D9:BB:61:12:81:98:B4:1C:94:7F:5A:F2
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:61:99:5b:ca:1e:3b:c4:f6:ee:82:da:76:b3:ad:ba:bb:
         d3:15:b6:51:1c:2e:00:e2:01:cb:94:04:0d:68:e7:da:62:3d:
         90:5b:cd:dc:41:5b:de:db:d3:97:9c:cc:78:c0:f6:25:4d:f7:
         2e:f0:61:09:56:b8:5c:4e:0e:6d:ce:bf:31:68:8c:aa:3a:ca:
         11:d8:a5:3f:d7:dc:1a:81:ef:f0:83:db:35:f0:29:f8:2f:d6:
         34:0c:ee:a5:51:c0:26:fa:35:e5:e8:4a:95:54:f0:62:65:58:
         82:c4:a5:8e:cd:c8:21:8a:f5:2a:21:d7:35:24:6e:e0:57:a4:
         ac:06:8a:16:39:a9:20:16:39:8f:62:2f:cd:2e:3a:ff:23:52:
         9c:95:5c:54:ba:94:f6:ef:55:75:18:be:5b:f7:13:0a:73:ab:
         44:66:10:5a:02:db:f9:2d:23:b6:6d:48:2f:c3:85:08:f5:a3:
         d9:83:88:03:8b:23:96:7a:e9:d2:7e:0c:ab:80:c5:f4:4e:a7:
         97:b5:d3:c7:75:08:99:2f:ac:8c:9a:31:a1:f5:45:63:36:7b:
         2f:7f:d9:0f:68:b7:cf:ca:9c:4d:94:81:b2:ce:72:ba:7b:c6:
         33:3a:ad:e8:14:1a:5d:02:3e:06:58:dd:db:2d:40:f0:83:63:
         d6:05:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:36 2026 by rpki-client