Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
File:                     6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft (raw, json)
Hash identifier:          onfM3CY6BTIKgLN0z/NA6LiEuc2enVBgXRYebRPubSY=
Subject key identifier:   9F:14:B2:27:C7:3D:79:2A:33:F4:D5:C8:25:E6:53:AD:F6:67:7D:5C
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019D3940E76E2DBACC3A009525A0B4EDC682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
Manifest number:          0CFC
Signing time:             Sun 29 Mar 2026 11:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:47 +0000
Files and hashes:         1: 6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl (hash: wIDjrrn8FmIVNNoTmLoeAOSiwoqadEXGStyenowsjIA=)
                          2: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (hash: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk=)
                          3: KaO-__UQ_4-yFi8MMxv305lzDlw.roa (hash: MPyADIXrlTVIshlYvvPri9A+eTXT/5p1O9Y/NNCFTew=)
                          4: myL47iydC8eKGLu8PQ2TD5S3cnE.roa (hash: l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=)
                          5: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (hash: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:e7:6e:2d:ba:cc:3a:00:95:25:a0:b4:ed:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Mar 29 11:00:47 2026 GMT
            Not After : Mar 30 11:00:47 2026 GMT
        Subject: CN=9f14b227c73d792a33f4d5c825e653adf6677d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:95:7f:62:78:d5:60:1b:3d:33:ac:52:26:
                    5e:46:bf:6b:4b:13:f1:9a:63:70:49:46:74:6f:47:
                    2b:10:24:8c:ec:a2:32:52:77:d3:0a:5b:97:9a:f1:
                    a8:72:85:de:5c:c2:e1:63:d5:62:03:70:16:de:1c:
                    67:db:30:8e:82:70:98:01:15:66:38:27:76:f3:ff:
                    75:5e:ec:24:d2:f7:84:b8:d9:6c:6d:a8:46:42:22:
                    12:cf:40:50:05:28:02:8b:22:ba:ba:3b:b6:56:7e:
                    e6:6e:95:dd:70:75:eb:20:d0:60:ae:c7:2d:82:99:
                    97:8c:f8:81:27:38:2f:15:5d:ac:02:8f:ed:9b:81:
                    5a:17:24:e1:8f:ce:09:c6:c3:ff:8c:15:99:e7:fb:
                    cb:e3:19:8e:2a:bf:c3:98:82:f0:a7:17:4f:63:c6:
                    8e:7e:be:42:75:7a:6c:4d:6d:d5:15:f5:e2:86:97:
                    58:e7:6f:ed:e5:1d:46:c1:56:6a:81:c8:8c:2e:46:
                    90:58:4a:74:0e:2c:f4:33:90:f2:41:c4:ff:38:d1:
                    04:24:67:1f:19:c8:cc:e5:d3:b8:3d:aa:e3:35:5a:
                    ef:b2:0f:d0:d5:cd:e8:51:07:11:bd:c7:ca:bd:10:
                    82:ce:21:d9:7e:af:c6:64:e6:3e:a0:36:74:a4:e3:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:B2:27:C7:3D:79:2A:33:F4:D5:C8:25:E6:53:AD:F6:67:7D:5C
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:0e:1c:3f:65:cc:1c:47:cc:de:ba:7a:6f:73:08:aa:b2:
         8d:5a:8d:3e:4f:b5:41:e0:47:02:ed:5d:ee:1c:c9:71:a3:ac:
         41:32:ac:b7:1d:d1:16:f4:2e:b9:64:c4:e0:2d:f8:94:e7:43:
         b7:3d:84:3a:7d:b5:dc:f8:1f:65:2d:d2:91:94:dd:7e:e3:75:
         a7:d4:6f:92:c3:39:12:97:d4:91:52:cb:40:f3:0b:fc:90:35:
         12:f0:bf:b6:a7:86:95:81:84:08:4b:80:e1:d1:e4:42:1b:c3:
         60:2c:d7:4d:1e:07:af:51:b9:df:af:81:81:d5:fb:07:b1:95:
         d5:6a:b1:d4:14:5b:7f:3e:68:e9:d7:0b:76:08:31:a4:b8:4e:
         1d:0d:0c:68:12:83:9b:b8:fa:ff:c9:ce:7a:68:57:6e:90:e9:
         89:36:67:43:03:c5:7f:f7:a5:75:94:d8:d2:77:48:00:ed:35:
         20:fb:2d:8d:27:cd:0b:27:40:78:6a:e4:2c:92:9c:5a:89:f1:
         5b:2a:06:f8:59:8d:3b:ce:e5:10:92:46:93:20:54:14:b3:d1:
         4f:fe:43:2c:15:bf:de:00:1d:32:2d:94:21:3d:f0:96:24:65:
         7f:1c:33:ec:07:0d:0d:04:15:73:9f:ca:60:6b:87:d1:3b:18:
         0e:ae:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:18 2026 by rpki-client