Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File:                     _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier:          I4LD55F0X2fuZyzqHUHSWmVQ65qges1Kkh/c6qhujF8=
Subject key identifier:   3D:45:BA:A2:BE:8E:BD:3A:84:04:08:9C:BC:8A:D5:7F:DF:5B:4F:A6
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer:       /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial:       019D2928F1744EDC13D5DE713357206F3452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number:          09BE
Signing time:             Thu 26 Mar 2026 08:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:42 +0000
Files and hashes:         1: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: eKw6mqAisSEaMy17hV3Kh2Wa4k/NE4CjhEFvf/54w8w=)
                          2: anzEyjHaXQLmItjwy5G_m7H0DIM.roa (hash: zkC5URyiIIzrvJgxvh+5tV7gFXiK26Z7Y7U8Tu17QQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:f1:74:4e:dc:13:d5:de:71:33:57:20:6f:34:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
        Validity
            Not Before: Mar 26 08:00:42 2026 GMT
            Not After : Mar 27 08:00:42 2026 GMT
        Subject: CN=3d45baa2be8ebd3a8404089cbc8ad57fdf5b4fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:8f:16:af:8a:30:10:5f:b8:c0:cf:9e:85:
                    13:c8:53:64:c9:44:27:f1:0f:af:45:64:e4:b0:fe:
                    a8:0d:bf:27:c2:7d:b3:1c:a5:be:f0:5d:6b:8b:fd:
                    93:7f:e8:4c:91:3f:64:96:39:8f:b6:33:06:f4:cb:
                    73:65:fc:6e:69:89:11:33:c7:7e:5e:81:3a:47:40:
                    53:25:f8:1e:4e:65:4f:be:52:89:c9:59:bf:91:38:
                    e4:ea:e1:2b:fd:f0:0a:eb:5d:65:a6:9b:84:9b:0f:
                    a2:05:1d:46:0c:e0:da:66:00:b2:34:f4:8f:6b:7a:
                    1c:ab:2a:bc:43:9d:7a:1e:a5:63:73:da:40:bf:56:
                    51:10:65:b9:48:d2:8a:ef:89:3a:f6:62:25:11:f8:
                    e8:60:5f:2b:03:20:57:1a:b7:ee:d0:e4:2e:6e:7b:
                    8c:61:09:b8:d9:7c:fe:02:f7:cb:bf:97:b9:a0:13:
                    47:41:b9:8b:18:ec:eb:1b:b9:89:28:d1:e8:11:7e:
                    f1:70:8c:59:02:33:6c:09:75:06:e9:9f:bd:29:20:
                    7c:2d:9f:fc:cd:23:0d:2c:e7:8f:60:3e:bf:7a:e2:
                    31:aa:3d:e7:88:39:4e:8c:92:ce:6d:6d:cc:30:4d:
                    81:1d:bc:cd:74:fd:1e:c7:21:40:43:13:17:5f:19:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:BA:A2:BE:8E:BD:3A:84:04:08:9C:BC:8A:D5:7F:DF:5B:4F:A6
            X509v3 Authority Key Identifier:
                keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:9c:6b:97:97:4f:98:32:94:22:ca:91:4c:98:0f:26:41:
         35:68:30:aa:90:bf:2d:8b:b5:57:f6:a9:72:bb:c4:46:81:c5:
         5b:37:b9:c3:d7:97:0c:14:f5:6e:84:57:0b:ab:4e:74:9a:9c:
         41:0f:2c:80:3e:2a:b2:02:25:d2:a1:a8:00:fc:95:d0:03:9b:
         2a:7a:16:5e:10:f0:15:ae:8a:85:18:f1:31:fb:04:1a:b2:3c:
         e2:64:15:76:aa:65:42:6c:f8:97:72:aa:0b:6f:64:d1:79:41:
         4a:ab:10:68:4d:1d:14:cb:1a:e9:de:ee:25:f9:32:eb:e0:5f:
         c0:87:6a:dc:5c:d3:89:1d:a4:ab:44:45:d8:0b:e3:a6:bb:83:
         d7:79:bc:a2:78:61:52:a9:56:a1:75:53:6f:2d:67:c5:54:8b:
         75:4c:c7:9e:28:7c:52:8a:9b:b7:6f:76:d9:84:21:ad:c0:16:
         c4:39:f3:6c:09:b6:35:b8:7f:bf:5b:c9:c6:de:03:f2:f8:35:
         93:1d:1e:1a:8b:6b:5b:10:dd:50:9b:b6:7f:da:91:35:dc:3c:
         c5:67:4b:9d:fa:80:1b:f9:81:38:60:18:56:fa:20:95:a1:2c:
         d2:52:eb:b2:af:0a:25:4e:1a:12:02:0a:ad:3a:32:65:98:8c:
         5a:0e:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:32 2026 by rpki-client