Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          F14rHQP/7OPhNZm+X77vjRV37DB2q1xV7T6ZmRpj/pI=
Subject key identifier:   0D:70:F7:F7:40:5D:F0:30:DE:5E:D8:A6:E6:45:7A:6D:EA:11:6E:58
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019D26CCD8D65D0A8E2D0748FBA67A6723C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          09C3
Signing time:             Wed 25 Mar 2026 21:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:52 +0000
Files and hashes:         1: EliSXZrgR1c36J3q5HEwgdzaHX0.roa (hash: FZup8urDRjoh+LhoPd+RJukJeWSAFbFgyU+lJveq7KY=)
                          2: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (hash: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A=)
                          3: akoyrsz0bJoDNQgMyC8c-JmQRQQ.roa (hash: nhX5fVxRS3e4icCOygzdch8SpwXkUN5wlZ7uTW93Gsk=)
                          4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: oDJrzhyguyxEnlRRtLtoXmzHRfk5PZtqMWuCSt8d28E=)
                          5: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
                          6: kIDgGMW1uXNaj9KusJXcTTlIh7c.roa (hash: PwAEtgyKC+fUUIGh92oSv3jyXm09MobuWsRtDnHhYsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:d8:d6:5d:0a:8e:2d:07:48:fb:a6:7a:67:23:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Mar 25 21:00:52 2026 GMT
            Not After : Mar 26 21:00:52 2026 GMT
        Subject: CN=0d70f7f7405df030de5ed8a6e6457a6dea116e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:37:1b:c9:b1:16:3e:48:a8:00:eb:81:77:
                    0a:84:e2:2f:a5:cf:5c:59:f9:42:d5:79:b5:9d:26:
                    41:53:87:24:77:d1:1f:d5:dc:14:4a:a4:4b:fc:ec:
                    02:de:f9:6c:61:72:1e:de:91:0d:fa:2e:37:e3:c6:
                    af:d4:93:b2:d0:13:dc:12:97:c9:0c:fd:9f:8f:3b:
                    ef:f3:03:1c:0b:66:35:9c:4b:00:fd:cd:6e:ab:ad:
                    16:1f:b2:f2:f5:ca:d7:e1:24:90:46:b5:8b:68:0a:
                    be:24:7a:27:9b:17:da:34:24:d7:07:1d:72:f9:b9:
                    e2:01:4b:d5:a3:cf:24:c2:b4:7e:0b:f4:b4:b7:8d:
                    cf:bf:da:e2:33:ba:94:08:3a:ed:71:4c:cc:09:50:
                    bb:be:69:10:4f:20:ab:78:73:8a:77:4f:7b:ce:21:
                    c2:c7:81:c0:69:c0:60:da:f8:cd:13:58:c7:e4:12:
                    a5:11:36:56:d0:64:2a:b6:14:88:ad:e2:e3:3f:62:
                    0b:cf:04:e3:e5:56:21:9d:cc:04:bd:59:6a:3b:7f:
                    86:3c:98:70:b7:cf:26:dc:e3:72:7a:ad:8a:1b:44:
                    dd:ca:32:56:26:36:d9:76:06:bf:e1:70:41:7d:df:
                    bf:71:89:02:28:ed:16:18:f3:84:8f:ab:96:60:06:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:70:F7:F7:40:5D:F0:30:DE:5E:D8:A6:E6:45:7A:6D:EA:11:6E:58
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:5f:b7:42:cd:d7:79:c2:23:c8:2d:95:be:40:ba:9a:4a:
         38:37:f2:09:71:41:f3:34:b8:c4:23:7c:d6:fc:c8:43:a2:ec:
         2e:1a:c0:ae:48:26:bd:d9:1c:32:f5:37:5a:54:9f:75:d6:d1:
         20:6e:fd:bc:aa:b2:9d:6e:83:eb:ff:b4:c2:bf:9a:8b:ce:a8:
         01:ad:2c:78:27:6f:14:f6:9f:b0:3b:d8:91:cc:27:20:99:fc:
         85:84:1b:88:88:4e:cb:f5:35:79:a1:15:72:ff:da:79:78:9e:
         ce:a6:41:06:bf:ad:9e:e6:79:0b:32:ad:d9:1b:84:8d:9f:85:
         c0:7f:73:8a:bd:d0:d0:67:13:4d:0f:50:e2:58:e2:85:82:88:
         27:eb:74:12:d8:49:bf:06:a3:c1:db:5c:7c:1d:a3:ac:59:d9:
         da:29:23:db:59:a8:2c:63:cd:b4:9c:92:33:67:93:ef:6d:00:
         31:39:02:f5:84:a0:41:62:11:df:29:4f:b1:bd:8d:38:8f:cf:
         60:64:80:f4:6a:1b:c5:04:c0:81:86:00:4e:0d:85:d2:76:e7:
         1c:0d:43:0d:c0:d7:46:5e:a8:0a:15:ea:7d:92:57:e2:19:c0:
         21:df:e5:63:fa:d7:f1:4a:70:db:be:05:67:26:db:33:1b:f1:
         9e:a5:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client