Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File:                     rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier:          UpSSIOXbbSsPkEGj0enOkXGyrYJcVkWxUIRtJt04CAM=
Subject key identifier:   83:E2:7A:66:5F:67:D5:87:09:86:7D:E9:2F:D1:71:A7:10:D9:03:B0
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer:       /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial:       019D273B148E7A63A2A1083D3FDD171394E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number:          0EC6
Signing time:             Wed 25 Mar 2026 23:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:16 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:16 +0000
Files and hashes:         1: e-FqLsmWRfG7hL5RbexGQG93a0U.roa (hash: 1pwDbwKlXgh7FVQpfpD5GQV1e5qWwIn7TQRZ0S2m00o=)
                          2: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: 0gCbjYYz7qxb6tPLYUOXyvuMTMRfBTy46pM4ZmYj5YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:14:8e:7a:63:a2:a1:08:3d:3f:dd:17:13:94:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
        Validity
            Not Before: Mar 25 23:01:16 2026 GMT
            Not After : Mar 26 23:01:16 2026 GMT
        Subject: CN=83e27a665f67d58709867de92fd171a710d903b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:d7:0e:97:e8:3c:3b:c5:0e:e6:28:91:ba:
                    a5:c7:28:28:bb:b1:99:91:b2:f7:71:6a:54:ed:15:
                    e4:cc:b0:83:21:ee:15:8e:d1:f6:39:fd:08:8a:75:
                    ae:98:64:05:98:da:34:7f:b4:aa:be:49:75:91:81:
                    f5:02:b8:b0:4c:65:22:16:79:e9:25:a8:a8:2b:46:
                    4e:75:86:b2:0b:0e:2c:35:40:bf:56:70:cb:42:63:
                    e6:a5:54:4c:20:33:04:b0:c4:5f:0a:c2:4d:ed:7a:
                    d0:71:79:90:9a:96:27:73:64:69:c5:de:40:cf:3c:
                    3c:1d:42:c4:6d:e3:3a:46:81:76:58:5b:9a:b6:f1:
                    87:a1:72:9a:86:c0:64:63:07:5e:7b:4d:9c:99:ff:
                    77:ee:43:5d:9c:02:12:92:7a:13:36:66:9f:56:d9:
                    00:93:0e:a9:ae:db:80:b6:68:b9:23:00:90:9f:e2:
                    6a:15:47:cf:88:1b:ef:89:d8:54:8e:17:25:39:c8:
                    e7:87:3f:ab:e3:dd:aa:c8:2b:20:12:19:c8:f8:d6:
                    ce:41:f2:b2:40:9d:53:75:d4:da:07:e0:5c:4e:42:
                    ca:42:b3:c7:75:8e:15:e5:d8:10:9a:f3:a9:0a:49:
                    cd:1c:68:98:be:92:57:0a:dd:87:e0:99:4a:8e:d0:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E2:7A:66:5F:67:D5:87:09:86:7D:E9:2F:D1:71:A7:10:D9:03:B0
            X509v3 Authority Key Identifier:
                keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:29:9d:9d:bc:d7:40:c2:e9:78:be:23:df:9d:20:cf:9c:a4:
         b1:65:3a:3d:46:12:94:71:50:50:ca:c8:aa:91:46:cc:3e:61:
         c4:a4:d1:65:2e:b4:65:88:37:40:51:6d:9b:90:20:c2:60:91:
         b0:f3:c5:06:e6:a2:35:71:39:4f:2e:57:26:d4:18:2d:70:39:
         9f:cb:c4:e7:71:9b:ef:3c:96:94:90:ed:ef:4b:5f:06:95:ae:
         d1:7f:e6:07:ab:a6:c8:8f:41:f5:ac:12:f7:b3:c5:47:5c:30:
         d6:a5:52:29:01:d1:87:3b:ce:c8:b9:02:53:22:ae:05:f7:bf:
         cb:d7:51:9b:26:c2:a9:a4:a7:0e:af:73:8b:7a:70:70:ec:ec:
         c0:a3:be:3b:63:f0:a7:6e:11:6d:93:74:29:52:40:de:de:f5:
         32:e8:56:4b:54:ea:80:19:91:21:19:56:2a:43:19:8c:ea:f5:
         fc:14:f3:ae:ae:ac:60:df:e1:87:23:f7:c2:c3:bd:bc:6d:50:
         e7:c8:1d:01:aa:76:30:9d:0c:41:12:1e:e8:f7:e1:a1:9e:db:
         7e:c9:bd:df:1e:b6:e6:cb:05:d4:c4:94:d4:0d:4c:22:23:ab:
         5e:57:5a:3d:9a:30:aa:ef:f6:f1:3d:5e:7e:87:ee:be:7b:6c:
         eb:f2:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:40 2026 by rpki-client