Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File:                     j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier:          e0hthY3aSwpA2nmUMspNQGVKaT7uQm5zRAlI5jN2/X0=
Subject key identifier:   EB:FB:F6:BA:DC:49:A1:40:E8:40:B5:3A:71:61:F6:EE:99:D9:B6:4A
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer:       /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial:       019D258440417C7BF41EC8876C2BFD8D03D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number:          0D66
Signing time:             Wed 25 Mar 2026 15:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:57 +0000
Files and hashes:         1: h-w3bAbfFKEQZ6TzPyZWg_mnH38.roa (hash: zud6rrdKB68sPZedKRRSWbaDWeVhd50z7EdhQ7bDmyk=)
                          2: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: +rscxkQdzuf2QTEQXMCbHoCI/nrn5zpaxTggdp7Yrek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:40:41:7c:7b:f4:1e:c8:87:6c:2b:fd:8d:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
        Validity
            Not Before: Mar 25 15:01:57 2026 GMT
            Not After : Mar 26 15:01:57 2026 GMT
        Subject: CN=ebfbf6badc49a140e840b53a7161f6ee99d9b64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:53:54:64:5d:07:ac:72:12:a4:ff:46:4d:
                    67:ee:03:94:bc:65:2d:39:eb:6f:43:6c:01:b4:d5:
                    cf:64:2a:9b:e3:e6:22:a0:6c:34:a3:f0:52:b5:92:
                    d9:a5:1a:97:0c:53:3c:16:2c:cd:33:44:b8:8e:98:
                    ec:39:d7:3d:20:bf:b2:c2:bc:86:8f:10:9e:b4:87:
                    28:b1:18:58:ee:3c:fc:df:00:cd:5c:40:0d:56:80:
                    c9:a0:bb:42:13:d8:fd:83:52:6d:58:32:d4:ee:08:
                    c6:8c:c5:4e:98:17:b9:a3:c3:8a:8b:9d:45:09:ab:
                    dc:ce:c0:65:53:3a:f9:16:36:44:24:17:b9:73:01:
                    20:03:b5:2b:36:77:3b:88:09:69:b1:cf:38:95:65:
                    b0:45:5c:b2:5a:4f:6b:6c:b2:7d:31:27:2e:7e:49:
                    ec:7d:1c:70:3b:28:28:ca:2e:cd:73:4b:91:e0:24:
                    ca:4c:e6:83:7c:41:00:91:6d:74:f6:cf:ad:c1:40:
                    ef:2d:99:96:7d:f9:05:1e:b8:2a:e9:04:16:20:05:
                    0a:b4:1f:4e:4d:cb:67:b9:b8:30:40:f5:4c:d1:24:
                    eb:ae:64:06:51:9e:e7:55:7e:62:a5:ca:b3:c4:4a:
                    bf:c4:65:1f:e8:34:eb:f3:e8:c0:b8:0b:15:dd:48:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:F6:BA:DC:49:A1:40:E8:40:B5:3A:71:61:F6:EE:99:D9:B6:4A
            X509v3 Authority Key Identifier:
                keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:a2:09:9f:15:1b:21:55:be:d4:a3:29:36:b4:cb:b3:a2:
         93:2b:f2:e3:65:34:75:0d:60:f2:15:e9:59:70:ab:da:d3:f5:
         d9:4a:9f:56:dd:65:38:16:b9:15:fe:d6:f9:40:23:2d:76:7e:
         8d:3c:3f:91:4f:11:ac:ec:57:29:c4:ee:b0:9d:ba:9b:d5:7b:
         c6:8f:f5:84:a4:52:22:12:f2:27:d2:b3:cd:b8:ac:fb:82:e0:
         63:db:c7:57:72:90:34:7f:07:fc:3b:d5:be:88:fa:82:1e:99:
         c6:9f:5e:ef:fd:93:56:8a:05:52:8c:5a:4c:81:e3:ca:a9:af:
         18:b5:1e:6a:44:8e:fa:83:21:5a:b1:ef:7e:4e:39:6c:25:c1:
         8e:02:f9:0e:b0:29:81:e8:24:d3:b6:1c:09:24:fa:23:de:47:
         18:25:9e:8f:04:ea:7f:4d:d0:f8:e2:4d:7a:0f:fb:80:c3:6b:
         a8:ea:f0:3a:82:7a:ed:6a:da:f8:78:2c:79:bc:80:6d:d0:60:
         43:b4:56:a4:aa:38:3e:4e:e1:93:27:74:d4:71:09:7e:ec:f2:
         2e:21:89:55:b1:f7:66:76:0f:f5:d8:e3:56:7b:46:24:8d:be:
         1c:46:3b:37:5e:90:bb:db:4d:c4:6b:b6:8b:8c:65:cc:f1:54:
         9c:b5:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:40 2026 by rpki-client