Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          GozcAdX2NNx92jupjqYW3DCob13FmFvYM2nziic7+Is=
Subject key identifier:   A0:EE:6F:DD:0C:67:E6:B2:16:A7:4D:53:ED:70:B0:BD:D3:FF:72:C6
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       019D29616D6B001359A081366028CFDC3105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          07E2
Signing time:             Thu 26 Mar 2026 09:02:23 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:23 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:23 +0000
Files and hashes:         1: 6QCY8jj5sRY8B7ezrR5fko1Dd-E.roa (hash: l49J7qk23km7NfSNEycPtRd/ucFHA/W+KBsygR6cQ/k=)
                          2: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: LyPY7mixduYcrm0YzBML4p241sADw9oNVQBpztf+KlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:6d:6b:00:13:59:a0:81:36:60:28:cf:dc:31:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Mar 26 09:02:23 2026 GMT
            Not After : Mar 27 09:02:23 2026 GMT
        Subject: CN=a0ee6fdd0c67e6b216a74d53ed70b0bdd3ff72c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:b4:02:70:43:c4:82:f0:47:3a:68:86:3f:
                    a7:d0:28:39:dc:5b:7e:b9:59:34:42:16:5c:39:d9:
                    ba:8d:f1:c4:03:17:09:58:aa:17:59:b6:03:c7:e6:
                    7c:9c:ea:bf:77:81:56:9b:92:f9:6a:3e:41:14:03:
                    f5:13:59:e0:5f:8e:2d:92:bd:03:e5:25:8f:ac:a8:
                    a5:78:0c:9e:0b:fc:73:c4:76:bf:76:c5:82:c7:57:
                    56:4e:91:38:03:98:1e:3d:77:6b:9c:96:96:dc:74:
                    37:db:8e:7f:f2:3c:27:d0:0c:c6:33:b8:dc:c2:09:
                    35:7a:02:43:40:e3:22:97:7b:90:67:c8:4d:fd:22:
                    bc:30:c2:aa:b2:a8:c4:5f:10:1e:4d:fa:15:24:90:
                    06:04:0b:e5:7d:8f:db:b7:3d:b7:e8:70:c1:cf:c6:
                    bc:4c:c2:02:b5:66:77:46:28:be:a6:73:5a:43:2a:
                    cf:0c:85:d0:7a:10:f1:1d:73:8f:d7:9c:f3:d8:f1:
                    9e:74:34:3b:ce:15:7e:cf:30:a2:7a:51:ae:b9:57:
                    f8:81:98:9d:af:45:e0:3e:b6:43:fc:2d:74:91:de:
                    81:f8:da:e5:6e:0c:e0:4d:f7:e0:4a:bf:63:06:83:
                    53:83:51:80:8b:fd:3a:43:f6:ce:e2:03:42:ab:d8:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:6F:DD:0C:67:E6:B2:16:A7:4D:53:ED:70:B0:BD:D3:FF:72:C6
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:3e:73:56:40:84:b6:2c:e0:13:73:d1:fa:99:93:92:77:
         66:60:8e:a5:38:31:0b:de:3b:70:51:a6:89:c7:0d:85:94:d5:
         1c:b6:11:32:54:62:7b:f0:f3:80:62:9a:a5:a3:68:a1:8b:05:
         3f:2b:28:bd:f6:51:3e:15:1d:ef:68:e4:51:a3:d1:c5:82:48:
         80:ac:57:88:90:53:b2:68:c5:ee:08:45:ec:d7:bd:f9:83:cf:
         f1:16:45:37:63:5a:01:1b:c5:2c:55:ca:a0:c2:06:8c:06:82:
         7e:49:1c:98:2c:3b:45:c3:6e:93:2f:d3:79:c9:7b:d0:11:5c:
         5f:86:85:88:63:0a:e0:48:fe:0f:bb:06:05:57:fc:38:b1:2b:
         be:d5:a3:23:3f:bb:c4:93:b8:81:32:11:82:8d:cf:6a:e5:bb:
         d8:51:27:67:23:d1:be:4d:3d:10:86:09:18:67:5b:fe:0c:34:
         8c:4f:4c:91:0d:c2:f0:cd:3c:6a:c0:2c:d5:3f:70:dd:b2:51:
         7f:a6:e5:52:db:28:64:b5:ec:7c:70:9a:a9:6d:6c:fb:d6:96:
         38:9c:f6:fe:a6:d4:1b:21:7e:88:8c:ea:11:b2:cf:8a:c6:e1:
         31:c8:28:c3:40:8f:d2:12:9b:54:b7:f5:e8:a3:18:de:5d:f7:
         98:c6:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:43 2026 by rpki-client