Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File:                     6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier:          XdeXxonRHDs0kDQ+JWEMV2wH6jBx30ErcdxdGGPGrlc=
Subject key identifier:   41:44:72:A6:C8:69:57:44:CD:41:64:F8:FF:6C:F7:E5:74:A3:C2:F4
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer:       /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial:       019D28168C67EE3EE97F24DE20C346DC21CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number:          0CEA
Signing time:             Thu 26 Mar 2026 03:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:59 +0000
Files and hashes:         1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: 1oRjQZpssVbhsZs6+omarykZiu/wfs4in3RdveVngwg=)
                          2: CT0Lo8VqgOEZdE58c7bBWBtTHnI.roa (hash: COzxSOoTIXr0/+GY0oTls2bQVmuSF6l3DwdEZltDeBI=)
                          3: NIBdBrCWkls2-OOG_XM2Qpl_4D4.roa (hash: z833UxZscO7V0+hUaFeEIUPRXOX0hAwFsN5RSRmYdiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:8c:67:ee:3e:e9:7f:24:de:20:c3:46:dc:21:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
        Validity
            Not Before: Mar 26 03:00:59 2026 GMT
            Not After : Mar 27 03:00:59 2026 GMT
        Subject: CN=414472a6c8695744cd4164f8ff6cf7e574a3c2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:3f:1a:0f:0c:e9:00:35:c6:74:fc:7e:3d:
                    e4:10:dc:f9:5c:fe:46:d3:b3:87:aa:45:a9:39:ca:
                    ef:92:3e:e1:f0:12:8a:8f:09:4c:f9:4b:35:e9:08:
                    dc:07:70:3d:6e:66:d4:25:74:44:f5:2c:d2:0f:f9:
                    97:bc:66:6b:84:43:65:85:73:3b:91:0b:4b:f2:5f:
                    c3:ea:9d:d4:07:a2:66:77:c2:bd:d3:a8:04:3a:11:
                    63:fe:cf:dd:88:a2:26:cb:e7:3e:ba:5f:b4:61:a5:
                    bb:e7:65:73:18:d1:b8:4e:84:c0:dc:b1:2a:22:43:
                    a2:dd:c3:ca:ed:c9:7c:75:9d:98:c2:bd:60:07:74:
                    8a:36:fa:81:e8:d2:d7:9c:f2:85:11:ac:06:23:49:
                    23:75:fe:bc:10:71:43:cd:5e:98:86:43:71:c3:44:
                    2a:52:c4:bc:d0:72:64:7c:e3:40:c0:55:a4:64:c4:
                    a5:ab:fd:df:e4:9f:94:c6:26:98:5a:1e:74:e8:e3:
                    38:f9:38:4d:51:06:0e:5c:17:e2:6f:51:04:a2:eb:
                    37:12:3e:af:a8:b0:63:86:82:44:08:82:b6:0c:d9:
                    e3:08:55:d4:29:01:cf:57:d8:ba:8f:69:20:4c:5e:
                    12:af:7d:0d:26:90:fa:b3:33:98:8a:1e:61:27:5c:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:44:72:A6:C8:69:57:44:CD:41:64:F8:FF:6C:F7:E5:74:A3:C2:F4
            X509v3 Authority Key Identifier:
                keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:f0:b0:09:2c:f3:73:35:49:80:2f:7b:61:9b:c0:a8:de:
         46:55:63:50:82:68:01:23:56:69:bf:20:cd:85:16:fd:b0:27:
         b7:12:68:fb:6f:c1:fc:eb:df:d6:5c:17:b6:af:dc:83:ea:0e:
         05:e1:25:aa:04:b3:f3:75:7c:37:00:e9:8f:c8:36:6f:c4:b8:
         19:1c:75:32:3d:e1:df:99:53:fc:04:88:39:45:20:5e:cf:c4:
         9b:00:77:d5:45:72:44:6b:48:f5:9d:d2:05:39:2f:53:c5:9a:
         99:3c:6b:29:e9:3b:00:e7:ab:5d:db:36:39:3b:b7:97:b6:c0:
         c2:9c:44:e5:ef:a1:e9:61:31:cb:cc:45:39:45:0a:2b:37:9a:
         fa:00:09:d1:e8:5d:9a:3f:54:0d:d5:cb:56:ca:40:bb:c5:c2:
         c2:7f:df:48:3e:15:55:3f:75:78:6a:09:15:4f:f9:58:67:30:
         01:12:6d:15:eb:f8:1f:e5:73:77:62:dc:b6:a5:a6:b7:07:c7:
         fc:d1:fb:50:cf:1a:af:e4:ec:86:4a:f2:2a:47:69:c5:e7:54:
         bb:cc:10:9a:73:1e:fe:76:ff:4e:62:62:94:01:ba:02:57:ed:
         ee:e8:8c:3d:73:a3:1c:bc:e5:f9:e8:c4:f0:83:61:a5:ce:d5:
         a9:dd:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:07 2026 by rpki-client