Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File:                     0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier:          AUbbv8EJdi0lW3TozkKgavt00LIodC9PErSQWIYF0Sw=
Subject key identifier:   26:84:27:BC:7F:73:D8:C0:4E:CC:B0:3B:FD:97:CD:30:60:84:12:7F
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer:       /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial:       019D2816CF0E792B8C3A98907EDEFC813ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number:          104B
Signing time:             Thu 26 Mar 2026 03:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:16 +0000
Files and hashes:         1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: 6bmTOJzN0CXl9bPMJHcxOjugN/TEQm04KvyaqzyqGZc=)
                          2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=)
                          3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=)
                          4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:cf:0e:79:2b:8c:3a:98:90:7e:de:fc:81:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
        Validity
            Not Before: Mar 26 03:01:16 2026 GMT
            Not After : Mar 27 03:01:16 2026 GMT
        Subject: CN=268427bc7f73d8c04eccb03bfd97cd306084127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:eb:e9:fa:75:c7:33:98:ee:72:2d:4c:b0:
                    d9:f2:db:3c:be:62:5b:d6:76:e9:2b:d9:32:58:27:
                    77:6e:66:21:c2:9f:1e:33:c1:e1:29:64:dc:04:c5:
                    5a:6d:0c:2e:5c:a6:b9:ed:ae:46:a0:61:88:86:f1:
                    2c:b8:33:34:e1:eb:6b:60:f7:53:0e:f2:76:49:0e:
                    23:18:97:45:4f:56:54:88:9a:24:a3:0e:1d:68:9c:
                    18:6b:7b:68:47:0e:16:2d:b7:20:8d:27:f7:82:54:
                    96:0a:35:bd:59:58:c4:96:7d:ae:0e:6b:db:37:69:
                    7e:17:9d:98:6c:a8:ad:2d:a6:b8:b9:38:33:76:df:
                    50:99:7b:8b:b8:46:9a:98:66:57:a4:a6:29:a1:85:
                    47:73:4e:3a:83:0a:46:fa:d6:e9:11:dd:6b:f3:38:
                    77:13:3e:16:74:07:e4:c3:37:d0:80:f4:12:34:37:
                    bf:1a:6a:79:2c:72:8e:4f:6a:6d:b3:63:9a:ca:60:
                    f6:28:e9:c1:07:d1:73:19:fb:7e:d2:3f:58:f5:8d:
                    09:ae:ce:e3:b5:3d:69:9b:d2:5f:6c:7d:b0:cf:67:
                    2e:49:e5:1a:c9:49:5a:39:69:69:1c:06:34:ae:06:
                    9c:de:1f:b1:00:d3:f7:7f:75:42:1f:9e:49:2e:5c:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:84:27:BC:7F:73:D8:C0:4E:CC:B0:3B:FD:97:CD:30:60:84:12:7F
            X509v3 Authority Key Identifier:
                keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:7f:2d:73:c0:a0:92:80:68:04:7a:de:3f:0d:90:ab:5a:
         5a:fb:c7:3b:22:ce:d7:d3:4e:9a:37:bf:8a:43:f7:83:66:66:
         ad:e6:6a:fb:e4:6b:33:3e:1f:3d:d4:b9:13:33:a2:f4:f3:a7:
         48:9b:56:41:bb:9c:2e:55:68:c2:11:4f:43:fc:ac:43:b6:d6:
         1e:c8:f2:b0:2e:a6:68:46:f2:0f:b4:3c:47:76:3d:b6:16:00:
         93:9c:fb:e7:08:45:11:08:b7:a7:fd:47:2b:d8:c8:9a:27:8c:
         2d:a2:45:49:7d:9d:09:d8:b2:a6:8b:7f:d4:5e:80:c6:64:b7:
         ba:d1:9e:5c:5b:ad:6a:f1:af:ee:92:bf:ca:10:ca:12:2c:d3:
         7c:bc:7e:5d:53:f1:2e:73:ca:70:33:29:a5:70:30:86:f4:86:
         5a:0f:71:cf:f1:68:a8:11:1a:ae:d3:c3:91:d2:af:09:44:f6:
         3d:2b:25:a7:56:53:d0:3c:03:f6:5b:71:d8:82:a0:96:85:dd:
         96:d2:a4:32:06:95:61:4a:a0:54:47:ad:59:a3:87:ab:69:12:
         ac:3e:06:5e:72:d4:d8:3a:4a:15:41:25:0a:41:3c:bc:d4:b0:
         1b:d4:06:04:79:b4:59:d5:48:e7:ba:14:db:2a:14:41:b4:a4:
         22:1a:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:46 2026 by rpki-client