Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          nHpdjO8gFyAvbeTAtyu5i9gRU9mf10TLckPD7S9mirY=
Subject key identifier:   51:87:83:AA:E8:6A:16:13:0C:6C:18:D3:67:F4:6A:8A:1D:3E:33:5D
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       019D284D3EADD063B4E836302B8F4900B114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          0FD8
Signing time:             Thu 26 Mar 2026 04:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:44 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: ApMx9G5crqqK5ET5HZNhF0ZTheVfUYQKojpD0mHupcc=)
                          2: NCFpucR4-r83kyx2khhJCgLkruU.roa (hash: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:3e:ad:d0:63:b4:e8:36:30:2b:8f:49:00:b1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: Mar 26 04:00:44 2026 GMT
            Not After : Mar 27 04:00:44 2026 GMT
        Subject: CN=518783aae86a16130c6c18d367f46a8a1d3e335d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:a8:7e:de:87:5f:1b:3f:50:1b:8a:96:cc:
                    f5:30:7d:16:ad:a3:f4:85:70:05:53:56:82:56:07:
                    6a:fd:9e:8b:b3:31:91:50:f6:29:69:74:55:17:7a:
                    a4:6c:af:f5:20:e2:cc:c9:db:91:94:d8:72:ae:7d:
                    d6:81:fe:6d:c5:b1:37:99:2a:4e:06:db:4d:99:df:
                    d5:82:5b:90:15:5e:10:ff:ab:00:16:2a:66:d8:6e:
                    40:9a:81:43:fa:57:49:8a:82:c6:d1:a1:3d:98:c0:
                    68:5e:5d:bd:bc:11:36:bb:91:52:00:75:60:ca:b0:
                    04:19:5b:8f:a1:31:42:ab:73:ad:56:57:f8:56:b0:
                    59:c7:55:64:21:0c:8f:dc:8e:f9:b3:43:5e:9d:13:
                    61:5b:5c:eb:b1:8b:e4:37:14:29:2c:c3:dc:6e:ff:
                    98:37:dd:5f:bc:9a:c6:82:fa:d1:01:57:f6:24:a1:
                    f2:a5:6e:0e:70:11:32:51:7c:22:0f:91:97:af:a7:
                    1d:86:2a:fc:96:f2:f9:61:d5:ac:f1:51:14:eb:d5:
                    1e:81:b3:79:5b:42:34:0e:96:f6:31:57:61:ce:ff:
                    39:35:58:3d:d6:88:a2:07:d0:33:ab:c0:f9:67:bc:
                    8b:d5:39:09:15:35:c4:15:44:67:3e:09:58:a8:0c:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:83:AA:E8:6A:16:13:0C:6C:18:D3:67:F4:6A:8A:1D:3E:33:5D
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:1e:0f:5b:74:a3:03:f1:bc:94:75:ba:3d:50:12:b9:e2:
         5e:fd:ac:b4:3d:9c:98:64:ce:33:e3:79:51:30:67:d7:72:09:
         2e:0e:d1:56:d5:df:ad:de:1a:ef:c6:ea:5a:b4:2d:1a:c1:39:
         62:2e:67:48:0d:65:b1:8b:b8:d4:4b:16:9f:1e:a4:e0:8f:0d:
         5e:bf:f5:d0:af:fa:10:97:eb:90:43:c6:73:c9:59:03:f1:74:
         34:91:92:9c:64:19:80:a4:a6:cf:57:96:72:ed:ff:d2:2e:f1:
         30:40:14:d2:42:ea:02:f2:28:46:f0:f2:4b:fc:a8:2e:88:56:
         95:d9:92:3b:c9:1c:61:b1:ea:c7:f1:26:c6:e4:68:30:12:73:
         5d:c3:e2:79:6e:8d:c4:46:6f:1f:81:a9:23:96:0e:66:49:9a:
         af:d3:2d:fa:cd:15:f5:62:d5:d2:9f:fa:b0:68:1c:3d:61:23:
         be:22:f9:3a:68:2c:c2:e3:db:01:f7:85:a1:0e:de:9f:f2:6e:
         b9:e4:8a:e4:4d:1c:7d:bd:bb:a6:a1:c4:61:75:b1:ae:7f:66:
         0f:bc:2c:93:17:60:f7:03:6e:1f:78:e7:2b:f5:91:96:bd:b5:
         04:ca:22:02:d8:b8:25:e8:31:79:0a:1f:d8:42:d7:15:10:d6:
         0d:e4:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:36 2026 by rpki-client