Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier:          2KXxi/jvBSkeu7hk7UJILR3DUkfHRoDmuU5zkwaHjFs=
Subject key identifier:   E4:33:EE:83:F5:A2:0A:5D:53:30:24:97:84:9A:93:50:9B:A6:C4:0B
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       019D270485A115CD3A9E5F479BCD37AC633A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number:          13F1
Signing time:             Wed 25 Mar 2026 22:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:40 +0000
Files and hashes:         1: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: cOXS4yDkJoyyzPYjVd3dcBtJC6swelBPZ9ZxXKdI7HE=)
                          2: dwTOvNNNs4_nLfL-zGTDIueq7wE.roa (hash: OZz3Ati+0+Owv6ll3vAAGBWOgVo4lM5LfhjhBc+bzWQ=)
                          3: ekxswoBsSmNReS3BO5bv3ZcbIgA.roa (hash: fq2RYQXr2Q+LCB9gUhTjaSYI4NdNhOQIDzKGs+coCIc=)
                          4: qyP69zaDTmNmYkyQ7c7evEHMFbc.roa (hash: NqwYrk8FLr9zreZXVBBWmFtU5YYuWHkOztqiuxftrew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:85:a1:15:cd:3a:9e:5f:47:9b:cd:37:ac:63:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Mar 25 22:01:40 2026 GMT
            Not After : Mar 26 22:01:40 2026 GMT
        Subject: CN=e433ee83f5a20a5d53302497849a93509ba6c40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:c2:0f:0b:a2:58:ec:71:c7:be:db:31:b9:
                    3e:1b:50:3c:2e:47:32:a3:ff:96:45:8b:f0:4d:01:
                    69:24:a7:da:ac:f4:13:31:1f:af:10:38:9f:28:76:
                    77:28:9f:75:44:37:81:75:ac:d9:ff:0a:0b:9b:ad:
                    74:34:94:64:cd:a4:19:a2:32:eb:ee:f7:11:a2:42:
                    66:2b:26:12:17:01:f1:0c:5c:29:ee:63:b6:ac:2a:
                    ac:6a:7a:4b:cc:10:1f:f5:b2:45:04:50:c0:68:75:
                    2f:05:6b:ab:ea:48:e0:cd:2f:85:93:72:00:60:61:
                    0b:ab:4e:85:43:15:f3:d2:eb:27:2b:db:c9:f6:35:
                    48:25:cb:30:0a:e8:d9:17:65:d7:a6:ba:95:1f:bd:
                    91:38:98:bd:83:48:32:65:bc:08:21:f5:ca:8e:1e:
                    4e:53:9d:88:50:ea:ab:b8:c8:31:df:da:c7:95:90:
                    61:cf:ec:0e:30:25:bc:7b:9f:e7:85:a4:25:6b:a1:
                    2b:07:61:dc:9e:25:f4:5b:1e:42:72:7e:30:92:b3:
                    bb:59:d3:86:6e:82:45:96:31:f5:da:e5:47:92:a4:
                    e1:0f:c7:4e:85:8d:11:8c:9d:30:46:c9:84:1c:76:
                    57:0d:26:a7:2a:cf:2b:f5:75:a4:8b:f6:10:6f:07:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:EE:83:F5:A2:0A:5D:53:30:24:97:84:9A:93:50:9B:A6:C4:0B
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5f:ff:19:d2:80:4f:4b:99:d8:02:0f:cc:ac:b1:23:a7:cc:
         2e:e6:11:16:21:cb:37:e4:c4:98:cc:94:8f:5d:c0:76:f1:4e:
         95:53:a8:59:4f:4e:26:09:15:f2:0e:d8:94:e2:ee:f3:de:22:
         96:ed:34:13:c5:97:89:f4:ce:18:71:58:d4:9e:ab:f8:6a:e7:
         c7:71:87:a4:09:ac:6e:16:1b:46:ea:be:2d:71:84:af:3f:35:
         fe:a0:f4:f9:0e:74:0e:93:04:54:7e:57:a3:e3:2e:31:8e:3e:
         2f:d6:4d:0e:10:0c:e6:0e:b8:e7:c1:d7:13:fa:c6:b2:b7:ee:
         d3:9e:70:ca:45:c9:28:cc:12:13:25:2e:9a:ea:ae:fa:21:d5:
         66:97:df:67:70:6f:c1:82:79:ec:95:2e:de:a2:46:46:1e:30:
         90:6f:e7:f0:e0:60:12:f2:e1:9c:6a:e2:10:e1:bd:8d:df:33:
         30:af:54:fd:97:b8:83:c1:81:91:40:3d:40:08:66:8a:42:5a:
         e9:5f:8d:37:df:ad:79:77:a0:e0:af:92:a8:62:3e:90:7c:53:
         4d:30:d8:f1:60:eb:0a:6e:8d:8c:18:7b:88:d0:7a:3a:fa:9c:
         d4:82:57:64:5c:61:27:9a:c2:17:d5:ee:15:a1:f8:8f:27:5d:
         41:f7:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:41 2026 by rpki-client