Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File:                     bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier:          CX9q05kQrQTtNSkLI+Cbjznkl2TKWOboILIrLAjR5bs=
Subject key identifier:   79:76:CF:10:FB:8C:B1:E5:7A:F6:E4:15:AE:CB:8E:38:92:7E:25:BA
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer:       /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial:       019D2A04541D956F768676F97977394B4EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number:          0E5A
Signing time:             Thu 26 Mar 2026 12:00:19 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:19 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:19 +0000
Files and hashes:         1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
                          2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: G3R0Xz7korARwA+lmt2Q75IaR0xLDEUxWBs0shtdKI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:54:1d:95:6f:76:86:76:f9:79:77:39:4b:4e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
        Validity
            Not Before: Mar 26 12:00:19 2026 GMT
            Not After : Mar 27 12:00:19 2026 GMT
        Subject: CN=7976cf10fb8cb1e57af6e415aecb8e38927e25ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:d3:fd:08:de:d5:7b:d7:ff:bf:38:36:13:
                    cc:26:ee:c0:94:cb:a0:88:b9:7f:2c:04:f1:67:ab:
                    9e:d6:46:14:e6:26:75:92:5e:7b:14:88:a6:b3:89:
                    c0:ac:23:a7:a8:df:39:08:a9:f9:d2:68:e3:49:c2:
                    01:96:6c:62:d1:ce:1a:80:9f:ce:60:16:72:f7:2b:
                    3f:38:a6:27:31:61:39:52:f1:fb:62:2c:7f:87:b0:
                    de:e1:17:29:50:41:65:fc:45:6f:11:cb:66:65:21:
                    cc:af:31:66:82:a1:34:d6:52:89:f6:4d:29:bd:83:
                    fb:2b:3c:02:d2:38:97:15:bc:e5:02:93:ba:2c:a5:
                    6b:4d:76:f9:94:14:f1:6e:8e:d1:65:ff:aa:bd:80:
                    3e:93:18:e3:2d:88:09:b7:be:eb:41:2a:b1:d9:7c:
                    03:0b:9d:d0:39:22:31:74:13:9d:54:e8:57:ab:af:
                    cb:68:c7:4b:3a:9a:bb:8b:d7:35:30:f2:98:90:d8:
                    bb:14:5a:76:10:40:16:c8:84:c5:47:01:3f:7b:3b:
                    6c:5b:6d:a2:46:90:11:f0:18:3f:e9:b3:6e:43:eb:
                    df:44:29:dd:e7:e3:ca:18:38:88:aa:b6:e1:2c:9c:
                    fa:85:3a:ad:f2:2a:77:fd:cf:e6:a2:9a:2e:58:f7:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:76:CF:10:FB:8C:B1:E5:7A:F6:E4:15:AE:CB:8E:38:92:7E:25:BA
            X509v3 Authority Key Identifier:
                keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:aa:f5:62:a2:42:23:37:7d:55:50:c0:f7:cc:5a:a7:5d:01:
         f2:31:2b:54:fd:f5:93:cb:13:db:d5:b3:47:2b:c8:15:60:0a:
         c8:d1:ca:73:f8:92:5d:b1:ce:c6:d1:74:c9:e5:ef:6c:11:86:
         53:56:19:8d:d5:46:8b:4d:3d:ac:ee:4e:89:af:a4:ac:2e:82:
         d5:83:ad:53:5d:a1:1a:be:7f:2c:41:f2:c5:32:a5:48:1a:94:
         40:65:ac:32:a4:28:27:6a:96:f9:77:df:e0:d0:55:72:79:a3:
         cb:2b:a0:06:16:37:cd:de:ce:af:19:69:a9:68:da:9b:61:9d:
         83:00:b4:ef:fd:12:be:c3:75:98:7f:79:a4:ce:c7:9f:11:8f:
         50:ef:3d:7e:0d:43:9f:b4:c4:97:9d:ea:c6:fe:ca:ee:10:64:
         04:a0:e1:e0:b7:81:35:5b:50:be:5c:ff:5f:84:92:5e:21:16:
         52:23:f4:41:e1:f2:d8:2a:b1:f8:8a:3f:0e:36:c8:6e:f7:cf:
         7e:92:2c:3d:1e:e6:dd:8f:fd:6a:53:05:08:75:8e:6e:7f:38:
         4e:31:e8:9c:7f:99:4e:27:d6:7e:fa:09:8f:5e:a9:42:32:96:
         d7:30:28:87:77:f5:ab:0c:c4:1c:73:dc:1c:60:f1:07:28:c8:
         5d:b6:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:47 2026 by rpki-client