Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          K1G8k11FTUq9NaouDyejiiDP/7A+htxnm/kmGyzp3Ws=
Subject key identifier:   B6:CD:88:0F:B1:42:C0:59:9F:1C:7F:3E:3B:A9:FB:C6:BB:13:7B:9A
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       019D26280EA59947604AA5D64129B4577BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          15B9
Signing time:             Wed 25 Mar 2026 18:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:52 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: 1G0uTDdP8rk6UZXSakx+A7hhfEE7/QrHK9tibaTsWk4=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:0e:a5:99:47:60:4a:a5:d6:41:29:b4:57:7b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Mar 25 18:00:52 2026 GMT
            Not After : Mar 26 18:00:52 2026 GMT
        Subject: CN=b6cd880fb142c0599f1c7f3e3ba9fbc6bb137b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:ce:cb:d1:41:63:e7:63:97:de:6f:af:d5:
                    4d:50:3e:d6:67:5d:b8:01:9a:0b:6a:e3:7e:cd:17:
                    6b:f4:0f:2e:93:8b:d2:0a:b1:e5:ef:6e:79:3a:32:
                    06:60:3b:2e:7b:34:ff:20:df:47:2e:f1:58:f6:00:
                    19:f5:95:ef:ba:44:f5:7c:a1:f8:b5:02:d3:91:50:
                    cc:0e:3b:7e:b4:a7:54:0a:34:d7:ec:d0:f0:be:e1:
                    60:0a:40:95:c0:f6:c7:a7:3a:76:d6:c1:83:70:79:
                    df:f3:c8:d5:64:9b:ce:c9:95:ff:66:23:66:a1:0b:
                    9c:ca:a4:c3:e4:f1:3d:e5:3a:c8:fd:36:f9:06:35:
                    91:32:e2:a5:6c:db:72:ea:37:30:5b:c1:d9:9b:14:
                    18:90:70:ca:4e:46:d3:6b:1d:1e:3c:86:e2:2c:cf:
                    54:b6:4d:e7:fa:59:c1:54:18:85:37:cc:11:f7:33:
                    40:97:7a:08:31:cc:52:76:37:f6:b3:45:9c:e0:3b:
                    78:fc:35:31:86:8b:37:ac:86:de:47:c3:8e:fc:0e:
                    44:23:0e:8c:f8:53:73:b8:1b:c7:14:f0:d6:3e:ca:
                    f0:12:ab:c0:ad:32:d0:db:c1:40:e3:ec:24:a8:1d:
                    b2:5f:65:2a:6a:cf:fa:c5:77:78:4a:db:bb:52:62:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:88:0F:B1:42:C0:59:9F:1C:7F:3E:3B:A9:FB:C6:BB:13:7B:9A
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ad:02:29:48:2e:50:68:db:19:8f:cc:41:e0:36:23:a1:f6:
         7a:dc:3c:82:42:1e:d5:38:cc:4b:2e:b0:d4:22:94:86:b2:b0:
         e1:4f:0e:b1:9b:e9:eb:b2:80:b8:70:31:ec:80:4c:61:70:fa:
         1a:bc:a7:3a:a1:9e:40:2b:33:78:5a:90:03:51:f5:fd:5f:7e:
         d0:4c:ae:1b:f8:27:f2:ae:75:4d:c9:ca:87:d0:b1:88:9a:22:
         60:21:3b:c5:f3:78:91:cf:b5:dd:3b:75:65:56:94:08:1c:a4:
         74:ed:a2:0d:e3:04:c0:71:02:cc:0b:42:53:72:49:4e:3f:2c:
         28:6a:9e:67:d0:70:6e:f9:5e:63:04:25:40:c5:53:ff:52:15:
         95:5e:ae:2b:7c:6b:e9:3b:05:ea:32:8e:cd:6c:a6:95:40:64:
         00:b4:5d:ef:0a:97:e4:d5:d6:35:49:9e:b2:d8:5b:55:d0:d0:
         4c:8f:08:1d:05:82:53:86:0b:1b:d9:3d:2e:6e:b9:21:96:cc:
         7f:25:50:5d:0d:26:4c:c9:62:e3:30:05:f5:97:86:f7:2d:41:
         b9:2e:19:94:b4:93:b5:c2:5e:fc:75:63:8d:27:19:9b:3e:3d:
         a9:2e:8f:52:39:39:a7:0d:9a:a0:c0:12:0e:6a:b1:74:5e:de:
         b1:10:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:40 2026 by rpki-client