Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          8Y7ibKyhJzDjyN37dNpWKE4rGEpdlYX4yv0DDgqhhE0=
Subject key identifier:   4D:11:BC:54:89:11:88:0D:17:9B:87:33:90:2A:61:AC:90:E3:9D:36
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       019D284D7BF45EDC84EA4D6500A22090A0A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 04:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:59 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: iEvn1st0wOSWWs3pZPl5pWIhsw/2pDup19rbsk7Nbtw=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:7b:f4:5e:dc:84:ea:4d:65:00:a2:20:90:a0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Mar 26 04:00:59 2026 GMT
            Not After : Mar 27 04:00:59 2026 GMT
        Subject: CN=4d11bc548911880d179b8733902a61ac90e39d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:34:43:1d:62:11:ed:52:ff:91:87:4d:70:
                    73:e9:0b:0e:3a:01:34:b7:22:d6:54:92:f5:8a:e3:
                    be:3e:81:84:ff:13:c1:16:9f:bc:c0:50:fd:21:86:
                    8e:9b:6e:6e:66:c6:03:72:46:dc:15:03:8f:ac:ca:
                    14:d6:6f:3f:9b:0d:ce:e4:b2:fb:cd:f1:21:ef:5c:
                    cd:83:a6:f4:84:70:cd:d0:40:51:d5:e0:23:ed:50:
                    8c:92:d9:4e:d2:c2:3e:95:9c:40:0a:61:23:a7:40:
                    ac:00:fe:f7:db:60:cc:74:d4:ef:f4:f5:7a:c4:7f:
                    d5:1e:54:89:27:18:ca:ed:3a:d6:f4:c6:a1:03:45:
                    d4:3b:f0:4c:d7:f2:8b:9b:84:a1:05:43:3b:60:9a:
                    4f:fa:7e:86:00:c0:99:8f:73:87:13:45:40:74:a0:
                    22:95:a9:5a:e0:f6:e4:79:00:4e:05:43:77:11:16:
                    5f:e4:93:6a:ab:55:10:42:e5:1d:ed:97:f6:75:d8:
                    b7:10:e9:31:61:78:c4:7b:4f:61:53:b1:d1:62:9f:
                    57:10:20:19:69:dd:7a:d9:cc:0c:88:de:3d:33:3f:
                    ba:a2:5a:ca:69:cc:8c:b3:05:76:8b:fa:e9:71:75:
                    13:eb:96:28:38:a6:4c:1d:8c:b3:f4:dc:0e:9d:c1:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:BC:54:89:11:88:0D:17:9B:87:33:90:2A:61:AC:90:E3:9D:36
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:52:a1:de:e2:16:e2:eb:41:0f:fa:6a:9c:c2:d8:79:e1:
         57:4e:6f:e5:6a:c8:2c:57:4a:bd:cf:e6:26:41:ca:43:46:19:
         28:1e:3b:7a:9a:d0:23:a5:8a:81:7e:af:62:bb:ff:42:3b:e2:
         00:df:07:28:65:b1:a2:01:81:21:7f:90:a5:94:b0:3f:1b:f9:
         68:86:7b:85:48:ec:20:23:39:c6:69:e5:5d:30:d7:fb:f0:1f:
         c5:6b:86:8f:3c:9a:39:9d:3b:96:45:bc:47:9e:bb:df:39:a2:
         a9:0e:f4:3f:34:62:3e:40:b9:06:2f:3d:da:b0:44:fb:92:c6:
         09:40:38:66:5f:c6:30:fa:de:2a:57:4f:06:95:09:1b:ed:91:
         20:5c:6d:87:7f:16:af:97:90:b1:05:eb:68:5e:67:ce:99:65:
         a5:39:5a:60:d7:22:e4:df:1d:f3:03:46:28:2d:b5:6b:57:ce:
         22:d7:41:4f:a4:03:d9:5f:b8:56:01:23:84:b2:cf:a1:3b:3f:
         b2:8e:31:04:76:c6:78:b3:67:f8:b2:0b:0a:a0:00:5a:79:f6:
         7f:16:22:68:24:51:15:06:20:3d:27:32:2f:da:71:6e:a7:c7:
         ce:17:30:b2:c2:bc:55:30:08:42:b7:3c:6c:75:94:46:fa:41:
         71:0a:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:46 2026 by rpki-client