Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File:                     H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier:          fODondLPyFbT85abFjzBpwPlbAhtwtYN6PTf9imhi0Y=
Subject key identifier:   EC:10:F1:8E:6C:AD:BF:48:1C:30:C0:03:9B:39:22:55:8B:1B:E6:EA
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer:       /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial:       019D273AA327A1E63AD1496A3B289A8E753C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number:          0770
Signing time:             Wed 25 Mar 2026 23:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:47 +0000
Files and hashes:         1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: o0NlTx9xt5azepwEV2/BDMOAko5AvuImCLcoYMaFmPw=)
                          2: YN0WF7H7M2n4t-XjARACyM9WR6o.asa (hash: eBj4EH+AV57EzbfzhlBRa9LcrLwEw5t3KkUj9eOh2sM=)
                          3: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
                          4: Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (hash: 0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=)
                          5: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a3:27:a1:e6:3a:d1:49:6a:3b:28:9a:8e:75:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
        Validity
            Not Before: Mar 25 23:00:47 2026 GMT
            Not After : Mar 26 23:00:47 2026 GMT
        Subject: CN=ec10f18e6cadbf481c30c0039b3922558b1be6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:51:12:a3:21:7b:8a:73:ba:f0:5c:67:4d:
                    51:86:b4:62:2e:17:d9:e6:fc:25:89:49:2c:d9:4f:
                    6c:f4:63:36:7e:97:67:b9:c5:a4:36:58:1b:36:08:
                    1a:22:02:37:2f:17:75:f3:eb:2a:c7:4a:e9:7d:67:
                    29:1d:3d:ad:68:c3:67:e6:3c:1f:e4:c9:48:ad:86:
                    c1:a0:20:b2:b0:19:12:81:49:ff:d9:90:5c:9c:bc:
                    6e:d0:ed:9a:e9:3b:80:9f:43:ab:2d:d0:9f:4c:9d:
                    f5:e2:a1:c1:ca:c1:0f:bb:52:5f:6c:37:db:88:36:
                    a5:7e:00:4a:a0:d3:59:64:8e:91:d9:ea:60:39:b7:
                    02:64:64:b0:59:91:8d:7f:55:53:d4:94:1d:95:9d:
                    d7:33:80:b6:e5:f4:71:1d:3f:6f:2c:f5:51:8c:bc:
                    f7:a5:b6:6e:87:12:b8:e4:bd:82:7d:c4:ea:d0:63:
                    49:04:7c:a4:53:a0:d3:59:08:1d:e4:a2:01:ae:e0:
                    57:46:84:c1:2a:96:b2:3f:31:d1:1a:ec:05:2b:1f:
                    9f:c5:b6:db:8c:49:f9:7f:a9:f7:4d:b6:c3:cd:ea:
                    92:7e:ea:0e:c3:96:d0:4f:b9:03:cd:f2:25:20:fa:
                    58:ff:82:ef:b5:88:c9:45:eb:3e:9e:89:ea:c5:70:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:F1:8E:6C:AD:BF:48:1C:30:C0:03:9B:39:22:55:8B:1B:E6:EA
            X509v3 Authority Key Identifier:
                keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:4d:57:f2:7d:3f:1e:e7:c4:5c:59:b4:29:94:e9:8e:25:
         5c:da:3f:be:48:c7:7a:9e:d7:2f:0d:54:cf:c3:2a:26:69:86:
         bf:46:a1:07:2b:7f:cb:83:d9:07:5f:d2:aa:ca:20:82:49:e3:
         5f:cf:70:b6:6c:86:2f:bd:3a:d2:8d:4f:0a:7c:25:2a:03:46:
         3b:a6:bf:4c:14:c6:96:48:e6:d7:c3:d8:b9:1e:ed:f1:44:36:
         cc:6e:ae:9a:fe:c1:29:cd:03:76:13:9a:53:a0:5e:ca:de:5e:
         54:32:81:e4:3a:33:99:d6:7c:74:e6:91:e4:60:93:e0:5f:64:
         0d:13:b8:7d:ac:6a:dc:7e:b3:ed:1f:81:fb:9a:fe:52:93:15:
         69:30:2c:a1:bd:91:09:4c:a3:66:63:e8:a0:e0:03:0e:31:01:
         e6:84:63:46:be:10:51:14:eb:1b:93:1f:b7:f9:e7:e5:db:94:
         4c:39:93:21:a3:84:0d:80:20:b6:14:fe:26:79:b9:d4:6d:cd:
         84:73:90:df:a8:00:cb:2d:4b:ce:f4:f9:a8:0d:b1:aa:34:24:
         04:6b:dd:3a:ea:aa:99:ee:bf:42:5b:c1:d8:28:13:c6:e6:04:
         32:47:1c:17:39:04:11:3e:59:17:db:8c:b2:ff:e7:7c:f7:17:
         8f:5a:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:54 2026 by rpki-client