Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          hKw+oupCnucJCUDPgoKieXhPW51KUQkspze24Ot8BsA=
Subject key identifier:   6A:98:34:E3:99:FB:A7:A0:12:58:81:3F:C6:CC:73:03:34:A7:B2:6D
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       019D27A8AD1439A5EA7974FDA7371016317C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          0F67
Signing time:             Thu 26 Mar 2026 01:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:58 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: 92V012W7IJe8h1+6q9T1guAxW0WwkaXVyHwJ7VqNrLQ=)
                          2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ad:14:39:a5:ea:79:74:fd:a7:37:10:16:31:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Mar 26 01:00:58 2026 GMT
            Not After : Mar 27 01:00:58 2026 GMT
        Subject: CN=6a9834e399fba7a01258813fc6cc730334a7b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b6:ed:7c:c3:5e:bf:2c:d6:25:23:00:d0:6f:
                    96:35:72:72:bc:00:af:e0:6d:38:00:c3:e3:50:94:
                    9e:a5:50:3b:51:ab:7f:77:f2:48:ca:e4:cc:52:76:
                    9e:09:3c:c2:45:63:e0:61:e9:e9:32:45:e2:d2:3f:
                    c1:ce:06:e5:53:06:ee:b3:fa:e2:b8:93:47:6d:f0:
                    49:e4:e4:9f:3c:3e:32:ef:c9:5f:49:a2:50:9d:29:
                    72:c4:06:59:8c:0b:12:a7:c1:a3:59:20:09:ab:d8:
                    ae:26:c5:d7:76:76:12:ed:6d:be:65:8d:c6:6c:8d:
                    b6:94:96:32:42:64:f5:cc:94:7e:36:76:96:e5:cf:
                    f7:38:3d:41:93:ad:24:ae:9d:13:ac:b0:dc:84:4e:
                    f9:ee:fd:cd:e6:91:df:ba:14:29:12:96:a1:0d:f0:
                    3f:58:e3:9a:5a:69:c5:9f:00:65:9d:24:ce:fc:45:
                    55:b5:b2:00:31:b8:d2:0b:cf:eb:ea:58:c3:ea:54:
                    1a:93:7b:ef:a7:a3:ad:d9:d0:1d:d3:5c:aa:56:62:
                    9d:11:df:ad:6a:da:47:ef:8c:84:36:81:2c:85:4b:
                    6c:88:b4:ed:8e:86:fc:22:51:eb:d0:a7:f6:2d:57:
                    7b:b2:91:9e:f8:5e:b6:10:e5:52:14:9a:cc:73:2e:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:34:E3:99:FB:A7:A0:12:58:81:3F:C6:CC:73:03:34:A7:B2:6D
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:14:9a:90:48:10:91:a4:c3:9b:b1:37:93:0b:b0:78:64:
         ad:39:02:d3:b8:79:be:62:37:1d:5b:d3:96:78:24:16:f1:a2:
         2d:2c:d7:12:87:ad:4c:46:c2:a6:b2:d2:93:2e:04:e6:ba:b2:
         db:2b:ba:2e:46:7c:b6:27:1a:e9:9b:7e:b7:00:d4:28:6d:80:
         02:54:08:c6:6f:b3:e7:41:29:0c:41:53:ed:f9:3f:98:82:40:
         73:2a:5e:c5:99:88:dd:6d:3d:27:4b:7d:c0:d8:41:78:84:58:
         bb:11:81:0a:66:43:c2:07:d3:45:3d:c5:01:8c:04:53:12:48:
         a4:e9:d0:31:5a:91:c9:bc:b5:08:8b:b4:9a:15:11:58:29:87:
         f4:37:e9:76:5c:53:ed:98:41:8e:17:f3:b9:73:fd:e1:98:98:
         48:4e:61:81:7f:f9:58:25:ac:b0:5e:d8:93:d5:93:4b:68:6a:
         99:a3:02:45:52:ed:12:a6:4c:ae:cc:a0:d9:9f:8e:09:f4:f9:
         35:75:67:f3:67:ea:07:f3:2a:7a:ac:b6:aa:be:20:b8:f9:7d:
         84:7d:80:fe:a8:02:9b:3e:f1:1d:cd:a8:89:28:0a:fb:b8:07:
         b9:b5:49:4d:22:02:fe:b5:ab:b7:23:94:67:1e:4d:45:72:b7:
         98:61:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:18 2026 by rpki-client