Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.mft
File:                     9j_FoR-WFoJnoI2OUK2kg4NCC5g.mft (raw, json)
Hash identifier:          quIJQnr+ARR2m64lUlm7aNs8yZ1mYr+4Puo4jKe0tCI=
Subject key identifier:   E7:A6:2B:34:B5:64:10:5F:1A:13:E7:73:B6:17:49:DF:C7:7B:1F:D3
Authority key identifier: F6:3F:C5:A1:1F:96:16:82:67:A0:8D:8E:50:AD:A4:83:83:42:0B:98
Certificate issuer:       /CN=f63fc5a11f96168267a08d8e50ada48383420b98
Certificate serial:       019D3307EA40ABE67AB4FD72E47E925F187C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_FoR-WFoJnoI2OUK2kg4NCC5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.mft
Manifest number:          69
Signing time:             Sat 28 Mar 2026 06:00:49 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:49 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:49 +0000
Files and hashes:         1: 9j_FoR-WFoJnoI2OUK2kg4NCC5g.crl (hash: gNQQ9FDzbqx94ajMSOjdPOil4tu4i1R/AFO+LXQyGNk=)
                          2: EvsZzHKAsyx2_21mh73405LlA_Y.roa (hash: 7BIapcTmybitVEbkJcTH6zcqaYrzQJJ+qryowb4ctQQ=)
                          3: KGS-Ow6A03MOKlHJ9LJVMtiBgW0.roa (hash: lxkwB0qJKRw+RSgtKN8/eEY99vYwlT+z5ybpbYKDhpI=)
                          4: nLekjx1vLWfSpKCoFldqi7pFzOc.roa (hash: rKL7H1ryzcB0XUmqHRtIBqU8H4g7SbFojwMZbrklQ9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9j_FoR-WFoJnoI2OUK2kg4NCC5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:ea:40:ab:e6:7a:b4:fd:72:e4:7e:92:5f:18:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fc5a11f96168267a08d8e50ada48383420b98
        Validity
            Not Before: Mar 28 06:00:49 2026 GMT
            Not After : Mar 29 06:00:49 2026 GMT
        Subject: CN=e7a62b34b564105f1a13e773b61749dfc77b1fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:3e:7c:51:7f:09:c4:0c:5f:95:69:f0:bc:
                    5e:f4:78:ee:75:1b:53:45:8a:2b:77:50:39:02:e4:
                    8f:f7:18:a6:5d:ca:a1:1b:d0:c2:e0:39:d2:d8:61:
                    71:3b:fa:f5:ef:25:26:6b:21:4b:d3:49:ae:e0:08:
                    a3:1f:b9:c5:87:2f:4d:73:7b:49:8a:21:85:d6:48:
                    d7:54:1c:c6:1b:4b:e1:82:d6:d1:47:22:2b:0f:ae:
                    c5:bd:4b:40:2e:b0:98:63:8d:03:61:e5:3c:90:7f:
                    a4:93:d8:6b:1e:e1:2e:93:45:85:06:dd:99:a2:34:
                    b9:36:1e:d5:42:62:8b:42:5e:8a:b6:98:61:92:11:
                    d8:5a:4c:12:65:ea:7c:fa:49:1d:5f:92:3c:8c:d5:
                    85:23:e7:ea:6f:d4:63:be:da:8e:bc:aa:ae:3b:93:
                    51:56:3e:76:5e:0a:f1:b2:9c:70:17:dd:f7:17:18:
                    b5:15:6f:30:31:3e:88:30:f3:d4:ca:aa:7c:c2:06:
                    62:8a:60:7a:ca:bc:0a:a0:a1:65:cc:e4:79:9e:0b:
                    9e:65:1b:d7:0f:60:f3:47:28:4f:bd:c7:7f:17:dd:
                    8b:f7:e9:40:98:25:b7:15:74:aa:11:c3:df:0a:e9:
                    6d:4e:a4:7c:69:21:a1:86:a6:d3:74:d2:6c:74:76:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A6:2B:34:B5:64:10:5F:1A:13:E7:73:B6:17:49:DF:C7:7B:1F:D3
            X509v3 Authority Key Identifier:
                keyid:F6:3F:C5:A1:1F:96:16:82:67:A0:8D:8E:50:AD:A4:83:83:42:0B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_FoR-WFoJnoI2OUK2kg4NCC5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/9j_FoR-WFoJnoI2OUK2kg4NCC5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:56:9e:cf:ba:41:ac:2f:87:b3:69:93:49:9a:39:5e:dc:79:
         5d:b1:28:26:9d:13:b4:35:5a:b8:82:c8:19:98:02:2b:4b:40:
         86:a3:32:89:90:0d:22:3d:c1:20:8f:d8:94:be:c3:13:c0:16:
         70:b9:1e:87:7d:dd:73:6e:02:68:59:5b:61:e7:2c:a3:28:b4:
         a4:83:68:af:28:dd:fa:3d:90:49:5a:a7:48:5f:d3:1c:50:1d:
         fb:83:97:c6:b4:50:4e:9d:ed:3c:33:18:bd:d6:9f:4e:29:93:
         e9:7c:c4:f2:cd:c6:d0:06:19:c1:b5:27:b7:36:5c:97:2a:51:
         ee:26:ed:d1:1b:2f:59:94:91:f8:3c:69:c6:a4:94:ab:5e:6f:
         4b:f5:bf:b6:bf:33:ed:32:ba:4f:37:6b:5a:65:52:c0:13:45:
         02:a1:15:c0:34:42:ae:a4:6c:10:95:a5:5b:bf:59:42:b5:57:
         24:f2:c4:cb:2c:b5:3c:f7:ea:45:18:d4:4e:8f:87:2f:55:58:
         29:8d:51:e7:e9:37:53:3d:89:b9:3f:48:ba:b0:00:47:0f:a2:
         df:84:e7:9b:3f:cb:cd:19:1b:39:f1:f3:dd:d9:d6:7a:da:30:
         35:a3:8d:47:49:86:4f:bb:6e:79:69:ad:98:bf:50:3e:bd:ea:
         d2:a5:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:21 2026 by rpki-client