Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File:                     4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier:          Eo9WaTZTZ/3VN3hG2pKPlaCHOucR5U8Q9hvm+8k4Kxs=
Subject key identifier:   D0:73:67:E3:98:C8:33:94:5F:BD:A0:4A:88:A2:55:D8:62:27:DD:C3
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       019D2771EAFA0CAAF89C43C5A88DBEC35E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number:          06CB
Signing time:             Thu 26 Mar 2026 00:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:10 +0000
Files and hashes:         1: 4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa (hash: towBJONDWlEy1Ghtn/h9pt+Tf2v85Qo/Obp+rcJdKYc=)
                          2: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: p5Ks9tbp029AJgrDa5xp893m7x+mb/yVvrTH8jfS15U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:ea:fa:0c:aa:f8:9c:43:c5:a8:8d:be:c3:5e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Mar 26 00:01:10 2026 GMT
            Not After : Mar 27 00:01:10 2026 GMT
        Subject: CN=d07367e398c833945fbda04a88a255d86227ddc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:b4:24:15:9c:99:d6:fd:50:6f:c8:76:3f:
                    59:9d:65:cf:5b:14:3f:a6:1b:6d:d2:30:b9:3c:98:
                    f3:63:55:a5:b7:bb:fd:25:93:6b:2b:01:c0:d9:ba:
                    9a:e6:63:e0:73:e1:98:ed:92:2d:9a:ed:6d:b8:aa:
                    46:5f:99:d8:8a:4b:59:e5:78:06:6f:84:8f:0e:cc:
                    a6:5a:ff:c1:10:cd:1b:4d:8b:fb:51:da:bc:ea:e3:
                    c1:21:8f:71:55:27:0b:5e:37:a4:6c:5d:2b:b2:c4:
                    0a:79:b5:fd:95:aa:c9:61:cf:f0:62:ff:87:05:39:
                    62:e2:e5:dc:53:74:af:a7:28:b6:dc:fe:ac:36:e9:
                    3f:ba:5a:e4:00:4d:4a:6f:82:bf:24:f8:67:1b:06:
                    54:24:16:4a:f6:d5:3b:cc:12:70:a7:f4:c3:43:fd:
                    92:c1:6f:20:6d:52:0b:ff:f6:6a:ee:12:1a:76:af:
                    32:2b:7b:12:ce:1d:08:9c:45:62:55:48:2a:c1:a2:
                    bb:d3:4e:5d:15:cc:f2:66:10:22:02:b9:3b:f2:fc:
                    57:71:6d:e2:7c:86:34:49:92:8b:93:de:58:45:8d:
                    0d:6c:c7:c7:06:79:84:3d:11:02:eb:5f:a3:10:0f:
                    e4:35:fa:55:52:81:e5:f4:eb:32:56:0e:f8:32:56:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:73:67:E3:98:C8:33:94:5F:BD:A0:4A:88:A2:55:D8:62:27:DD:C3
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0a:8a:90:eb:2d:99:6e:37:07:79:5f:ab:e0:89:29:20:69:
         a1:7e:cd:2e:c3:8c:55:4f:f9:b1:fc:15:f6:b7:de:20:8d:d4:
         81:a1:bd:77:28:cf:02:d4:f8:8a:f3:04:78:c8:fa:dd:72:c5:
         d7:8f:18:7c:b6:77:b2:81:67:0c:75:dc:ff:9b:79:d0:f7:eb:
         b3:2e:91:1c:52:44:4e:55:ab:9e:6d:dd:1c:91:44:db:30:06:
         3e:b2:ea:bc:cc:7f:ae:d2:3e:d3:9c:6a:45:7e:04:03:09:61:
         8f:e0:ac:16:af:a7:e0:08:6f:70:85:4b:db:d3:34:3f:78:ab:
         a7:e2:b8:af:9f:c1:e2:f3:54:42:2f:40:2f:a9:61:28:28:cb:
         51:b1:da:48:ea:d7:0b:1a:5d:1d:77:d0:84:2b:20:49:6b:60:
         5d:d4:0f:bf:7f:cc:18:40:dc:e6:df:50:23:27:34:a5:51:e0:
         c8:03:b5:cc:a6:0c:71:69:f5:78:d9:31:14:4f:80:09:b2:6e:
         25:2e:8c:df:1b:f8:6f:3a:ca:b3:39:db:4d:3a:29:69:23:53:
         df:48:98:66:c8:c7:44:34:4b:94:14:aa:a4:3a:f8:a6:e4:99:
         c8:67:ea:85:2b:da:7b:73:e6:d0:0a:29:c6:76:14:e8:03:66:
         9f:4b:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:50 2026 by rpki-client