Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
File:                     eBC14tQZE_koo06ZYbf8iWSFAEY.mft (raw, json)
Hash identifier:          1wP7P73cVkJZa5EeexgcnFNp5rnQQdM11T0zedgzD5A=
Subject key identifier:   11:40:AF:6F:B2:A4:36:D3:A8:BF:7F:74:D4:2A:D9:B2:D4:D2:84:78
Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
Certificate issuer:       /CN=7810b5e2d41913f928a34e9961b7fc8964850046
Certificate serial:       019D27048D098FAA14DBDDD38CFD9A308400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
Manifest number:          01D6
Signing time:             Wed 25 Mar 2026 22:01:42 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:42 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:42 +0000
Files and hashes:         1: bZ6TxPdDApP9_3CEqUXc2k8imCI.roa (hash: liE84q2Y1cQq3HAr1HpbOeLVvLrmd4qM5vRMAbTtCkw=)
                          2: eBC14tQZE_koo06ZYbf8iWSFAEY.crl (hash: CmMZ2IzmeEn3w+2Ve0Y+CyfWXWGatdmAB+VVR00Yo34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:8d:09:8f:aa:14:db:dd:d3:8c:fd:9a:30:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046
        Validity
            Not Before: Mar 25 22:01:42 2026 GMT
            Not After : Mar 26 22:01:42 2026 GMT
        Subject: CN=1140af6fb2a436d3a8bf7f74d42ad9b2d4d28478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:07:c6:00:27:bf:76:25:7e:b0:96:2d:fe:
                    be:a5:06:ea:c6:16:18:4a:d6:3c:9c:d5:81:5a:4e:
                    6b:0c:d1:84:a8:6c:c1:f6:2b:5f:0d:06:c5:92:04:
                    cf:fe:6d:de:19:37:84:bb:62:56:a3:0c:91:14:9e:
                    d0:7a:97:f6:45:a7:59:bd:a5:92:28:09:de:73:1b:
                    77:b8:b6:d7:bf:70:ac:28:f3:43:bd:64:4a:87:c3:
                    65:95:a4:39:e3:c2:40:f8:30:a3:38:82:8e:d3:77:
                    9d:3a:f3:8c:9d:52:01:28:1c:84:98:3f:1d:12:6a:
                    b3:fd:31:70:6f:ad:88:14:ad:ad:66:49:a2:f8:7c:
                    fb:98:24:d7:00:5e:65:a6:e4:88:ef:8a:d4:8c:32:
                    e2:66:ef:2d:5d:29:70:af:f8:fc:12:a7:e8:e7:c1:
                    c2:87:85:c5:7f:e7:08:6d:33:66:11:73:5e:bd:4e:
                    66:a1:6d:58:4f:83:1e:0a:62:b4:9d:59:01:57:ec:
                    cc:a0:28:2a:8a:88:7d:8d:62:ba:ba:2b:31:4c:26:
                    ad:a6:ce:35:9b:e3:7e:80:89:30:45:59:25:0a:8b:
                    49:99:be:7b:77:1e:a8:75:f4:3e:c3:43:23:c0:3a:
                    b2:41:3f:ae:8e:57:9b:2a:97:b7:b4:c7:73:2d:11:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:AF:6F:B2:A4:36:D3:A8:BF:7F:74:D4:2A:D9:B2:D4:D2:84:78
            X509v3 Authority Key Identifier:
                keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:7a:ab:c0:f4:f1:7d:65:32:63:44:e1:04:41:21:4a:08:
         42:ae:15:a5:82:41:54:05:dc:87:0e:ca:e7:86:6f:e5:2d:3f:
         18:ee:2c:04:23:c7:fc:f2:22:e7:db:05:79:b3:0b:c5:90:e8:
         52:30:b8:6c:cc:3f:f5:b8:f1:53:d6:ba:2e:49:4e:79:33:1b:
         55:85:36:3e:d5:0a:9d:56:4d:43:b5:35:4b:5c:e6:08:1c:c3:
         37:08:aa:08:46:23:1d:dc:83:49:88:16:56:d2:58:52:c2:25:
         d9:24:b7:f5:55:2e:8d:40:3b:a6:97:a6:86:ee:0c:b5:da:33:
         49:8f:16:c0:f3:cb:64:e2:3b:e2:5a:e9:30:6e:b5:18:06:42:
         1e:fb:1b:5e:b5:60:0f:ac:d4:d7:22:31:8f:c3:7d:6b:71:5f:
         a5:50:8b:ae:36:c6:e6:09:9d:73:08:31:fe:82:4a:fd:8a:3b:
         90:dd:91:9f:1f:55:8c:f4:52:45:78:9a:13:d7:39:2d:c8:30:
         af:cf:aa:23:05:15:8e:0d:de:be:a5:5a:63:df:9c:c3:f0:0d:
         f7:6a:8a:cf:99:3c:8c:39:20:ac:f0:73:b2:0a:2f:64:4a:79:
         65:4b:51:8d:f3:de:b0:b3:12:bc:0f:3f:91:9e:14:1f:37:51:
         18:59:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:38 2026 by rpki-client