Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
File:                     eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json)
Hash identifier:          B0YiCdIJDT+TAZ8M4zmwq7vQVOcHCGWqzF1VfWrTAsw=
Subject key identifier:   6D:B3:0E:CE:9F:12:70:10:C5:00:D4:1A:00:12:1E:BC:E2:50:89:9C
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       019D296101995ED6271C27F3272176C91665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
Manifest number:          13C9
Signing time:             Thu 26 Mar 2026 09:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:56 +0000
Files and hashes:         1: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: BScsdWqpj7gxIFqCO2r1xHqxu0PZ1okcGKjlXOlMgE8=)
                          2: tfFvJweLhRabr_4Wk7LgUhvWu5s.roa (hash: O7CBr+KVUWKgzAY05QQJYRrCw43M5qXybYIOGbsjOO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:01:99:5e:d6:27:1c:27:f3:27:21:76:c9:16:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Mar 26 09:01:56 2026 GMT
            Not After : Mar 27 09:01:56 2026 GMT
        Subject: CN=6db30ece9f127010c500d41a00121ebce250899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:61:da:49:69:c6:e7:95:00:43:b7:f2:63:
                    eb:42:04:07:f8:b1:8a:df:74:d7:39:90:6b:f6:a7:
                    67:10:7b:ca:0c:cb:c7:de:6f:db:eb:b2:ab:86:9d:
                    47:25:60:35:8d:bf:04:a3:32:ec:47:5f:6e:b8:c7:
                    7a:46:07:36:ae:a9:6d:68:09:8b:8c:08:7b:6e:44:
                    c7:37:0d:70:33:8a:b6:44:a3:f3:a2:9a:69:6d:28:
                    52:25:88:11:39:3e:0a:c6:e3:ac:a0:fd:69:ca:cc:
                    a7:a9:58:7d:94:2c:ba:f9:10:2d:66:de:0d:b3:80:
                    3d:33:8a:be:e7:ac:e5:45:58:46:29:8f:93:85:ff:
                    87:02:94:c8:40:1d:37:4e:5d:fd:40:a1:92:79:e7:
                    13:74:f1:9e:f4:25:c3:37:66:5f:8d:96:3a:49:83:
                    b4:06:04:b6:dd:d9:a8:29:1e:68:64:07:57:45:cb:
                    d5:39:40:0c:15:d5:0f:0b:b8:e3:c7:10:0f:d2:5d:
                    dc:41:35:17:36:e5:1a:6c:3e:f6:91:3d:4f:29:af:
                    e6:f2:da:5c:22:53:4e:5d:96:6a:bc:4f:8f:a2:58:
                    02:88:56:1f:08:82:21:bf:74:44:d4:af:21:32:79:
                    c3:90:ee:f5:ab:45:06:f2:a6:24:08:1f:99:83:08:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:0E:CE:9F:12:70:10:C5:00:D4:1A:00:12:1E:BC:E2:50:89:9C
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d3:9b:bb:77:b3:e1:63:cc:4c:e7:01:98:26:db:ce:1d:c9:
         0d:91:27:8a:47:8a:b8:cb:d5:6a:7c:f5:b3:7b:0c:08:dc:6e:
         c0:8d:ab:21:c6:b5:d3:90:29:02:a8:2a:90:dd:10:6a:de:82:
         a0:00:8f:bd:79:f5:f4:fb:b2:eb:4f:f6:18:8b:84:c8:70:70:
         49:a5:6e:0d:b0:9a:ca:4c:9e:d6:d0:64:97:6d:55:2c:cb:90:
         89:b1:d6:47:63:f9:20:3d:35:99:4e:4c:00:a6:ca:46:6e:06:
         f8:f2:1c:90:eb:c4:e9:51:bb:a4:0e:e8:74:fe:14:f8:31:5e:
         4e:3a:10:fb:fd:db:f6:8b:bb:af:3a:a4:41:b0:98:bb:09:45:
         12:47:8f:0a:de:20:0e:40:e6:c0:ec:e6:90:f0:34:67:c8:49:
         49:8f:d8:49:7a:ca:d2:d2:2c:48:af:38:ab:65:8b:5c:2d:d3:
         86:36:61:27:dd:db:0b:db:04:c0:e8:8b:5d:4e:bd:4a:9f:23:
         13:85:f5:81:8d:f0:de:6d:4a:bd:5c:e3:6e:04:52:02:97:83:
         87:6c:f3:52:80:3b:45:6e:83:5b:af:2f:f3:31:ae:03:09:d2:
         1a:bb:77:a9:2e:a6:e7:e7:76:54:7d:76:1e:17:f8:96:7a:2f:
         f2:75:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:13 2026 by rpki-client