Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          n2qJ2XaUnWjPfVtQ67jz0qgGao3ZFPqjZ0Z1DiwKYuA=
Subject key identifier:   A0:A0:12:9E:13:63:9E:A8:17:C9:E7:B9:00:5E:2E:DB:41:C5:DD:82
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       019D2816DC8A35F296C38BA163CBCE0A349D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          06E9
Signing time:             Thu 26 Mar 2026 03:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:19 +0000
Files and hashes:         1: 3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa (hash: T1exYoW+fjUwfB54PefmCuoIsw95ypDAm+V+z9pSMEQ=)
                          2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: ceDYRzCWwpygx1jklwYQd43Rjn8c8x65AAhexE59Eto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:dc:8a:35:f2:96:c3:8b:a1:63:cb:ce:0a:34:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Mar 26 03:01:19 2026 GMT
            Not After : Mar 27 03:01:19 2026 GMT
        Subject: CN=a0a0129e13639ea817c9e7b9005e2edb41c5dd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:f9:0b:73:61:4c:e1:4f:29:06:e6:ee:bd:
                    19:57:fd:8a:bd:67:ff:13:aa:b6:30:fd:44:74:26:
                    ec:06:f1:ff:dd:65:e1:0e:ce:25:36:05:1e:8e:e6:
                    a3:ca:a7:a8:d2:51:80:ca:59:07:31:7d:e4:6d:05:
                    f6:7d:8d:d4:45:5a:1c:2e:13:6a:52:75:25:f0:f1:
                    22:a1:3b:1b:5e:5e:35:cf:47:42:1c:63:6a:f5:00:
                    3f:63:9e:40:70:3d:21:6b:20:6d:79:41:8f:30:9f:
                    a9:4d:bf:9f:09:9e:6d:f0:89:fd:23:fa:19:6e:5f:
                    fe:97:62:bb:01:94:a5:d6:67:4e:83:00:ac:51:9f:
                    7d:3c:43:ef:e6:4a:1a:79:14:59:4d:e5:c1:6d:4a:
                    27:df:6f:4a:46:ff:36:93:5b:8c:1c:52:29:76:0d:
                    af:42:59:c8:91:c6:1f:76:6b:0d:ac:68:53:58:cd:
                    dd:26:9f:e6:d7:73:fe:64:30:5f:3e:38:1e:6b:26:
                    8c:c7:d9:26:cd:77:83:77:b3:40:a4:2f:36:2b:9d:
                    01:88:16:c9:97:eb:87:e5:04:a1:10:7a:15:70:76:
                    41:bb:d3:27:5a:d0:53:9c:5a:14:1d:94:34:53:0a:
                    cf:dc:34:42:36:15:83:32:b8:72:e7:1e:73:75:38:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A0:12:9E:13:63:9E:A8:17:C9:E7:B9:00:5E:2E:DB:41:C5:DD:82
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:82:1a:1e:38:d8:f1:9f:bb:ee:9e:72:a0:0c:70:69:69:
         d0:5f:ae:9b:ca:b5:d3:ab:e2:24:a6:d8:91:a7:95:47:fb:9d:
         5a:67:d7:b9:c9:49:2a:42:0b:56:7e:f4:09:c0:60:f7:60:1f:
         a4:da:f3:e9:8a:76:a0:a6:ec:32:b7:c0:61:3f:84:99:ce:60:
         8a:9e:60:0a:50:53:31:9f:9f:36:ca:3c:29:79:71:e2:fd:63:
         07:f4:2d:03:1f:2b:a4:a5:55:01:02:63:b5:6e:a4:f0:f8:66:
         a7:aa:82:f8:f1:40:20:f2:79:47:ce:20:8d:3c:b7:c1:51:83:
         0e:09:62:42:45:81:36:62:a4:49:69:65:d4:d6:2e:be:0b:1c:
         b6:bb:43:c9:c7:f0:80:44:5c:3b:34:f6:c4:8b:f9:19:9a:58:
         d4:48:b5:a6:22:04:f3:03:a6:88:a4:19:ee:96:d0:c6:86:a1:
         16:a6:eb:4d:8f:af:9c:93:05:08:54:29:ac:04:1b:e1:e0:60:
         fd:0b:69:f8:16:9b:6d:53:b5:46:34:30:84:b4:b0:3b:ff:06:
         70:d0:fc:13:19:68:55:b1:37:34:11:8c:39:a8:53:b3:45:0d:
         89:b8:0d:c8:a5:64:b0:cc:97:d5:aa:4f:c9:9b:23:45:76:76:
         ea:e4:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:57 2026 by rpki-client