Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          YxAjAIYuBIzzk5Phyd961MBBsV+m1T3LNEmPNdsPL1E=
Subject key identifier:   6A:0D:30:6F:D0:7E:3E:6C:81:B2:28:44:D5:BB:90:D2:C9:88:A5:E9
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       019D27DF7AF85D48936E93AF2E847A30375E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          07E0
Signing time:             Thu 26 Mar 2026 02:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:50 +0000
Files and hashes:         1: cdeFuWyYmKq-NITUk1xFwNRwvME.roa (hash: tspp8mRY6jLgo96MjdF9goms44Q9iexmKxyPPOVUDNQ=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: vp0bHkL8K+hnI7wokJ0Mh0bBvSX2KPuUpwhft7j2t7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:7a:f8:5d:48:93:6e:93:af:2e:84:7a:30:37:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Mar 26 02:00:50 2026 GMT
            Not After : Mar 27 02:00:50 2026 GMT
        Subject: CN=6a0d306fd07e3e6c81b22844d5bb90d2c988a5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:cc:5b:24:bb:aa:70:a7:f7:87:0c:3f:ed:
                    3a:c7:4d:b2:34:b4:cf:65:87:54:3e:2b:af:2d:6a:
                    5c:ae:d0:2e:5b:9c:cd:a3:a5:18:96:e3:5f:81:ec:
                    e9:79:14:20:98:24:f1:bc:dc:e8:01:4e:3c:b4:da:
                    5e:7c:5a:0b:5e:a2:64:6c:c4:f8:65:d2:f5:37:2f:
                    4e:78:93:39:3e:8a:85:8e:c3:d3:a9:24:17:d6:bc:
                    8d:09:90:cb:5d:65:9f:2f:f6:84:a0:52:8f:19:29:
                    3f:38:b7:db:4e:8f:06:ed:d7:75:e6:b4:80:0e:fc:
                    c5:85:d7:5f:15:ef:5c:cc:6d:35:13:0e:08:f3:8a:
                    99:fc:ba:fe:22:8f:34:4a:72:60:9c:77:c6:30:d5:
                    be:66:b4:1e:f4:0f:5b:08:65:de:99:8d:55:a8:e4:
                    ca:bc:79:13:87:ef:7f:b5:76:9c:19:af:b4:55:d8:
                    96:96:a7:35:32:6e:23:b2:91:d4:98:bd:57:f2:d0:
                    8b:f5:87:ab:6c:09:ff:d5:75:a4:6c:0d:45:af:f8:
                    fc:6b:94:44:ee:cf:92:bc:e8:c1:88:5c:9c:8a:5d:
                    39:09:f2:52:0b:31:db:93:3d:ef:62:0f:5d:4c:37:
                    60:cd:17:65:da:0d:25:50:ae:bb:bc:be:10:4d:42:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0D:30:6F:D0:7E:3E:6C:81:B2:28:44:D5:BB:90:D2:C9:88:A5:E9
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:11:eb:57:37:bd:dd:78:7b:86:4a:fb:bf:09:f3:38:01:67:
         28:38:5d:f0:2d:25:a4:ee:e1:70:e5:ce:b8:5c:c6:56:5a:d0:
         2b:1b:df:05:a9:0e:32:42:14:93:a4:d5:0f:c9:07:3d:7b:46:
         58:6c:69:c0:4c:7b:0b:3d:2b:aa:ad:6e:28:9a:ae:c3:85:d2:
         b1:37:95:27:96:02:4b:77:8b:33:09:15:42:58:0c:61:c6:0a:
         42:09:e5:48:00:7f:9e:50:25:57:9a:ab:a4:5c:13:58:2c:a3:
         3b:cf:65:a0:df:25:a9:1f:3f:5c:7a:28:4f:bb:14:f8:51:29:
         b7:ea:fb:cb:a3:b2:ad:5d:70:1d:2b:84:30:26:b6:8e:b4:2e:
         21:49:91:8d:dd:89:64:29:b2:f1:dd:cc:08:f6:6f:33:9c:ff:
         70:69:a8:52:2f:12:2e:b6:e5:af:7b:75:2e:37:20:cc:f2:ac:
         03:2a:ef:f2:f4:d3:bb:46:a3:8a:19:39:cd:99:ff:12:45:a3:
         70:a6:08:53:0d:87:9b:50:b7:87:78:4e:e7:09:72:fc:8c:a9:
         a9:a0:a7:10:0e:d3:d9:79:6a:96:41:00:db:b5:ec:95:60:df:
         3d:e5:ce:a6:85:8c:ff:65:33:6e:93:e8:18:0c:c9:5b:30:81:
         f8:df:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:34 2026 by rpki-client