Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
File:                     SboHm38CFqb2ZzyXHCr63VrpQuo.mft (raw, json)
Hash identifier:          6ilo3TSHq4MJ5Ae3dxs+5blR2EX/yJxX71fZdGsK3m4=
Subject key identifier:   8D:06:15:A7:3F:8C:56:E7:06:D4:DF:DC:3F:84:42:B4:BF:B0:A5:DF
Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA
Certificate issuer:       /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
Certificate serial:       019D29975A3D6FC6F3D939E6587C7BEDC2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
Manifest number:          0A5E
Signing time:             Thu 26 Mar 2026 10:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:17 +0000
Files and hashes:         1: SboHm38CFqb2ZzyXHCr63VrpQuo.crl (hash: pvjbLA5ry2f34yYfs6+j1s7J7iZf5o4saqj9Ya/W0Rs=)
                          2: mQQJegnq95EZE2V56v2zWL1gvbQ.roa (hash: q/7V6DJvjSprwlUJnZGo0QNXx9JjaUcQEYt4M4pXjvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:5a:3d:6f:c6:f3:d9:39:e6:58:7c:7b:ed:c2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea
        Validity
            Not Before: Mar 26 10:01:17 2026 GMT
            Not After : Mar 27 10:01:17 2026 GMT
        Subject: CN=8d0615a73f8c56e706d4dfdc3f8442b4bfb0a5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:79:f6:f9:6e:6a:bb:30:a6:85:c6:14:26:
                    98:00:a1:ff:eb:52:1b:78:db:b4:b3:3a:9e:37:8e:
                    d7:f3:5d:14:93:17:ac:9e:79:9c:b7:52:dc:f3:a3:
                    8c:6a:55:02:8d:be:60:5f:1b:f7:05:6d:96:a6:9a:
                    5e:3a:c4:73:4f:df:f1:9f:15:80:ec:16:e5:04:6f:
                    1b:08:d9:19:92:77:ad:73:ac:35:5b:4c:9c:d3:84:
                    a4:3e:a3:ce:fc:ab:51:f5:12:c5:48:16:96:4f:9a:
                    3b:de:18:71:8a:de:b0:b8:0f:ba:37:ce:5e:f9:d0:
                    d4:a6:f3:c2:f6:59:62:88:a0:f6:ca:60:e6:98:c9:
                    b2:43:da:56:de:f8:64:c2:cc:9b:7d:dd:e2:43:50:
                    de:60:66:0b:6e:85:ea:b2:07:3b:69:20:a0:b3:ff:
                    c1:74:38:6d:9a:04:3c:07:82:73:a3:d6:b6:aa:ab:
                    83:d2:e5:63:ad:a7:a0:1c:cd:2b:81:28:8d:07:ab:
                    ad:29:5a:d0:22:66:d0:71:09:b9:85:ba:db:57:bf:
                    25:c0:12:f5:f8:18:8e:79:31:59:40:fe:1b:c5:cc:
                    e5:de:2c:39:b4:8d:41:e5:ce:66:19:42:4f:6d:b9:
                    06:ef:b1:d0:d5:f5:5e:0a:d5:c4:66:08:1a:92:ee:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:15:A7:3F:8C:56:E7:06:D4:DF:DC:3F:84:42:B4:BF:B0:A5:DF
            X509v3 Authority Key Identifier:
                keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:a5:ee:b2:32:9b:98:a1:bc:e9:eb:e7:73:e8:62:f3:43:
         bc:63:75:ee:aa:cb:04:6c:49:bc:67:00:64:c4:0d:ca:be:1f:
         b1:cb:06:e8:48:ed:3a:87:32:08:88:d6:42:1f:13:89:df:7c:
         d5:f3:d6:fd:18:0e:6a:e5:17:0c:1f:6f:e3:7e:35:58:8d:df:
         f9:b8:fe:d0:a0:3f:b6:dd:83:68:14:bf:f7:e8:19:3a:d5:e0:
         64:93:38:e1:0f:63:34:cd:34:58:47:82:97:76:c1:9c:54:f9:
         db:ad:36:58:fb:af:9f:be:d8:42:2f:1a:d5:2f:5c:d6:f5:a5:
         03:18:3f:91:26:45:0a:fb:12:f1:09:a6:62:76:61:a7:a0:c5:
         d5:f1:61:14:95:2a:a1:3f:68:a3:4b:6d:32:e8:5b:6f:6c:7b:
         eb:4c:55:a7:f8:65:d4:2f:18:24:ef:7f:c7:9d:c7:f2:b9:c1:
         e4:01:d8:67:4f:03:c1:af:3a:62:89:c3:a4:d7:86:34:94:37:
         aa:58:13:09:89:ed:80:99:08:93:4f:26:6e:c8:b8:ec:30:da:
         8b:dd:5a:fe:9b:8f:a1:8e:36:45:0c:f0:f4:5e:e3:ba:1a:98:
         ce:b4:11:9a:ec:76:c3:a6:7b:4b:2b:ed:8d:1c:9f:8d:82:27:
         d1:b9:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:58 2026 by rpki-client