Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File:                     5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier:          /k2OL+9zR0VZp0rtxg84NjavydC1WIb9CueW1SokgJQ=
Subject key identifier:   7F:59:1F:81:2E:7B:F1:AC:22:76:66:10:62:42:E7:7F:8D:FF:1A:7F
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer:       /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial:       019D2A3C0755EA0D9FF8F58D95EB31571B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number:          062E
Signing time:             Thu 26 Mar 2026 13:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:10 +0000
Files and hashes:         1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: EnHWPVFbFqB6UTvwa2vyPkEDbELqCH9vdTNyWo51/+g=)
                          2: Ovzz0RD7GF2p7VIKf_ghV_fRcGE.roa (hash: /45NRYLd+HmDRuwgrbIYLn2hPLdpdiLaSsqNKwNq8No=)
                          3: zAy1liQUX7gBQ9PeEjd7X9hqq8o.roa (hash: NZn/2vrHzY44DRS+Cwp21FMvCTZTqoSnmCA5wvgSwtM=)
                          4: zkFApGv60X8DG0B8tHnWtUhxivU.roa (hash: AUhmpu4lCTl9hphXH2HIjDdhr5/9m3Vkbh4u84XTekQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:07:55:ea:0d:9f:f8:f5:8d:95:eb:31:57:1b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
        Validity
            Not Before: Mar 26 13:01:10 2026 GMT
            Not After : Mar 27 13:01:10 2026 GMT
        Subject: CN=7f591f812e7bf1ac227666106242e77f8dff1a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:5a:a5:4c:dc:2f:cf:14:28:bb:cf:2d:d9:
                    ec:48:78:79:1f:c5:7a:a7:c5:ae:3b:0c:c7:48:e3:
                    be:3d:8c:05:ac:da:06:ac:36:d6:d0:d2:54:4e:de:
                    92:c5:1e:28:7f:e9:f3:8c:6b:4c:c1:28:5e:2a:cc:
                    33:b9:d6:d8:58:a7:f9:89:83:a5:3c:87:7f:43:d2:
                    9c:64:54:ba:18:c6:96:d0:cb:93:de:10:83:60:ea:
                    88:03:a4:8e:27:c8:84:3b:d6:52:b0:53:db:67:f0:
                    60:8e:85:77:b8:49:5a:d9:4f:76:9a:bb:9b:50:bb:
                    e0:d1:d6:9d:b0:71:62:e2:16:43:9d:91:0b:b5:d9:
                    70:70:0c:f4:28:ab:f1:06:9e:99:de:19:bb:a6:38:
                    75:bf:ef:50:7b:f5:4a:51:3b:58:16:bb:af:0a:8d:
                    f3:4e:15:10:2a:14:03:d4:28:2c:2b:e2:02:19:05:
                    2b:e6:00:b4:d0:67:75:96:cc:27:07:8b:a8:c4:42:
                    60:b2:fa:5f:56:c3:a8:0d:8f:22:1b:e9:6d:fa:70:
                    01:04:3d:5d:74:e3:54:61:ad:26:e5:5b:ad:eb:f4:
                    88:5c:06:54:db:11:33:e8:8e:91:48:a1:c2:6e:c7:
                    e7:cd:68:a8:1a:fa:13:52:be:ed:d9:54:49:38:9a:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:59:1F:81:2E:7B:F1:AC:22:76:66:10:62:42:E7:7F:8D:FF:1A:7F
            X509v3 Authority Key Identifier:
                keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:36:20:1f:d1:f7:be:5a:f7:45:e9:88:46:7e:a2:df:37:
         a0:e8:5e:0b:de:41:43:4d:bf:53:01:6a:5b:b0:20:e7:ff:d2:
         78:29:df:06:1d:bc:9b:45:1f:d1:51:8d:28:0f:91:9b:53:3b:
         91:10:f2:a5:86:79:60:2a:5e:f4:4f:13:0a:e6:92:b4:a4:6b:
         fc:32:70:71:a5:1d:d6:f8:67:7c:cc:12:8a:49:18:ca:78:e4:
         d1:88:31:4c:52:12:4c:24:d6:4f:53:61:07:ac:6a:c2:2e:ab:
         39:eb:03:66:68:01:16:f4:09:27:a6:d8:4f:5a:91:86:ce:4f:
         a0:cb:ff:c8:a3:9f:c7:78:63:8b:20:97:be:67:5f:9b:c2:da:
         2b:76:74:5f:37:8a:b2:ab:e3:61:61:d5:79:7e:49:cd:a5:ca:
         b3:e8:69:bc:55:57:f5:52:41:20:1f:04:40:e5:6b:c1:28:56:
         75:71:90:38:29:ae:ee:1c:d1:67:82:8c:b0:00:82:31:6c:c4:
         9d:61:11:0e:d1:1d:7b:79:ca:c6:20:e7:e1:ed:f0:df:b6:b4:
         78:c5:e7:1e:95:c7:89:ed:85:41:e1:95:a1:20:d1:6c:57:22:
         1c:67:3c:8d:a0:18:ff:b4:d3:e2:64:2c:0e:46:88:ab:9b:28:
         41:c4:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:37 2026 by rpki-client