Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File:                     Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier:          NsgCo8FdPqDcJNzuAy99Ob/whfnimMcx/TvLBtFgJ6k=
Subject key identifier:   E3:E7:89:0E:04:21:36:6D:CF:D7:C0:7F:DD:8C:5B:13:25:1D:4C:10
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer:       /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial:       019D28F230AA0C0DE7A6ED753B2D10B5872C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number:          15AC
Signing time:             Thu 26 Mar 2026 07:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:53 +0000
Files and hashes:         1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
                          2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: 0iUm2msnlIXvsmfvoZMBcQOuueYXrwQrvJJvlfiOqm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:30:aa:0c:0d:e7:a6:ed:75:3b:2d:10:b5:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
        Validity
            Not Before: Mar 26 07:00:53 2026 GMT
            Not After : Mar 27 07:00:53 2026 GMT
        Subject: CN=e3e7890e0421366dcfd7c07fdd8c5b13251d4c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:5e:dd:f7:81:9c:84:ce:52:00:de:f3:53:
                    a0:00:9f:5e:0f:bb:a4:5d:ca:47:86:32:07:7f:21:
                    2b:d1:18:e6:51:37:b6:f2:3a:26:91:6f:3b:d3:96:
                    7b:be:b5:a5:44:56:78:31:d8:0c:3a:0b:f6:4b:bd:
                    a7:c4:95:ae:13:d7:0a:14:4d:74:12:a1:0c:89:fd:
                    11:d9:7c:c9:cc:7b:ed:04:fb:f4:be:c4:a0:38:9d:
                    76:2e:4b:ca:d0:55:2d:63:66:20:62:a4:73:b5:79:
                    6a:b3:78:15:0c:97:5d:59:b9:ea:5c:df:08:1d:67:
                    c1:4b:ed:c6:20:34:eb:61:84:15:82:bd:4e:00:e0:
                    ce:b6:cc:57:2c:b5:ba:1d:01:e2:45:ff:60:dd:04:
                    aa:3d:fd:97:2a:39:37:40:0e:89:0f:f3:15:f1:4c:
                    c1:e6:f1:04:86:af:f4:05:af:2c:46:c5:9b:18:fe:
                    e7:9d:eb:36:9a:b9:25:fc:44:59:48:97:0a:b0:49:
                    a0:21:f0:ea:4d:1d:62:93:cc:c4:d0:ab:ec:7b:4c:
                    da:23:43:59:a3:80:78:9c:9b:0c:1b:43:2d:54:9f:
                    06:cd:f6:47:b4:0e:dc:a4:f4:ac:f1:d0:7b:4d:f0:
                    53:8e:66:23:38:85:88:5b:70:76:50:77:ad:39:23:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E7:89:0E:04:21:36:6D:CF:D7:C0:7F:DD:8C:5B:13:25:1D:4C:10
            X509v3 Authority Key Identifier:
                keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:38:f5:82:e2:c8:d9:df:95:d8:3a:5c:4a:f2:6a:0f:8c:08:
         36:f0:d5:e1:e7:0c:c2:ae:b2:fe:66:95:7f:23:d6:e0:c3:69:
         52:52:62:b7:e0:35:f3:97:6c:bb:61:46:12:4b:35:de:db:c9:
         4f:42:88:57:3e:55:16:ae:d1:09:ae:cb:2c:6e:6f:8d:d1:a5:
         6e:f1:51:46:8a:4e:e7:8a:bb:f6:e6:e2:78:35:51:d1:a0:71:
         41:b0:0e:7c:1f:ab:3a:9a:59:22:24:56:35:12:bb:d6:0f:e8:
         fe:13:63:05:c5:fc:27:d4:3f:53:c1:fe:08:3e:8e:d9:ef:f1:
         08:bc:81:26:58:3a:07:6b:cb:5f:a7:9d:6d:51:73:9f:7f:00:
         38:4c:50:5d:77:8d:0b:30:d0:cb:33:33:8e:e9:0a:d7:b2:1d:
         49:f9:14:fd:45:a8:78:a9:4e:80:b7:b1:55:75:06:ad:76:29:
         fc:ac:12:fa:bd:07:19:cf:e0:ae:dc:79:5a:7a:11:b5:d8:74:
         ab:16:d6:04:86:7e:64:f3:80:07:2a:9a:ab:da:a6:6c:20:59:
         3d:6b:ea:fb:9b:be:61:5b:32:f1:4f:e8:92:1b:f6:7c:62:3e:
         20:e2:18:6c:8f:7f:45:8a:31:38:13:1d:fc:58:6b:d1:f9:e2:
         3e:d9:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:57 2026 by rpki-client