Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File:                     Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier:          e15WqSbH3miOyKrWR3PEFsxi58SQciMjUnKPWe64/zs=
Subject key identifier:   E1:06:28:E3:38:5D:3C:C0:E5:8F:70:A3:FB:B7:CA:2E:C2:2E:7E:DF
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer:       /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial:       019D29CEB82D18EB76DB45485FA4D641C3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number:          06FE
Signing time:             Thu 26 Mar 2026 11:01:46 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:46 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:46 +0000
Files and hashes:         1: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: y/2OmdN0CGE3kQ7p6fuqkdqeb/fb6lTVtxhggADPVN8=)
                          2: YGnN82E7AnH_j4eaF9W1W1WjZSo.roa (hash: SoIylCg6a/wt1TKL6JVP1AZFMMupreSe0oa44in2zMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:b8:2d:18:eb:76:db:45:48:5f:a4:d6:41:c3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
        Validity
            Not Before: Mar 26 11:01:46 2026 GMT
            Not After : Mar 27 11:01:46 2026 GMT
        Subject: CN=e10628e3385d3cc0e58f70a3fbb7ca2ec22e7edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:cb:a6:e0:f4:7f:67:44:46:73:7c:be:d4:
                    ef:3a:c8:e3:74:a4:56:ad:cf:c1:bd:cd:f9:5f:68:
                    44:d4:f0:98:8c:1d:37:2b:e3:b1:de:d6:b7:ca:91:
                    5e:bb:93:df:ac:ea:48:aa:8d:6a:7c:bd:d0:4a:e8:
                    8e:05:8f:68:2e:69:7a:15:16:2d:c0:bc:db:c6:0a:
                    27:78:f2:e1:82:50:5e:19:7a:93:f1:7a:31:6b:d6:
                    f6:73:77:c9:f5:bd:b4:c2:cd:5f:4d:96:d6:3f:05:
                    d6:f7:ca:54:bc:37:79:6a:d0:fb:93:30:43:8c:57:
                    c6:34:93:8a:e2:ed:bb:df:1e:07:7f:87:ae:ac:66:
                    49:60:6c:d9:05:f5:3b:ff:00:3c:96:0c:fc:0a:9b:
                    96:54:2c:31:ac:04:3a:ae:75:32:b7:93:a0:86:28:
                    c6:2f:6b:36:3d:bc:48:99:35:70:b9:8a:f1:89:cc:
                    de:fd:c2:ac:bf:8e:7d:91:4c:df:94:f4:9b:93:09:
                    47:81:62:ac:e6:e0:e3:e9:81:8e:ef:9a:2b:c4:0f:
                    55:c8:19:48:2a:51:86:77:89:b0:39:c4:76:ee:01:
                    42:5a:61:b5:bf:e9:cf:13:b3:c0:22:92:60:7f:1f:
                    1f:9f:aa:b0:7b:95:d5:99:23:de:ca:cf:4f:c6:a1:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:06:28:E3:38:5D:3C:C0:E5:8F:70:A3:FB:B7:CA:2E:C2:2E:7E:DF
            X509v3 Authority Key Identifier:
                keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:20:b3:42:40:b7:9d:61:e0:46:4a:0e:cc:99:b2:9d:e0:
         76:82:d2:e0:2d:a8:2e:7c:fc:e0:28:bc:ac:99:b4:ff:cf:0f:
         45:0c:7e:ff:a6:37:86:a1:28:44:2d:df:e8:d8:92:7c:b3:94:
         eb:7e:e3:e9:cc:f7:80:85:d1:5b:25:c1:e7:45:37:11:44:52:
         2a:ee:4a:77:f6:18:78:b3:03:cc:79:95:30:18:03:ef:72:de:
         9c:7b:fb:cd:69:02:75:91:9a:1d:03:7a:fc:94:e5:b5:58:10:
         82:c2:e8:91:09:b2:5e:96:07:81:4a:cd:79:a5:bc:e2:b0:e0:
         e2:6c:4e:ff:bf:59:46:c7:39:6c:11:3a:a5:62:18:e8:d0:9e:
         04:de:40:10:d3:d0:a8:66:3a:6b:0c:31:8f:ae:31:9b:23:99:
         81:ac:2c:51:8e:d4:52:45:a6:75:cf:cc:fb:aa:41:61:36:38:
         b2:45:f7:2f:02:89:05:e6:5e:f5:58:9b:29:e4:9a:27:c9:02:
         b2:db:c3:fe:f5:9b:12:ce:49:b0:54:4d:0e:97:53:99:40:07:
         ea:ed:bf:74:6a:bb:c1:c4:18:15:33:6a:51:d7:d6:30:9f:c2:
         11:66:55:3e:ea:3e:ee:b5:e4:94:b2:7c:8b:09:42:ce:ae:e4:
         f4:90:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:22 2026 by rpki-client