Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File:                     69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier:          Xen38NYijt4HteCc/cyfH9tqZyopUKLXqcevRAUk7e4=
Subject key identifier:   E8:BF:6A:E4:B5:22:6B:12:39:68:B8:33:F9:14:01:D4:86:6C:8E:32
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer:       /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial:       019D28BBC57899F344DECAF61C6F9383C803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 06:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:27 +0000
Files and hashes:         1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: N852NA/dqrVvyXISqR+Pi/dMGVs6fXRUvFa83hBSNOk=)
                          2: 6DzoadzIvflRSCanXdL7FqtC2L8.roa (hash: sur+A1CIETAgbr0Wn6YpsRLy5mn4DaVVYa9DTnS/yYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:c5:78:99:f3:44:de:ca:f6:1c:6f:93:83:c8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
        Validity
            Not Before: Mar 26 06:01:27 2026 GMT
            Not After : Mar 27 06:01:27 2026 GMT
        Subject: CN=e8bf6ae4b5226b123968b833f91401d4866c8e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:8f:60:33:f1:1a:14:d8:00:4a:46:dc:3e:
                    4d:fd:fd:a2:21:33:c8:dd:3d:f6:05:2d:dc:75:fc:
                    84:09:39:46:09:28:f9:f5:6c:b6:f1:56:9d:1b:b3:
                    7d:02:fa:63:5d:c8:db:b7:95:b1:ab:a0:74:e3:d1:
                    b0:6e:a0:b8:e9:c8:f8:38:9d:94:df:94:05:3e:95:
                    14:44:2e:71:88:c3:54:25:0f:39:ac:a0:3d:f4:48:
                    37:23:2a:3b:60:89:27:63:17:ae:5c:51:ac:c6:14:
                    47:fb:01:d2:15:50:0b:6e:f3:ce:76:45:0d:ae:cb:
                    00:66:1a:f9:7c:b1:47:9b:ff:21:00:84:83:39:93:
                    48:57:1f:bc:47:5c:f5:f4:06:33:7e:e1:ba:b8:c4:
                    2e:e7:97:0e:b7:34:f9:07:c7:d6:af:47:b6:bc:41:
                    74:82:20:fc:db:85:4e:ec:2a:28:5e:f4:a7:d9:2a:
                    06:65:4d:b7:a6:38:76:d7:95:2a:34:2d:99:3a:62:
                    43:f2:c1:7e:1d:65:86:8e:22:6b:d4:25:54:4a:6c:
                    e0:02:43:5e:0a:ef:06:e9:69:e4:cf:e5:c9:d2:59:
                    f3:3f:56:02:9e:a5:33:88:0f:49:bc:09:fe:dc:ea:
                    d2:22:5c:d4:8b:5e:c2:2f:7f:6a:f9:f2:92:7b:3d:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BF:6A:E4:B5:22:6B:12:39:68:B8:33:F9:14:01:D4:86:6C:8E:32
            X509v3 Authority Key Identifier:
                keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:bf:e8:fc:90:77:7a:e1:14:f6:7d:a3:21:15:2a:d9:63:
         96:c9:ce:0d:85:7a:c2:6a:11:e6:42:68:ed:9c:8c:c8:47:7f:
         91:e7:60:3c:1c:02:b6:f3:ba:94:e2:98:15:c6:87:02:87:d6:
         2a:7f:85:0f:67:4d:2c:23:78:ec:66:d6:cf:44:cb:56:19:eb:
         eb:d3:d5:0a:3f:c4:57:95:d5:c0:c8:cf:90:10:ca:8d:e4:b7:
         a2:aa:fc:1d:cc:2a:8a:95:b5:40:8b:62:32:ad:73:51:8e:07:
         5d:35:5a:6c:87:a9:28:17:d2:cf:53:48:00:8a:31:cd:cd:e1:
         52:f2:cf:46:22:93:fd:eb:b9:c9:fe:6e:cf:b4:d0:98:e5:93:
         da:b3:e2:66:7b:62:68:cb:c6:aa:75:bc:36:b4:87:69:83:ff:
         a9:d2:a9:a4:3b:88:4d:9a:ff:45:ce:8e:65:ba:f0:48:31:2f:
         6c:15:9d:44:fb:f1:a3:68:9a:12:70:3e:87:00:66:46:92:95:
         8c:85:d2:36:92:03:f9:7c:e8:7e:94:d2:23:c0:39:17:ec:8f:
         26:f1:7f:f0:92:c9:f6:d4:28:8a:74:88:b0:c3:a1:94:47:b9:
         9f:2e:49:6e:df:2c:94:3b:a4:b4:e2:58:2f:45:dd:8a:16:41:
         d3:e7:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:42 2026 by rpki-client