Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
File:                     EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft (raw, json)
Hash identifier:          1gs9p9ld+ANTbDuXsF8Socio51ui57wf+ieisdy7VKQ=
Subject key identifier:   3B:B5:75:D7:B3:A2:0E:35:46:83:2A:90:34:7E:5F:E3:E7:D5:64:22
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Certificate issuer:       /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial:       019D2771EF760D25237E7BBCB4218582DED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
Manifest number:          0FB9
Signing time:             Thu 26 Mar 2026 00:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:11 +0000
Files and hashes:         1: 9TG6jiqZVWNpx9zYkAPf4kzU-7w.roa (hash: UPvJJD4WPPdIrkPpjQB2axNpGKInNF9uAY3pA8FvcF4=)
                          2: EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl (hash: cNojbnSAwIfgYlALW7eT2nU0nB/NjoKioJthx/7/xyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:ef:76:0d:25:23:7e:7b:bc:b4:21:85:82:de:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
        Validity
            Not Before: Mar 26 00:01:11 2026 GMT
            Not After : Mar 27 00:01:11 2026 GMT
        Subject: CN=3bb575d7b3a20e3546832a90347e5fe3e7d56422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:f4:86:d3:b3:b3:06:0c:82:b7:ce:c3:1b:
                    f5:49:c6:b1:be:38:22:e0:e7:ab:07:9b:d5:13:66:
                    16:58:cf:91:13:1c:5a:e9:14:10:15:73:83:12:23:
                    c7:f8:e5:40:3f:66:95:56:de:e9:9b:d7:0b:8f:eb:
                    0c:e7:f3:4f:81:ab:c9:8b:c3:9b:6d:7c:d2:b3:29:
                    d0:91:74:12:d9:76:e8:b8:4d:d0:31:79:bb:ae:da:
                    6e:90:64:94:28:8b:72:d6:df:a6:05:76:42:1a:ec:
                    9d:f0:43:e8:5d:54:fb:b5:e5:f1:a9:02:02:72:d1:
                    be:5d:fc:dc:4e:05:c0:37:f2:58:9a:af:5d:91:b7:
                    69:02:08:31:98:a7:af:cc:71:5b:2c:c0:30:7e:2a:
                    8b:1b:91:75:7d:8b:7a:e8:0d:f1:0f:c1:95:d3:1c:
                    8c:fb:9c:b8:84:f0:76:e7:a4:9c:1e:14:e2:91:86:
                    cc:ca:04:58:04:be:3e:b8:fa:a8:44:15:1e:37:3e:
                    6c:eb:5c:b1:5c:8b:60:81:52:43:17:52:b6:9f:a9:
                    7b:88:55:b0:58:89:63:69:a6:33:80:53:6d:ca:d5:
                    a5:73:52:b8:0d:59:03:bb:2f:15:a2:36:37:02:3c:
                    f4:27:37:58:3b:df:90:ad:5f:c6:3a:7c:37:6e:bb:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:75:D7:B3:A2:0E:35:46:83:2A:90:34:7E:5F:E3:E7:D5:64:22
            X509v3 Authority Key Identifier:
                keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:b8:a9:ae:b0:a6:7a:3a:80:97:5e:f7:eb:ca:46:fb:1a:
         54:89:60:55:a2:b4:8e:cb:97:64:ab:e5:bd:0f:14:1f:fb:a6:
         85:94:bb:8b:18:a5:f2:5c:05:75:62:6e:0e:ad:3b:7c:10:89:
         e6:dc:69:51:f6:dc:3e:79:3f:19:3f:14:5b:3d:e0:14:d7:13:
         a8:6b:b3:54:62:3c:63:d1:37:91:a9:3a:79:07:af:ea:fa:a6:
         f5:3e:d9:21:f2:25:1d:50:44:a2:34:0b:9c:47:58:f0:ca:79:
         d6:b7:07:e6:13:26:f9:e4:04:ef:39:fb:c8:b8:79:86:c5:03:
         07:10:01:7a:83:3f:97:6e:f1:3b:32:e3:e4:cd:7e:51:24:a5:
         3f:d5:56:12:31:e9:af:76:80:26:69:1f:6c:d5:98:25:e4:6b:
         3d:3c:df:71:ec:b4:55:70:e3:1d:86:72:bd:7a:60:cd:11:db:
         66:06:9a:42:64:14:0f:ac:69:06:1c:3a:44:eb:4e:33:2c:4d:
         4d:e5:49:15:78:85:4c:85:ef:a6:7f:be:a2:21:d4:b1:18:1c:
         3b:6e:c4:f6:3d:cb:e0:2a:d9:dc:2a:cb:54:a6:1f:20:53:6f:
         e0:2e:85:cc:a7:a5:26:e7:84:50:44:bd:aa:36:a6:19:11:c5:
         99:0f:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:48 2026 by rpki-client