Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File:                     o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier:          YXL8Rx3saPe0XDoSIiv3/aDmwIaVcfUilw81HtPo4KI=
Subject key identifier:   25:82:79:90:11:A8:1E:06:D2:86:8A:43:5E:C6:FD:EF:B3:72:C3:9C
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer:       /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial:       019D26285479714AF2B734BABBCAFB11C84E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number:          01B6
Signing time:             Wed 25 Mar 2026 18:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:10 +0000
Files and hashes:         1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
                          2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: /TDR5eZTTa0JbyRc+ndQZRq0QcIgJ73dNBhAPYaIFaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:54:79:71:4a:f2:b7:34:ba:bb:ca:fb:11:c8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
        Validity
            Not Before: Mar 25 18:01:10 2026 GMT
            Not After : Mar 26 18:01:10 2026 GMT
        Subject: CN=2582799011a81e06d2868a435ec6fdefb372c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:38:76:39:bb:0a:0f:d7:63:37:f1:28:75:
                    1a:9c:83:a5:6d:d1:c5:2d:6f:26:ad:30:78:91:7b:
                    91:9e:4a:b2:90:14:ad:75:44:01:29:bb:20:5b:9e:
                    eb:f4:fa:5c:05:24:f5:6c:18:54:60:8c:ce:ec:6f:
                    a0:08:e8:79:9a:15:f4:be:f4:fb:4d:96:83:92:dd:
                    ea:77:9b:83:e1:c5:05:48:66:da:95:c3:7c:32:f3:
                    cc:c9:a6:ec:ee:e9:01:40:93:dc:ad:3f:e8:59:52:
                    28:e7:7f:d6:03:0d:74:0e:e3:b3:9c:f8:98:d5:ac:
                    db:1e:0f:72:a8:4b:2d:7d:89:42:6c:01:a0:ce:99:
                    a3:5e:bb:6a:a0:0c:a7:ad:26:8c:12:eb:da:6f:e7:
                    a7:79:35:49:14:25:2c:cb:57:f3:5e:b2:2a:eb:ae:
                    d4:6e:4c:d6:17:d4:15:ec:f9:d3:20:48:24:96:32:
                    50:56:76:7a:b7:79:8f:37:46:b7:c3:22:3a:0a:21:
                    cf:b8:fc:46:f8:49:69:1c:10:34:d2:c7:f1:fa:e2:
                    9d:6a:ed:a3:96:05:94:71:82:fe:b9:f1:39:a7:5c:
                    d5:1c:1b:37:99:2a:4d:44:bf:d4:04:69:17:f4:7c:
                    eb:db:6c:2f:12:21:a1:cf:c7:54:a2:6b:6d:4b:65:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:79:90:11:A8:1E:06:D2:86:8A:43:5E:C6:FD:EF:B3:72:C3:9C
            X509v3 Authority Key Identifier:
                keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:52:6d:bd:60:37:cc:45:15:0e:88:3e:84:09:b3:0d:69:
         5a:22:80:5b:44:1c:c0:c1:be:cd:38:7d:ca:b0:f6:37:b3:5f:
         b7:d7:c3:31:be:12:d3:28:0e:fa:a9:95:dd:90:2d:fa:0c:ed:
         22:12:2a:0b:43:e5:f7:ef:d3:26:76:49:26:4f:4f:54:56:e2:
         5a:2d:93:78:66:ec:88:0d:83:54:63:22:2e:5e:3d:1d:c8:be:
         49:5f:ed:6d:d6:b2:9d:8e:47:36:8b:c4:20:41:91:f6:41:5a:
         fb:2a:ac:7d:7d:ab:6f:c3:1b:eb:8a:cf:75:24:0e:91:0b:72:
         ec:1f:f0:44:b5:f7:a4:4f:6f:8b:a2:1f:19:1b:4f:81:48:cc:
         34:36:9e:17:bb:cd:81:8e:90:f6:32:14:02:8d:53:da:9a:90:
         dc:43:de:45:b6:ca:09:56:06:d4:e9:ba:0d:7f:aa:90:b7:e7:
         83:cf:70:8f:b7:d4:c0:60:5a:f2:2d:fa:f3:0a:62:a1:91:e8:
         89:d3:ef:d8:7d:59:73:c3:d7:d7:a9:f3:cd:c7:40:1d:64:e2:
         fe:2f:74:6d:4f:69:ce:60:a5:ae:63:2d:76:24:cf:7d:62:59:
         e8:34:db:6a:89:6a:33:f6:cd:8b:4b:61:c0:82:b1:d0:4c:fb:
         e9:fb:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:13 2026 by rpki-client