Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
File:                     6Hzn3yMUDAAFElphqtchUx5oHw4.mft (raw, json)
Hash identifier:          3qyNrHS9iGsw25UlWDAVGsjfCvfyrojrWlfL4vJW4X4=
Subject key identifier:   F4:28:D8:10:49:1D:32:50:30:62:46:90:AC:6F:95:E6:67:64:04:8A
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019D2515668286234E1E2B79231C2CF07B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
Manifest number:          1638
Signing time:             Wed 25 Mar 2026 13:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 13:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 13:00:52 +0000
Files and hashes:         1: 1033KKof9Rjhw3ipbfhblku9kx0.roa (hash: g6EgGAtZKUdgRXlCc6QYFpK5mW36gENSEdBcVWaHFEU=)
                          2: 1yFMGL63tC1PXlDAdsFEPuOyju8.roa (hash: SRYhWEbmaMuAgpzLHDCfmDz10ZYe7eiwt0wBLsDg8wU=)
                          3: 4p-nv4z745RY5TKyxsUJtxM4YA8.asa (hash: o078G/TKMraQIFH2Pfyv2bb7MZ+l89fDUFx3WC9tvFk=)
                          4: 6Hzn3yMUDAAFElphqtchUx5oHw4.crl (hash: c9/EUmheFrdSk1jA0cHV41ZiqtfkL5r18I4v+M5YBEE=)
                          5: BoD_C6i2HZeGtapyXlsGIWkYGXg.roa (hash: xENNjEo8wfJISTosVLtVozLop7yO0yYl4BP3sTSaBW4=)
                          6: SGu81fH83a4fFDwRpua7wHVhFss.asa (hash: B831/IgiOq8ulfxYCKZSvT6C3gOL+b/4KMi6pZwM8zY=)
                          7: SbS8mmNslh-rWLs0ojFfHWzQpoY.asa (hash: ZSdsZsIyvD25lf4oTn6JdmcR96mot+WcSyDusNxTMqs=)
                          8: jBkRahacrkLQQ23ac368F01j5WI.roa (hash: oyVpwXheCdqTwMT8mzJwnekjFyIeHBTmGLuRsWkI4Gs=)
                          9: vc_KDoe9erXGLo2m9XOBQQ2suxo.roa (hash: Nn16gY8CbN6B4SW2KuOJbGWOcADvjUeG5ezS3F2BEWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:15:66:82:86:23:4e:1e:2b:79:23:1c:2c:f0:7b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Mar 25 13:00:52 2026 GMT
            Not After : Mar 26 13:00:52 2026 GMT
        Subject: CN=f428d810491d325030624690ac6f95e66764048a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:3c:7a:c0:96:85:e0:e1:fc:f1:3b:01:f0:
                    04:26:e5:1e:6a:bc:69:56:4f:83:fd:8d:64:b0:66:
                    a2:a8:43:a8:a3:6f:63:3c:16:1b:a9:a3:6f:8c:b3:
                    cd:b9:cd:af:22:6a:68:12:7c:5d:05:88:8b:66:47:
                    fb:75:2f:f0:b8:ef:9f:05:a7:c6:dd:b4:8e:67:71:
                    2d:98:29:bd:27:82:9e:4c:d0:86:4d:fa:0d:02:92:
                    48:5d:4d:a0:e4:b7:59:e3:62:6d:5f:33:9d:62:55:
                    7a:e5:60:ba:06:84:99:f5:f3:7c:3b:d2:e5:a7:68:
                    04:2e:f1:e4:9b:2d:22:3d:88:a2:0f:ea:da:cc:5c:
                    c6:a6:ae:30:4e:a8:66:f8:0e:a2:37:9d:eb:3f:99:
                    af:30:4a:ba:ad:58:7b:40:d1:c6:99:7f:8b:e6:07:
                    63:b3:ce:da:9b:57:7c:7f:94:1a:ea:51:96:f8:f0:
                    80:b3:6a:a6:39:49:b4:1d:c2:1e:04:8b:85:7a:0d:
                    9c:d8:81:17:42:0f:8c:6e:f2:a0:d7:f5:3f:2d:3b:
                    01:50:d4:ad:1b:49:28:5d:f6:42:ab:e4:83:ee:a8:
                    9a:8b:5f:6f:40:ad:57:f5:ab:3d:51:84:6b:ad:11:
                    ec:bf:78:de:ed:1f:40:1c:99:18:4c:0a:5d:d4:22:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:D8:10:49:1D:32:50:30:62:46:90:AC:6F:95:E6:67:64:04:8A
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:32:e6:e5:82:7d:73:65:d8:d8:a3:f7:31:42:9e:d6:f0:
         fe:fe:aa:45:eb:ef:ea:d8:b8:57:2b:a5:ea:db:8c:7f:7b:56:
         bb:03:f9:4c:e0:a0:d8:85:eb:0b:18:7e:de:a4:ac:8c:a6:93:
         94:6c:8a:15:fb:95:9e:58:de:f2:be:6a:71:5d:b1:5e:e8:c3:
         97:44:cb:2e:10:42:1f:0d:a4:77:91:4c:ce:40:e2:c8:a3:36:
         fb:1a:ce:07:f4:5d:5f:fa:b4:cd:f6:75:d4:85:7d:26:86:28:
         9a:b7:4e:4c:f0:f5:47:50:90:f6:e5:98:67:b7:13:ad:16:fb:
         26:6b:94:d7:4b:03:b2:de:b4:fa:46:38:d6:fc:eb:11:05:d5:
         09:1c:5c:d7:ce:52:04:ed:97:44:90:a2:95:5e:af:88:91:cc:
         1d:e3:27:0e:4d:78:a9:55:28:5e:1f:61:6d:69:a3:68:33:f2:
         d0:50:e8:26:1d:ac:a0:d4:a2:81:60:87:8e:c3:a6:ad:85:2f:
         a0:9b:64:3d:86:b9:4f:30:85:c1:28:3d:94:9d:29:dd:9a:df:
         75:64:71:b7:b5:48:0c:00:cc:b0:08:96:e9:5e:97:78:71:1b:
         a0:8b:44:af:7d:7e:ce:aa:c4:12:ff:fe:9f:3a:47:fd:cb:2b:
         a2:aa:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:58 2026 by rpki-client