Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          FTb7V6cJHlhsBZOaBkPyr0wYMTWHC3Z3U1KOj/JIm1s=
Subject key identifier:   D3:C7:71:93:DC:46:2A:3C:61:D1:A6:30:C7:59:B8:D3:9F:B8:89:98
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       019D28845618F0135727A77709F0B6D4BD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          13B2
Signing time:             Thu 26 Mar 2026 05:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:54 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: E458qFB4OAqPWnZ8mf4sZ5Cj3bzoWv+0n8nKryGEOMQ=)
                          2: CxjvBT6i6ORn-LgV2GBf20kjEYw.asa (hash: BzUmnePwH8qqVa3rp1UNOBEk9Rs5woiSczy+DZk7nog=)
                          3: KgkchIsyILOfTwaKeasxpjdcQXs.roa (hash: CYbiKMiKuFeSX+s/JGs9HsfLCedULZjZfgzxNtppN/c=)
                          4: _OzM8w4FoR9ccCbQv3-snmY5IPs.asa (hash: MiIqtXDMPv3SC27FerQ7njWvgkVA9z0GFX+NGxq8AW0=)
                          5: uVof_pZ74sFHnmAAGfe8hPL5XXc.roa (hash: XEVTEZp90XVbiLucI7ze6QHAKLfnmtdX6Lu0uoZP/AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:56:18:f0:13:57:27:a7:77:09:f0:b6:d4:bd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Mar 26 05:00:54 2026 GMT
            Not After : Mar 27 05:00:54 2026 GMT
        Subject: CN=d3c77193dc462a3c61d1a630c759b8d39fb88998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:48:eb:92:5c:c5:1d:dc:c0:74:6f:5a:9a:
                    bf:7d:96:96:54:cb:f0:4b:52:54:5a:ea:3b:cd:d5:
                    b6:99:7f:ab:b7:bb:e7:53:48:c7:dd:ff:88:aa:92:
                    1e:f6:dc:55:c0:ee:ae:5d:27:f7:2f:12:2e:95:fc:
                    6c:df:52:f9:8a:e5:aa:36:4a:1b:35:79:9d:c3:17:
                    2f:f2:87:e8:ce:01:60:ff:c9:6e:cc:6a:66:c2:6e:
                    0e:ea:b2:5b:6e:0c:ff:86:d5:99:d0:f9:b1:95:35:
                    71:f3:e4:b4:22:4a:21:3c:80:fd:10:34:25:4c:90:
                    8b:71:46:f8:eb:70:bc:ef:7d:30:f3:b5:4b:0a:17:
                    75:16:b8:d4:21:32:9c:83:4a:58:84:29:b5:b2:3a:
                    6b:99:1f:3e:4c:87:e6:aa:d9:bf:b0:4d:7b:b9:c3:
                    24:f6:2b:13:3f:d4:59:90:e8:88:28:9e:0a:b1:58:
                    16:60:7a:c0:e3:3e:b5:99:c8:ae:9f:12:2c:07:b3:
                    33:5a:79:37:3f:fb:04:9e:e0:45:4f:23:48:b4:f1:
                    ad:46:8e:f2:b1:f4:b3:a2:6f:8e:9a:67:40:62:71:
                    7c:ba:ab:a9:5b:ff:51:2a:cc:0d:02:af:f4:bc:11:
                    5f:92:c1:62:90:77:aa:42:4a:54:5a:3c:2a:f4:8e:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C7:71:93:DC:46:2A:3C:61:D1:A6:30:C7:59:B8:D3:9F:B8:89:98
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:48:a5:11:d1:e9:8d:df:0a:71:94:d6:5e:aa:bd:08:01:d3:
         22:23:bf:e4:d1:fd:47:91:01:51:7b:ad:fb:c9:94:c0:8c:b2:
         33:78:a6:dd:bf:1d:3b:99:82:53:8c:2f:0a:4e:1e:79:ea:49:
         1d:fa:1c:c3:9a:22:c4:17:7d:43:81:f5:22:9e:01:5f:c5:34:
         fa:ff:2a:01:63:b6:62:f9:9e:4f:92:1a:d9:6d:14:84:77:86:
         ba:81:eb:67:24:06:35:40:3c:39:61:40:44:1a:39:7d:cb:dd:
         ac:98:41:3d:4c:a9:bf:e7:b7:f5:fa:13:96:0e:2a:18:50:8b:
         35:7d:d0:da:d1:1d:4c:d5:1d:16:7a:0f:cc:b1:52:54:9d:bf:
         be:4d:85:57:b4:04:76:9f:c3:42:8f:5c:c8:f2:63:38:ca:92:
         13:2d:2d:da:83:99:b5:cf:0c:7b:87:8f:25:ef:6f:57:e9:02:
         13:ec:ac:82:f5:61:27:be:89:95:69:13:f8:70:30:94:b2:6d:
         74:dc:d8:de:18:b2:e1:15:35:7e:fb:01:49:c7:5a:9e:d8:ed:
         06:33:3d:c1:3e:dc:24:c6:90:83:47:de:7f:bc:45:03:96:c6:
         59:a1:7c:9c:07:f2:fb:4f:d2:86:c6:09:62:66:4a:ae:1b:0b:
         5c:87:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:01 2026 by rpki-client