Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          gk7kjpzXt7HwqhdCvh6RTRQ66IX42ncnV+I85yU1ac4=
Subject key identifier:   F3:1E:23:3C:B9:F5:59:8D:21:6F:D6:52:49:25:EE:1C:F5:E5:DD:09
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       019D28847E1FD078B59C88858F28DD3380EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0D6B
Signing time:             Thu 26 Mar 2026 05:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:04 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: 4s3vofMcJ8yps4u+mwj3HDRpqTtF0D9YKezRCB10+58=)
                          2: jalRR1qf4gkRSHcE337u9bWw_gA.roa (hash: wlzbEgEP0/Wpmn8I5QNTgk6aKSZpv2Z3WVVZUuK0r98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:7e:1f:d0:78:b5:9c:88:85:8f:28:dd:33:80:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: Mar 26 05:01:04 2026 GMT
            Not After : Mar 27 05:01:04 2026 GMT
        Subject: CN=f31e233cb9f5598d216fd6524925ee1cf5e5dd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:c4:78:a3:b5:ec:91:0c:91:b7:9a:f8:61:
                    a6:d6:2a:3b:30:2e:f4:6d:5c:ea:79:96:e3:e8:b9:
                    bb:95:e6:fd:82:6c:92:c8:af:71:e6:65:f0:c0:a0:
                    23:f0:64:29:a9:62:4a:e1:d7:34:d0:41:2f:94:5b:
                    d7:7a:24:a5:53:bc:a0:3f:2f:d7:0f:c2:51:c8:8b:
                    91:1f:1b:27:95:82:17:90:b7:70:67:c8:d2:d2:ca:
                    0b:7b:4f:53:b7:6d:a9:c4:ac:31:b0:68:34:87:ae:
                    4d:bc:60:29:d2:56:62:8a:8f:a4:87:33:09:bd:e0:
                    d4:26:32:a0:2b:73:6a:4f:00:7b:2d:4d:e5:db:45:
                    72:9b:72:ac:42:75:0c:ae:7a:1a:50:ce:25:f6:6c:
                    7c:e4:50:b1:e6:fa:a1:1b:8b:a7:2c:4f:b5:ac:28:
                    61:be:bc:28:2b:2c:f8:5f:4b:29:c0:b4:9e:51:e0:
                    f5:02:5d:c1:4c:d6:ae:07:8d:32:90:02:5a:b6:d1:
                    1d:44:0b:51:44:3f:8e:af:10:a6:74:dd:8f:ac:09:
                    b0:a4:10:2e:f4:e3:f9:16:de:c9:19:9c:99:97:01:
                    83:ee:e1:b0:ff:13:43:03:e7:34:e9:3a:4e:57:10:
                    1c:f7:10:a0:3c:40:73:33:e0:0b:42:67:ee:ba:f2:
                    6e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1E:23:3C:B9:F5:59:8D:21:6F:D6:52:49:25:EE:1C:F5:E5:DD:09
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:93:50:8a:d3:ec:75:02:d3:22:a2:fe:6e:95:c5:a7:87:57:
         be:62:fc:f6:23:72:d6:f8:75:b6:e2:38:ff:ae:a5:f9:ba:9f:
         dc:b5:94:49:60:88:b4:77:1b:08:8d:82:68:4b:12:af:1a:eb:
         fe:8e:46:17:11:58:ce:b5:6b:5a:c8:fc:fd:a3:c7:69:c5:81:
         19:db:76:04:5c:56:ab:fc:6e:62:12:34:6f:5e:24:bd:7d:a6:
         98:ee:ba:41:97:d7:1b:e3:3c:29:3e:e6:94:b0:77:17:0a:72:
         ed:3f:5b:c6:c4:9a:18:ab:ee:b8:20:e8:17:ef:02:19:2c:b8:
         70:5e:cd:af:59:0c:d8:ee:20:d3:44:63:bc:af:b2:1e:c1:29:
         ff:2b:b2:38:70:0a:0b:10:aa:dc:c4:85:d8:d6:43:54:61:02:
         63:fa:ea:41:fc:b1:be:84:7d:ee:09:bf:ce:91:84:ac:49:13:
         9d:fc:78:b9:03:f1:39:1f:aa:6e:4d:2e:37:fa:ce:db:7d:31:
         96:cb:23:cb:e9:46:b2:35:26:dc:cd:17:16:41:5f:9b:61:ce:
         cd:96:c0:7c:19:38:f1:b8:44:f3:58:74:6d:04:3d:68:17:2d:
         55:8b:4c:e5:94:b5:4f:12:ca:25:9b:8a:a9:41:36:dc:de:a1:
         9e:73:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:50 2026 by rpki-client