Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File:                     kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier:          WZdESMXsJdsK5ax04L+PNUFgFznIipry3RZ2mo+OFE4=
Subject key identifier:   EB:5F:EE:98:88:6C:08:F1:42:FD:61:FE:8C:4F:CC:77:EF:CD:15:E0
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       019D265FE2276A527E6F25560F65337B4FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number:          0B83
Signing time:             Wed 25 Mar 2026 19:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:51 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:51 +0000
Files and hashes:         1: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (hash: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM=)
                          2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: z5nofM7FTuCVEBGkOSBMaOKXS/tl3y/vzcwPt7vvOu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e2:27:6a:52:7e:6f:25:56:0f:65:33:7b:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Mar 25 19:01:51 2026 GMT
            Not After : Mar 26 19:01:51 2026 GMT
        Subject: CN=eb5fee98886c08f142fd61fe8c4fcc77efcd15e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:65:3a:7c:e8:a8:55:fa:4e:ae:0a:c5:19:
                    1c:f6:f6:8b:16:a8:f2:f2:0b:df:df:d9:88:44:79:
                    87:ba:6c:ea:ae:5d:6f:56:ef:7b:f8:e0:3a:87:e7:
                    c6:33:05:17:27:e5:81:55:80:ae:07:44:c4:06:a0:
                    49:42:17:4e:c5:00:41:81:75:db:93:5d:8b:51:5a:
                    ed:dc:82:f8:dd:48:ee:4a:34:0d:59:90:96:b5:dc:
                    2d:39:5b:b9:fb:63:fc:ed:7f:2a:8b:3e:51:eb:09:
                    c3:9c:ef:15:67:64:4d:5a:a7:b4:06:83:3f:c8:67:
                    16:f2:d3:b7:e1:a3:86:19:e7:6e:01:77:63:3c:81:
                    6b:f8:ea:98:38:f1:3e:6d:28:25:21:07:71:62:1a:
                    b1:91:99:ab:d2:55:b9:73:83:22:3c:f9:7f:05:80:
                    a2:e2:de:20:4f:c0:92:28:9e:96:2d:ec:0d:cd:df:
                    61:e6:76:91:39:a1:9f:36:db:b2:ed:85:27:c1:cd:
                    2d:17:40:89:fd:4b:a5:91:09:1e:68:ef:11:3a:8e:
                    be:98:59:e0:9b:6f:38:0d:32:c9:cf:3b:39:31:e5:
                    be:7d:5e:b8:44:5d:a9:b9:a5:84:d2:88:f5:89:91:
                    13:ef:c6:04:c3:9c:42:af:be:ec:f1:fe:08:4d:4c:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:EE:98:88:6C:08:F1:42:FD:61:FE:8C:4F:CC:77:EF:CD:15:E0
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4b:5b:ea:70:8e:5b:9a:06:52:19:ce:f4:68:6e:b3:2e:7a:
         a1:11:d4:b3:c9:7d:30:cd:4a:52:a0:6c:cf:3a:28:6c:33:2f:
         5e:f6:49:2a:cf:d2:84:8e:fa:70:43:25:2a:ae:e4:03:bd:05:
         18:98:92:1a:50:c9:e7:0d:87:bf:93:ca:fe:48:66:8a:86:6d:
         4c:ce:20:29:08:49:ab:46:ff:50:e0:ad:78:89:49:3c:01:39:
         4e:1f:3a:38:2d:1b:91:e6:8b:1f:6e:2b:ad:32:66:ce:08:73:
         0a:be:32:3b:54:ce:69:48:2b:c0:20:95:a4:69:98:fd:71:b1:
         8b:b6:6e:5c:9b:97:bd:5e:93:7e:24:00:6e:28:c3:4a:27:83:
         5b:6e:92:cd:c7:05:0a:8b:36:8b:1e:83:f7:9a:10:37:71:29:
         8d:cc:dd:89:f7:42:a6:f2:25:82:07:b0:eb:c4:cf:a0:d6:bd:
         25:72:63:a7:f7:0f:02:00:0b:7e:a7:99:97:ed:ed:99:12:0e:
         d2:01:52:cc:66:62:2b:f1:90:fc:3d:2c:aa:50:06:d9:03:b4:
         2d:6c:e0:b5:b2:a6:b0:08:37:3e:53:b1:60:c1:36:1d:22:bd:
         dc:93:a7:6b:0b:de:50:57:78:c7:fc:45:c6:ed:5a:fe:2c:dd:
         5d:74:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:05 2026 by rpki-client