Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File:                     piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier:          SXh/Yfixg0aYylhOD55Tde/lUwm9I4PfuNlz1iGNZVI=
Subject key identifier:   96:2D:9E:F7:5A:3E:A2:9F:D0:1A:1A:F3:AA:E1:AB:46:FB:32:2F:C8
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer:       /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial:       019D2AE0FC4431FDD62E6642705B5698FF09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number:          075E
Signing time:             Thu 26 Mar 2026 16:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:20 +0000
Files and hashes:         1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
                          2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
                          3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: Y/FE8zKmv6IG8l2IJoF6qRu06KWzbDxi3Zav+14Vte8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:fc:44:31:fd:d6:2e:66:42:70:5b:56:98:ff:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
        Validity
            Not Before: Mar 26 16:01:20 2026 GMT
            Not After : Mar 27 16:01:20 2026 GMT
        Subject: CN=962d9ef75a3ea29fd01a1af3aae1ab46fb322fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:bc:81:a3:eb:47:cd:21:cb:a4:25:39:a7:
                    10:b6:5c:45:a2:2b:bd:9b:60:03:9f:a8:05:a1:37:
                    22:f8:ac:1b:6f:a5:fa:82:16:fc:5b:a5:11:b0:89:
                    46:d6:8c:7d:cc:7f:67:80:ea:9d:45:52:11:e1:a5:
                    17:e3:6b:23:0b:18:4a:12:eb:e4:d1:57:75:81:02:
                    4f:2f:57:7f:b7:c9:ca:60:79:c7:46:5b:c1:f5:a5:
                    d8:d2:1a:15:c4:63:f7:ef:dc:4c:71:b2:f6:07:7c:
                    ee:f1:00:39:be:61:03:6a:0c:99:63:62:65:19:26:
                    0e:c3:f2:7c:29:21:34:a7:23:92:71:cb:78:98:fd:
                    a6:af:1f:5a:37:44:a1:df:eb:8e:17:6c:c7:50:a8:
                    a1:ae:6f:a9:61:78:0e:00:77:2d:10:7d:83:c3:0d:
                    da:00:73:49:05:a5:12:05:be:05:51:a6:2d:11:a0:
                    44:23:8a:af:20:45:fa:6c:2b:66:8d:cf:05:67:71:
                    8d:17:1c:45:84:4d:2b:13:55:27:cf:6d:2c:d3:a9:
                    d6:da:fa:e4:a7:aa:4e:77:35:8a:f8:63:a8:69:df:
                    b0:31:5f:99:ed:16:54:01:41:b6:1f:35:bf:e0:71:
                    ad:69:14:50:d1:ee:d6:13:37:5e:e1:30:5a:ae:16:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:9E:F7:5A:3E:A2:9F:D0:1A:1A:F3:AA:E1:AB:46:FB:32:2F:C8
            X509v3 Authority Key Identifier:
                keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:57:2c:56:f5:f4:e1:a3:96:4d:c2:8f:22:46:48:6b:84:
         95:09:22:84:4a:1a:31:53:20:01:f3:17:9e:5b:d3:44:e6:80:
         a9:44:fd:43:7e:4d:88:33:c3:cf:fe:a7:4a:35:13:fd:ab:f6:
         8c:be:17:b4:46:ae:92:63:ee:fd:1f:7b:7d:0e:f0:d6:42:47:
         b1:cd:5b:94:0c:79:7c:74:cb:5a:b8:75:72:d9:45:dd:67:8d:
         16:96:55:dd:27:49:29:f5:20:5e:94:3d:cc:85:64:fd:67:9e:
         ea:a7:8c:20:6c:fa:0c:52:ae:a6:e8:7f:ea:61:9a:ec:d9:04:
         aa:80:c9:4d:80:5c:50:ae:e4:a1:d9:1f:15:7b:f9:5c:20:16:
         81:d9:85:be:df:81:9f:08:68:89:56:a1:94:3d:87:70:86:20:
         88:e1:b0:01:b7:eb:c0:1f:fc:c4:97:25:33:3a:c7:d8:04:ad:
         74:8e:ec:37:f6:9c:b8:42:2b:d1:08:83:33:36:02:c5:bb:f0:
         0c:10:42:7c:22:22:d9:07:bf:7b:17:54:ed:02:33:e6:79:96:
         c4:ce:22:57:0a:86:b4:e2:e8:1c:53:b7:34:48:10:d5:6e:82:
         30:d3:e4:9d:60:bd:e6:22:d4:bf:30:40:2b:df:cc:2e:60:39:
         2b:97:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:18 2026 by rpki-client