Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          UBkv938SQtHSzVjvCEEDplhp02Xg2ATPK1FBRtaVzjA=
Subject key identifier:   05:91:A8:00:BF:60:6C:54:37:F0:74:30:61:DB:C5:15:AE:98:93:98
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       019D29293F09798645F9B632DC7156D3A306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          101A
Signing time:             Thu 26 Mar 2026 08:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:02 +0000
Files and hashes:         1: Cd254sJdJwuu6H9I9E0srrpdoBA.roa (hash: pL8Cyr7W2nS2mcEsGc+8rfoSe9scnFA9gs7/69wjtfU=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: wW9yiW3riZtF4P2FmatgVSoYNM5Iyt6YSrB7eKAL9QA=)
                          3: NKEvDzhxDBmLfFoED7YoUdXjLow.roa (hash: 29vPP7S5TvS0wSCUMz6/EH7GaUe47diCIdiBQvatduI=)
                          4: d0PfZiDQAfUb8dfx15UglgBUuoc.roa (hash: HZDXDvgZeDrPookCn9v4kcGEbz0yWS2FqsD6q/CriPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:3f:09:79:86:45:f9:b6:32:dc:71:56:d3:a3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Mar 26 08:01:02 2026 GMT
            Not After : Mar 27 08:01:02 2026 GMT
        Subject: CN=0591a800bf606c5437f0743061dbc515ae989398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:e6:cc:97:11:9c:91:93:f4:e1:2f:05:61:
                    fd:df:fc:4e:ad:62:35:22:dd:d7:45:ff:2c:2c:3e:
                    d9:b0:ef:b9:2b:dc:84:29:3d:0b:76:7a:e8:c8:7d:
                    84:15:b2:ad:93:fd:0d:90:f2:e0:51:30:60:2e:a4:
                    31:c4:b7:33:07:6c:4b:53:63:e9:05:cb:37:99:33:
                    b3:e9:5e:58:22:8e:88:3a:06:d4:6b:32:10:05:29:
                    82:22:f4:19:57:b4:9b:93:da:7d:39:cc:98:f4:73:
                    c3:f8:26:22:a8:72:42:f1:ca:6d:7d:63:3b:44:b6:
                    cf:ae:86:51:ce:22:0c:35:57:1a:5c:bb:fc:c5:5e:
                    f1:e7:97:8f:23:07:52:05:e4:15:a7:4d:42:8c:72:
                    9c:70:b8:a1:9f:47:1c:64:fb:64:e0:c8:56:60:2c:
                    8d:5a:a1:0c:23:6c:81:2f:ef:75:cd:fb:1f:fa:74:
                    7f:b0:d9:7c:25:aa:84:28:dc:82:9c:cd:4c:df:e7:
                    5c:ee:83:e3:0b:48:d8:52:ab:c0:38:93:eb:4f:5c:
                    e5:aa:59:b0:6d:c2:cd:09:a5:f1:d3:45:b3:78:ed:
                    8e:28:f8:53:77:38:1f:46:a8:ad:f6:91:e6:4f:2f:
                    80:49:ee:de:a5:be:a0:73:13:68:ee:6c:b7:99:36:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:A8:00:BF:60:6C:54:37:F0:74:30:61:DB:C5:15:AE:98:93:98
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:64:40:95:89:f0:9f:e6:12:c5:04:dc:4f:86:b8:ce:3a:3a:
         b7:57:5d:48:40:9a:ab:2f:ca:f4:08:6f:bd:3a:c0:38:ff:43:
         7e:7b:0c:14:d0:be:08:5a:52:42:25:5a:a0:07:46:9f:a4:b1:
         54:5e:da:5f:50:0f:c7:27:f3:ad:b8:88:dc:96:d4:ce:e9:35:
         97:66:ee:c3:58:fc:8c:e5:6f:cc:e9:71:34:61:84:3b:33:31:
         7c:9a:fd:e7:af:98:86:73:25:9b:a3:b0:61:24:23:04:fe:30:
         e8:0f:48:1a:ef:ff:05:b3:1a:1d:a4:9c:73:75:d6:3a:97:a9:
         67:53:18:99:de:9a:c5:5d:16:b1:9c:e8:30:a7:3c:35:3c:9c:
         93:81:86:58:87:33:0f:a2:f9:9f:48:a8:1d:83:3e:19:0b:50:
         cb:50:dc:be:64:b5:d8:0d:19:ba:e0:04:77:ef:fc:12:29:fd:
         8f:7f:3f:f7:cd:17:22:7d:80:44:93:e5:9d:25:47:66:0a:0f:
         49:1f:eb:b8:08:2b:5c:7e:62:62:c8:e1:2b:af:c5:3b:3d:dd:
         7b:cc:cc:22:7c:63:54:29:95:15:ee:fa:fc:27:05:26:1e:09:
         97:53:47:3d:fa:7d:6d:60:03:aa:bc:1a:e4:8b:00:ae:81:92:
         db:99:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:43 2026 by rpki-client