Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
File:                     Ce9ptw76WDK2FamN-djuSvWg_rY.mft (raw, json)
Hash identifier:          Y/DUnd+/7zebE5YNAxYO5mAweR2hsvI+CZX87bE1tGg=
Subject key identifier:   E1:56:0F:F7:1B:16:BC:4D:5F:BC:0C:1E:75:88:2B:F8:80:27:73:72
Authority key identifier: 09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
Certificate issuer:       /CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Certificate serial:       019D329A086D01F442F6012F2D4A92E1433B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
Manifest number:          59
Signing time:             Sat 28 Mar 2026 04:00:48 +0000
Manifest this update:     Sat 28 Mar 2026 04:00:48 +0000
Manifest next update:     Sun 29 Mar 2026 04:00:48 +0000
Files and hashes:         1: 6FnXpjQ59g5sXxs58-cmakXFI6c.roa (hash: 7jdSARNoDZ421UFIkyjxe0IGl8Z6A3h2G9Qzi9YoQnU=)
                          2: Ce9ptw76WDK2FamN-djuSvWg_rY.crl (hash: pIWDMwIs42b/a5t0YSPlgvbmyv5sgMWTRcjHuem51a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:08:6d:01:f4:42:f6:01:2f:2d:4a:92:e1:43:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
        Validity
            Not Before: Mar 28 04:00:48 2026 GMT
            Not After : Mar 29 04:00:48 2026 GMT
        Subject: CN=e1560ff71b16bc4d5fbc0c1e75882bf880277372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:4a:47:ac:6e:85:44:25:03:a2:69:4f:29:
                    dd:27:1a:56:84:b9:11:74:08:c5:b3:e9:31:83:13:
                    43:79:08:ed:ba:67:41:69:ea:ef:e1:96:26:95:4a:
                    e0:f5:be:d8:62:b9:74:0a:a9:d5:04:79:49:9b:e8:
                    01:ed:6b:c3:b6:89:18:90:8e:10:82:6f:8f:ab:f2:
                    78:f6:ac:21:1b:a4:9e:2a:f9:a1:17:21:3a:bf:2c:
                    b5:82:ae:fb:d9:18:a2:32:9e:9d:a5:1c:7e:cb:15:
                    15:4c:f1:23:56:fb:a3:d1:c1:46:ec:98:50:2f:93:
                    b4:97:67:38:6c:47:c6:44:21:c6:94:46:e2:a9:15:
                    34:d6:55:48:56:25:a0:b6:2b:c1:06:00:e0:21:9e:
                    ed:1e:ba:7c:1e:3d:94:32:48:41:e8:1e:31:de:5c:
                    16:a5:a8:23:81:19:e9:e2:ae:5d:90:0c:80:3f:66:
                    e5:db:69:b6:60:d0:ef:d8:b3:82:eb:d1:85:66:53:
                    71:b3:35:f2:c7:27:89:8f:e1:49:bc:9a:99:6f:64:
                    d8:45:65:e9:40:36:b9:f7:0b:f5:01:ae:d6:7d:c2:
                    a7:29:19:89:2e:7d:a6:7a:86:82:7a:1f:46:81:93:
                    5a:e0:fd:19:25:7d:47:b5:28:c2:ca:b5:77:8b:da:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:0F:F7:1B:16:BC:4D:5F:BC:0C:1E:75:88:2B:F8:80:27:73:72
            X509v3 Authority Key Identifier:
                keyid:09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:a1:f4:a5:07:0d:0a:89:50:a1:fd:d5:71:d4:f1:6c:3f:
         87:f5:21:35:05:18:c8:4e:0d:5e:e8:0a:fe:ad:b2:82:b0:d9:
         fc:07:f6:75:67:7a:22:b9:9c:07:a7:89:6c:95:ca:12:70:d4:
         34:f9:4c:95:f6:cb:a7:62:d6:b4:58:bf:f4:6e:ab:d3:e4:83:
         d4:4b:22:a3:7b:ce:82:f1:b7:ed:ba:1d:3e:42:68:92:c7:72:
         1a:ee:67:fe:81:19:82:77:2b:2d:b7:af:ab:87:56:42:b6:08:
         36:12:e9:50:1d:ce:af:e5:84:7c:42:59:20:19:4a:30:6f:1f:
         d9:66:22:45:35:3e:18:41:1d:6f:dd:cd:3d:fc:27:6f:88:78:
         3d:b0:ea:dd:e6:6e:3f:75:e5:50:5e:87:ea:0e:59:5c:4e:a2:
         4a:d7:16:59:4d:63:24:b1:b2:43:7d:b1:63:50:2f:b0:13:ea:
         41:2f:4f:83:98:5b:5d:56:7e:37:91:91:91:85:af:2a:0f:12:
         0f:ed:13:6d:92:37:35:ea:68:5f:cf:e1:1a:01:5a:c2:36:8a:
         59:4b:80:3c:6f:6e:58:22:c9:ad:37:0f:f1:3c:9c:48:e5:be:
         70:f5:5a:23:fb:e0:60:9b:f2:64:90:53:4a:e1:c5:9f:e0:3c:
         cc:20:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:20 2026 by rpki-client