Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
File:                     k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft (raw, json)
Hash identifier:          6tzgMJyX7CyYFGswqe07qbHWIV4Gns8GAUXkhwZ3smA=
Subject key identifier:   17:F0:96:AC:D7:E3:C3:31:CE:F1:A2:60:14:BC:14:CD:A7:2E:21:AF
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Certificate issuer:       /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial:       019D25F1C5B5DE6C463DBAC47BA9A7A4DC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
Manifest number:          07FB
Signing time:             Wed 25 Mar 2026 17:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:34 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:34 +0000
Files and hashes:         1: Ke9JZJzAeU2y3MAj67Y-ezxLtDU.roa (hash: ol9IiLjFY9gZ/Hu0WdjazLtITNLeMCgHDACJrZ2QFng=)
                          2: SfyGLqqUmhSJdrvNRjgqa719X1o.roa (hash: W5M17NIRo4ubi5ZsSmZINBoyskG2lROrQJ2bZs1LviM=)
                          3: k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl (hash: dW4ET1y1Yjh1j1vnBjI9wNkcQNBj1fPDFvrJwEvmP4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:c5:b5:de:6c:46:3d:ba:c4:7b:a9:a7:a4:dc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
        Validity
            Not Before: Mar 25 17:01:34 2026 GMT
            Not After : Mar 26 17:01:34 2026 GMT
        Subject: CN=17f096acd7e3c331cef1a26014bc14cda72e21af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:3a:8c:20:4f:d4:2a:8b:de:fd:c2:2e:44:
                    a7:e4:f8:f1:60:b7:18:ef:05:52:da:9c:3e:70:ae:
                    9b:2e:b2:5d:dd:d0:23:71:47:38:d0:2e:ad:68:9d:
                    09:d3:ec:41:d5:df:fd:e0:c9:5c:03:8a:c8:df:a4:
                    9a:22:d5:3f:51:8e:a3:07:37:2a:eb:84:36:16:10:
                    d9:b1:32:49:91:9d:55:df:75:dc:3e:05:af:1a:41:
                    1a:8b:03:5f:98:d2:e7:ff:21:b8:18:2f:fc:c0:35:
                    d2:e5:b4:7c:dc:a8:66:b8:ee:ef:f7:59:f3:92:9d:
                    f3:b8:e4:9d:00:92:bf:48:ac:d6:49:63:b6:37:5d:
                    5c:b3:82:ba:fe:9c:22:17:d3:d9:16:40:6e:3b:b8:
                    c2:b9:38:b5:6c:df:22:0e:56:d9:04:a6:0b:42:29:
                    f4:36:1d:da:cf:de:57:b6:96:e5:56:7f:4f:03:a2:
                    b9:1f:10:5d:e2:08:e2:06:09:f0:c2:ba:84:4b:c9:
                    90:a5:9b:76:07:05:78:51:e5:54:67:85:bf:3f:44:
                    0c:ef:84:91:f7:c4:91:12:54:29:3a:5b:72:29:be:
                    e3:16:e2:36:33:21:a5:37:3d:08:fd:0c:0c:24:27:
                    2c:bc:a5:52:ad:7e:1a:54:87:54:be:0a:c2:1e:63:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F0:96:AC:D7:E3:C3:31:CE:F1:A2:60:14:BC:14:CD:A7:2E:21:AF
            X509v3 Authority Key Identifier:
                keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:1b:29:37:52:76:1a:c8:ac:b0:31:45:b6:9c:59:dd:d4:
         1c:56:75:9a:6f:e2:93:89:07:2c:4e:e5:12:28:a2:2f:a8:b4:
         92:c8:e5:15:02:5d:4d:e0:1a:bd:5d:b7:b2:99:f7:1e:bb:5d:
         42:c0:ea:fc:9f:b3:d1:bf:11:2b:f8:bb:b9:16:b8:80:58:73:
         b1:a4:38:c9:7e:61:00:f5:a2:da:7a:60:dd:07:31:9c:f8:90:
         ee:fb:0f:b5:86:d6:64:e7:d1:2d:56:14:5f:01:50:50:d2:d9:
         8b:8d:43:5b:71:61:91:53:e5:15:f7:e3:c0:e8:f5:e4:e9:a5:
         c7:c9:72:e7:b4:29:bc:6d:6d:cf:2d:51:c0:13:43:29:f4:8e:
         ad:9d:54:90:7e:98:b0:26:2a:c4:24:3a:be:53:1c:98:e8:6f:
         b5:3f:ec:2e:cd:f9:12:ee:0f:38:df:b7:18:48:67:72:60:00:
         46:87:aa:b2:09:ac:3c:b9:d5:62:d3:af:c4:de:7a:7f:1d:4c:
         b0:aa:fc:91:ca:8f:2d:af:14:47:86:7a:ed:a8:86:6f:19:bb:
         a9:08:c9:32:2e:43:b0:ce:a8:6a:3a:88:9d:f2:50:39:7a:7f:
         b5:f5:2f:d8:7c:03:57:14:cf:4e:49:06:fa:a2:e8:ff:05:91:
         39:71:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:33 2026 by rpki-client