Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          6Cd0l6DT5rQVQFwRb3wLrurfugJ3HviRPkbtMfTwNKs=
Subject key identifier:   87:C6:3A:A0:B6:3C:27:5B:25:E4:7D:E1:99:37:DD:9B:33:F2:3B:14
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019D273AFDDCF862629D4229D0C50FF5CB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          0688
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: auayXzvDR18BtOqU5QSrjO2X46/mdc0Z/g3gQ8DqL2s=)
                          2: yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa (hash: 1lKxwhNATkAVqpc77ycYRa96oFT/1GMPUZCkZLj7654=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:fd:dc:f8:62:62:9d:42:29:d0:c5:0f:f5:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=87c63aa0b63c275b25e47de19937dd9b33f23b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:a5:8b:c2:4d:50:b1:38:fb:82:6c:49:52:
                    f5:fd:d0:2f:19:44:ae:45:d8:77:34:a8:26:f0:ef:
                    b6:99:81:25:dc:a3:e5:f7:11:95:f7:8d:21:4d:02:
                    4e:68:b2:08:06:6f:8f:bd:65:46:52:38:69:25:a8:
                    1e:59:1d:c4:9d:d4:2b:09:72:97:10:f8:18:26:c3:
                    27:2c:e5:02:c4:61:49:1a:d9:a8:fa:e7:a6:a9:fa:
                    65:1d:5f:79:ee:9e:4b:48:7a:40:65:44:82:89:c3:
                    37:47:14:a7:c5:5d:3d:07:b5:53:7d:33:83:65:12:
                    76:de:d5:99:05:93:a4:83:17:b5:07:40:34:f8:c9:
                    f1:52:99:1b:a0:5e:27:4d:b1:7a:5d:6b:4b:dc:69:
                    b3:a8:75:d4:da:78:b7:88:dc:4a:06:ae:01:b6:fb:
                    df:20:cd:90:75:9d:f7:5c:9f:a1:e1:1d:32:58:cb:
                    8c:20:79:c2:d1:ee:e8:47:8e:79:d4:d8:46:85:7e:
                    16:1e:64:f0:7e:be:58:f0:a7:cb:ab:91:85:81:aa:
                    29:92:5a:6f:da:24:69:a5:09:7c:f5:80:e6:9d:99:
                    4b:0a:66:a7:d7:4a:3d:a1:2b:2a:09:b5:60:d9:bb:
                    f9:97:d4:3d:73:a7:38:ab:06:c7:d3:cc:42:26:83:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:3A:A0:B6:3C:27:5B:25:E4:7D:E1:99:37:DD:9B:33:F2:3B:14
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:3d:17:58:6f:8b:ed:3c:21:d8:0d:bf:73:db:25:95:a7:
         3f:fb:19:bb:21:c1:92:fe:4e:88:86:f4:76:7f:42:b2:0a:63:
         0b:30:b4:93:18:27:07:72:45:d3:14:8c:50:ad:b5:e8:8a:bd:
         04:75:8a:e6:51:3c:b4:fe:58:65:d9:4a:33:e1:50:ef:53:d4:
         9c:c6:89:d1:3a:b0:7f:07:a9:b6:a9:e8:a7:99:ec:f8:5f:89:
         37:21:52:06:77:f6:98:33:55:dc:c6:02:1a:04:fc:e0:96:af:
         90:31:f4:20:a5:cd:cf:3d:09:3b:9b:19:77:6d:a3:fe:7f:89:
         9f:ec:17:17:82:b8:84:14:ca:e4:98:7f:a8:4c:dd:d8:8a:7e:
         5e:47:a8:39:2a:a7:e4:0a:c9:c4:a0:6b:82:45:19:9e:fd:d7:
         29:5f:33:4b:c9:91:dc:7d:9f:b4:ad:da:51:ec:75:cd:2f:8a:
         10:e3:59:1f:e6:d7:41:fb:ad:c3:61:e4:71:7d:ac:73:11:73:
         86:4c:ac:4e:45:52:dd:b7:d2:1e:10:79:40:b7:5e:36:8f:4c:
         87:de:27:33:53:c8:19:85:0a:22:da:43:1e:a2:1d:c7:86:58:
         78:46:2e:c0:06:f2:cd:4a:9d:8e:c1:5f:02:96:5f:c2:02:41:
         38:c3:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:13 2026 by rpki-client