Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          +CJO8O3xHoGZDpl9iDpZFvKPS86+yvQpswHIxrD3BIE=
Subject key identifier:   96:54:49:9D:7D:CC:F4:6C:AB:18:2D:45:8B:C5:91:27:0D:12:F1:B1
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       019D27A87E4B17DF8AF44039B0F20546AC59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          0C26
Signing time:             Thu 26 Mar 2026 01:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:46 +0000
Files and hashes:         1: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: KHKUEfA8x+gWeBkbhoxfir0xoIntSlvvY2XKL6DUr08=)
                          2: xd8WtTpNSiw3OPvDq9rsEjInsvA.roa (hash: fZ0V/o/vI20M9OPDqf1/6QRLbpnmYCprw2uInkjQ1rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:7e:4b:17:df:8a:f4:40:39:b0:f2:05:46:ac:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Mar 26 01:00:46 2026 GMT
            Not After : Mar 27 01:00:46 2026 GMT
        Subject: CN=9654499d7dccf46cab182d458bc591270d12f1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:3d:a8:ae:ee:cb:f4:9c:53:32:90:88:75:
                    61:a0:1a:22:b3:99:ec:54:83:ed:e1:0e:b9:e9:4e:
                    b8:69:9f:ea:44:a2:ae:11:65:45:1b:34:85:ce:ed:
                    94:fb:2c:5e:10:eb:6d:c4:09:a6:02:9f:11:67:f8:
                    ad:bc:05:d1:44:46:e2:02:f8:8c:3c:96:77:fc:79:
                    2b:54:2e:6f:6b:f3:21:81:84:a3:a6:e8:01:5f:a4:
                    96:a2:a2:f8:f0:13:41:6d:24:8a:a6:90:26:24:b1:
                    3f:1a:6a:89:2d:01:30:1d:64:bc:c4:cb:e8:01:68:
                    4f:e8:d0:bd:8f:4c:87:c3:82:4e:df:ac:9c:ea:d8:
                    18:00:d9:84:8e:1c:99:fc:37:df:df:03:9d:08:1d:
                    e5:ee:df:eb:a1:df:27:c0:a9:cd:75:ea:61:67:5a:
                    cd:12:08:8a:f1:00:2b:5b:99:21:0a:bd:23:8d:26:
                    6d:16:15:b5:c9:ab:f8:98:ba:a6:97:cd:6e:41:82:
                    9e:ee:77:d3:95:dd:ca:0f:ba:ed:c2:6b:ec:ac:22:
                    2e:66:87:cf:1c:2a:3a:9c:3b:36:b9:76:9b:04:e7:
                    c3:6f:cf:77:a2:33:b2:ab:2a:48:72:77:46:05:5a:
                    22:bf:53:b0:91:32:e1:9d:07:3c:05:b7:b6:8b:0c:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:49:9D:7D:CC:F4:6C:AB:18:2D:45:8B:C5:91:27:0D:12:F1:B1
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:05:b1:64:e9:cb:68:da:06:97:82:6f:75:5d:77:a9:f4:
         e8:60:c1:cf:aa:07:75:0c:73:5e:af:c0:c6:bb:a8:7c:da:6c:
         a3:f3:38:a3:17:e5:ac:d7:19:61:99:f9:73:27:ec:bc:99:db:
         4c:12:f0:02:b7:7a:9e:9e:dc:ae:35:22:d8:07:2c:e8:eb:c8:
         4c:01:cb:21:97:54:f2:d8:26:2a:1f:1a:21:9e:e7:66:00:0f:
         3b:7d:5c:44:95:a1:ac:9b:77:59:49:3d:b9:95:4b:29:d6:2b:
         c4:d5:a4:f4:41:2f:53:6b:de:db:ea:d3:d8:52:d7:8a:f3:0b:
         d6:c5:b2:41:6c:a9:56:04:bf:d7:3a:84:b3:93:51:b4:8e:36:
         d1:2f:fa:57:7e:d9:8f:cb:84:49:70:01:48:50:5f:04:2f:32:
         97:2c:a9:f6:66:d6:6d:9b:a6:5e:dc:c8:19:c3:a6:df:05:e2:
         20:e6:c8:45:f0:8c:ff:1b:a4:4e:38:68:fb:08:6c:b2:ba:f5:
         ab:65:90:b4:4c:db:40:45:ce:da:2e:4a:5a:d1:9f:c4:62:c4:
         c6:d6:4c:b6:39:10:e8:c3:f7:14:60:16:78:ef:e1:e4:20:e4:
         05:6d:0c:7b:79:73:1b:ee:42:3a:f0:32:2b:0a:1a:e0:89:ea:
         43:ce:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:59 2026 by rpki-client