Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          yUNiv03h9jEQFlAsROdmE+HOqVOm5HWT3Dqgm/QQMfc=
Subject key identifier:   58:78:AA:DB:3D:EE:60:2A:9B:FE:AF:C0:3D:D9:A7:30:EA:7D:00:B1
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019D2884CD24AEFD31397B0DAEB7303E3AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0F18
Signing time:             Thu 26 Mar 2026 05:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:24 +0000
Files and hashes:         1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: cqNFYnRpWfOFPzhFtztKO6dDTrlYIDRPoJ2ZWLZRNJc=)
                          2: Wkq5mVHI9Kov9WutxltADYyKbjI.roa (hash: dcD60AjT9AYOCFQPLaVcEDoHiuV5FyWG3g4HkGOvigQ=)
                          3: t9vvWYRPeToATeVWr4VSq8ee-Bg.roa (hash: ykKWvPxw03+JwAzaQkW4enMVJbdZNrE/vLvG44Vy5as=)
                          4: uxuYZ_f6aWaxaC82KUMAv_QaxnA.roa (hash: AHIAZkO88MIw/Jonn2+RvT3gl4wyE+yeli6wGOjt5vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:cd:24:ae:fd:31:39:7b:0d:ae:b7:30:3e:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Mar 26 05:01:24 2026 GMT
            Not After : Mar 27 05:01:24 2026 GMT
        Subject: CN=5878aadb3dee602a9bfeafc03dd9a730ea7d00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:b0:82:1f:84:5f:a8:aa:a5:9f:a2:c2:d2:
                    6d:2a:be:ec:bb:40:d6:86:75:b5:dc:4c:70:ef:7d:
                    45:1d:b2:03:76:df:da:9b:4c:60:83:54:a3:e0:34:
                    49:fa:18:32:4a:c0:07:de:ab:63:b7:f3:23:a6:b7:
                    c9:7e:12:0a:d7:82:47:a7:dc:41:d8:68:5f:4b:72:
                    3a:2c:e2:e1:c4:ed:95:a6:7a:e5:e6:c6:e0:5a:07:
                    55:a3:c8:e5:af:aa:ed:02:a6:ba:27:50:5c:1c:ce:
                    3c:b9:ab:14:70:89:9c:3a:3a:84:f7:eb:88:f4:22:
                    98:1a:c7:d2:46:e0:d7:53:d5:82:be:02:bb:61:f1:
                    8c:a0:11:a9:37:43:0b:9b:d1:de:57:89:12:cd:7c:
                    ef:98:82:80:8c:c1:1d:9a:1e:52:96:cd:f5:ee:21:
                    90:ac:41:1d:b5:4a:80:58:f1:69:50:b8:e5:f6:5c:
                    6c:35:aa:09:a3:58:c7:ce:33:e2:88:02:7e:19:43:
                    24:19:c5:be:29:d9:06:da:3a:ba:95:9c:79:50:9b:
                    eb:79:5d:d7:3c:71:2e:22:a9:66:21:38:42:06:8b:
                    63:f8:78:8e:63:af:31:ce:08:9d:5f:27:51:29:49:
                    30:13:7f:a1:94:15:90:8b:b8:38:65:1d:0a:02:5d:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:AA:DB:3D:EE:60:2A:9B:FE:AF:C0:3D:D9:A7:30:EA:7D:00:B1
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:da:cf:6c:e6:fc:f5:bd:c0:d7:c3:81:c9:79:08:67:14:a5:
         0c:e9:14:3e:50:35:02:3d:a2:49:f4:e0:6c:85:d5:86:88:b7:
         81:b0:75:13:17:92:aa:c8:4c:60:cc:54:37:ee:eb:2c:a5:6b:
         af:f6:7b:b2:84:22:ba:ff:c5:29:90:49:a9:0d:17:a1:b5:53:
         8c:26:ad:7b:a9:22:93:0d:64:b3:f8:95:c7:d6:da:7d:64:90:
         f8:4b:96:da:ed:50:01:4e:ac:5e:d3:94:83:ae:a3:6c:2b:c9:
         ec:8a:49:5f:86:b9:57:ed:e1:bb:74:48:2f:f7:5f:0c:f9:48:
         5c:9b:08:94:33:65:ec:56:11:e3:7a:fc:eb:35:ba:1c:35:4e:
         8e:c7:2a:fe:6e:8b:44:99:12:61:a0:16:12:af:8c:0e:e5:d5:
         e4:5f:8c:a6:8d:c4:4b:2e:b2:f5:da:bc:0e:84:58:39:73:19:
         22:44:06:bc:78:86:8f:b7:c3:96:86:60:b2:b8:56:b7:b2:be:
         85:c8:5a:20:b4:87:24:dc:3e:aa:3c:6a:7f:a7:10:49:c6:37:
         31:2b:3a:eb:a9:75:eb:e1:bb:b7:bb:11:18:e6:44:29:00:2b:
         97:a1:6a:38:57:03:0c:48:db:b2:5e:a2:ee:cc:95:13:6f:24:
         fd:be:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:55 2026 by rpki-client