Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
File:                     e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft (raw, json)
Hash identifier:          fbwovmtAi9d1ejmzVj3WkV2L+xxHKb9hCAQuCYnTHLs=
Subject key identifier:   67:8F:F7:68:1C:B2:97:26:62:C3:99:5A:75:98:68:15:42:68:F0:E3
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Certificate issuer:       /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial:       019D31BE5FAD86BE37CE4478291406B681B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
Manifest number:          163D
Signing time:             Sat 28 Mar 2026 00:00:52 +0000
Manifest this update:     Sat 28 Mar 2026 00:00:52 +0000
Manifest next update:     Sun 29 Mar 2026 00:00:52 +0000
Files and hashes:         1: e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl (hash: d2nZSyzOLr186f71xuB9bLQzHw5dtuqlYTr/UfAl5kA=)
                          2: mFHhU2NyVkEbNwlkB3bejxUOOlA.roa (hash: EjtP26UkYPevXuuKHwl2GTUGnR0K4UdWJdQY55pYt8Q=)
                          3: oHEmOWvbStvmXg2LD_oqbDWil3o.roa (hash: 0Raa8F6IlDnkK8IyOP/5NEY/cQcjmmbqoE7t0YULRgs=)
                          4: zVeMOGhhQeFzksT1wb6RxaGm3Bs.roa (hash: RiwqJteMkhWRGoMK/7/uuJWp83uAVoqzTnUHF40fP2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:be:5f:ad:86:be:37:ce:44:78:29:14:06:b6:81:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
        Validity
            Not Before: Mar 28 00:00:52 2026 GMT
            Not After : Mar 29 00:00:52 2026 GMT
        Subject: CN=678ff7681cb2972662c3995a759868154268f0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:08:29:79:28:5c:b8:5b:f2:fa:d7:10:e7:
                    e7:f0:7e:fc:a8:ae:d4:b7:32:f1:66:a9:9e:ce:74:
                    88:1f:9e:0f:6d:09:f9:ce:e4:2e:56:62:f5:7a:63:
                    e9:93:87:c0:99:e2:1e:f7:52:0d:61:e4:49:13:9a:
                    a9:60:2c:ac:72:69:5c:ff:d5:f6:cd:fa:60:48:f1:
                    ca:5d:1a:4c:2a:fb:ea:e9:31:a0:97:71:a1:74:de:
                    4e:db:64:82:57:1e:9a:e8:b9:e8:e4:89:88:4b:91:
                    bd:9b:87:e2:f3:ae:07:1f:d0:f8:37:05:4e:5b:1a:
                    09:bf:33:fe:63:0e:7a:59:62:67:15:43:73:ce:d6:
                    18:e0:5b:c7:64:17:df:75:9a:b6:ce:67:58:fc:d1:
                    3e:44:7d:a6:1a:b4:1d:a8:ed:15:f1:da:6f:a3:52:
                    a3:82:d7:54:25:9c:36:8e:2c:d7:58:a8:89:bd:53:
                    9e:30:ba:40:00:55:d2:58:cd:4f:6e:ca:61:6d:7d:
                    b7:ac:cb:ac:a0:f8:9a:90:b1:94:55:34:51:6f:fa:
                    dd:05:be:e3:45:d3:90:e9:da:9e:0d:bd:ec:e5:64:
                    6d:5d:fe:d4:ad:67:87:0b:99:a7:2e:59:d3:b9:05:
                    7a:f0:9a:3f:73:9d:5a:46:42:a9:ba:e6:52:26:e7:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:F7:68:1C:B2:97:26:62:C3:99:5A:75:98:68:15:42:68:F0:E3
            X509v3 Authority Key Identifier:
                keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:60:9e:40:9b:5e:91:72:4e:60:94:d3:fd:f0:75:85:8b:2f:
         b0:d3:e1:47:c7:40:0f:14:53:41:3e:08:28:ba:29:b4:a4:f7:
         e7:06:60:8d:20:22:eb:18:71:2f:79:61:1e:d7:40:f5:e8:c6:
         ce:0f:ad:82:64:29:7d:70:5e:12:78:6b:28:6f:c4:90:9b:ea:
         21:eb:3a:dc:03:b7:62:42:0d:e6:76:e1:f2:2d:20:ed:6e:e0:
         c3:eb:cf:3e:56:69:30:92:c3:b1:8c:26:a9:8b:18:cc:d4:82:
         ac:5e:5d:d8:33:73:fc:22:01:e3:1b:9d:5e:4e:41:d7:d4:11:
         f0:03:e9:65:4f:67:1d:c0:71:88:c9:d9:83:47:7f:24:78:24:
         71:d8:24:8a:3d:b5:78:8f:d6:43:5f:9d:f1:47:7c:ce:48:0c:
         f3:2a:9e:21:8c:31:86:3b:87:64:fd:3d:ec:26:c2:3c:ea:7a:
         f2:cd:83:1c:1f:95:04:38:5a:62:c6:13:7a:aa:eb:3b:c4:e4:
         e4:6b:b1:04:db:d1:51:d3:c2:90:d6:1d:c7:82:0f:d2:ba:ff:
         e5:0a:7c:d6:d4:4b:95:a7:f0:57:99:cb:1a:fd:2f:58:d1:a0:
         59:60:a7:c9:29:1f:6c:ef:52:7c:12:3a:97:4d:5e:ab:eb:0f:
         58:76:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:46 2026 by rpki-client