Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File:                     DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier:          +/XBZCQ8CPCjoyYc6ckBEZUJjB0rpsACyIoIP5eFm3g=
Subject key identifier:   9C:E0:FA:50:79:1C:7E:65:CF:22:32:BE:AD:4A:EA:FF:D9:B8:42:88
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer:       /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial:       019D284E195A8E0DFC175FD0AE82E1B5055F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 04:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:40 +0000
Files and hashes:         1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: ZGAyTXuXZU2lE4hNy5ZyTTrs+C0wD5k9ThOCw1kx/t0=)
                          2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:19:5a:8e:0d:fc:17:5f:d0:ae:82:e1:b5:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
        Validity
            Not Before: Mar 26 04:01:40 2026 GMT
            Not After : Mar 27 04:01:40 2026 GMT
        Subject: CN=9ce0fa50791c7e65cf2232bead4aeaffd9b84288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:7b:aa:c0:86:8b:93:0d:f9:bc:11:39:be:
                    49:18:11:82:b2:be:6b:9a:6e:78:12:b3:f2:80:2f:
                    b9:88:35:28:2f:4b:91:0f:0f:d8:1f:45:0b:5f:a3:
                    de:fc:73:81:9a:ee:e5:be:f9:7b:f3:35:2a:f9:50:
                    ea:e1:7f:c1:43:fc:b4:8a:74:72:df:26:bf:16:88:
                    0e:2c:11:79:41:c7:1a:67:f1:82:32:f5:d7:6a:f0:
                    4a:25:54:ea:03:2c:92:f9:d1:2c:f7:4f:55:88:65:
                    c2:87:cf:08:a9:57:c1:41:9c:d1:47:3f:3a:6b:60:
                    33:c5:d0:fe:64:b4:3a:07:1f:bc:c9:de:6b:a2:b0:
                    58:cb:6f:8f:7c:32:a1:d5:60:0e:7b:e4:4d:23:40:
                    cd:a0:c1:61:b9:3c:fd:40:fa:58:8d:53:c2:fb:7e:
                    25:eb:5e:d3:57:0e:61:4b:f9:e9:70:24:f5:55:eb:
                    03:38:94:a7:e0:f3:33:b7:67:13:89:71:a5:9f:be:
                    7a:f2:d4:df:5f:1a:25:ed:ed:a2:0c:f2:75:c8:8e:
                    dc:70:7d:6c:85:e0:9b:c5:1f:01:34:e9:36:c2:ac:
                    8b:3b:20:ec:ef:8c:0b:17:96:76:4a:14:29:71:58:
                    2f:11:53:a4:ab:34:27:ac:13:fd:d0:21:95:16:c2:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:FA:50:79:1C:7E:65:CF:22:32:BE:AD:4A:EA:FF:D9:B8:42:88
            X509v3 Authority Key Identifier:
                keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d6:0f:77:76:c8:1c:d2:a0:c6:a4:1b:d6:67:7f:5d:bf:09:
         f7:6b:ac:97:37:5c:e0:77:90:d8:39:98:9b:12:af:71:6a:d7:
         4e:5a:9d:0e:15:b0:48:c8:f3:b5:c4:a3:16:76:ef:5c:3e:5a:
         73:3d:97:9c:a4:4d:f8:c9:71:da:49:10:ac:e8:02:c9:4d:2c:
         0e:fc:e3:06:0a:60:a2:8e:b2:6e:ab:6e:82:c8:ad:c7:02:30:
         55:60:0b:f5:0f:48:79:48:ad:49:30:c3:96:39:60:7c:db:0c:
         6a:0f:d4:6c:54:8a:16:71:d6:5a:35:02:4f:b3:4b:95:a4:04:
         62:ee:0a:56:d6:62:a8:08:72:74:3e:6c:1b:47:19:14:7a:98:
         33:00:96:dc:f4:88:2c:b2:bb:38:80:23:f7:72:61:1e:cf:30:
         49:39:fc:4a:0f:68:a8:c1:9b:e4:4f:dd:34:dd:0a:c4:9a:75:
         56:03:9d:ad:61:26:88:11:d3:16:c8:b2:e4:ef:24:3e:b1:f9:
         f0:22:4b:aa:22:ae:68:e7:e2:67:7f:76:0a:df:53:dc:b0:e3:
         97:15:30:a5:19:7e:be:a5:53:94:20:75:7d:f9:ab:41:88:c8:
         48:04:be:df:6d:f6:55:5c:79:f4:d9:ec:d6:ec:da:46:43:14:
         35:47:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:23 2026 by rpki-client