Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
File:                     mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft (raw, json)
Hash identifier:          UGCQteeXIXjLV+3j+9fY/cEstioDIIYGOGVvIUAapyo=
Subject key identifier:   B6:15:62:AD:A4:FF:92:E9:21:00:4E:45:99:FF:C5:3F:29:64:48:FC
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       019D273A971B205AB3A630B7AAE6EB3BAFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
Manifest number:          12E2
Signing time:             Wed 25 Mar 2026 23:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:44 +0000
Files and hashes:         1: GbzVHVPV7fqmfNx03Nok7Xwc57w.roa (hash: zeJi6kvcTN0CQfz2lKYhPJQbiGipkfJNH0B8vGsiI7o=)
                          2: mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl (hash: /KXTdU+OmX+a35qoy7roxGoZfj1mhJlyBL5g5R1GoUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:97:1b:20:5a:b3:a6:30:b7:aa:e6:eb:3b:af:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: Mar 25 23:00:44 2026 GMT
            Not After : Mar 26 23:00:44 2026 GMT
        Subject: CN=b61562ada4ff92e921004e4599ffc53f296448fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:53:6c:15:7e:1f:fe:a4:e5:83:42:ac:20:
                    8b:87:46:6f:1e:93:de:1f:88:d3:3c:ac:9f:43:21:
                    41:84:1d:00:49:ab:d9:42:2e:42:db:ea:93:18:48:
                    05:32:e3:7b:85:1b:38:98:3d:f0:98:25:41:da:b4:
                    56:c7:29:63:fa:51:ad:de:9a:41:ea:c9:4d:84:f8:
                    9c:2e:44:10:4b:86:ae:be:b4:02:90:03:45:e1:2d:
                    93:b9:94:f6:c3:59:a6:b0:44:84:29:fc:bd:06:59:
                    a4:f3:33:a1:ee:f5:b3:85:a4:d5:7d:e3:5d:39:dc:
                    1c:ae:b5:2a:5d:e9:14:c8:db:79:49:c5:bf:d7:af:
                    42:14:63:a8:fb:7c:9c:98:55:c9:9d:fb:a5:ad:a6:
                    12:67:7c:79:07:ba:5a:ef:69:60:5e:f2:c8:47:4d:
                    c3:b6:e5:fc:2e:87:13:79:fa:01:4f:3e:e6:4f:9a:
                    f3:7a:1e:8e:5e:23:46:83:aa:9a:7c:d1:d6:d9:ea:
                    b7:34:8e:c8:2f:3b:c7:5b:08:34:c6:b2:64:c0:1c:
                    eb:74:75:59:09:f2:09:e3:a3:70:87:11:6d:ff:f7:
                    3b:43:a6:b7:fc:3c:d8:45:fc:a8:8b:9d:ce:0a:59:
                    ee:e4:5c:37:16:62:8f:be:66:08:72:3e:ef:1d:83:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:15:62:AD:A4:FF:92:E9:21:00:4E:45:99:FF:C5:3F:29:64:48:FC
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:de:e1:cc:8a:5e:00:4a:90:40:53:41:5c:bf:ab:d5:31:
         0d:44:23:f4:09:08:ef:1a:ee:5b:4a:fc:58:87:8d:07:e4:20:
         39:0a:6e:71:66:41:32:8f:86:d8:15:67:48:c2:c0:0d:00:59:
         81:89:73:fc:42:26:b0:ce:9b:b4:4e:82:8a:88:ae:30:bb:d4:
         37:e2:bb:cd:4a:e9:44:5c:9d:b3:79:c5:e0:a5:4a:34:69:90:
         81:42:5f:23:5d:59:ea:73:7d:54:5c:6e:0f:c6:67:ac:a6:be:
         5d:a9:9b:d5:ba:27:2b:5d:a0:b4:82:5a:f5:b8:de:37:eb:df:
         ef:83:32:7c:ab:9b:dd:9c:22:26:9c:97:15:11:34:9a:5b:a7:
         ab:0c:39:23:b3:d5:7e:8b:d7:14:00:1b:c2:65:fe:c5:7e:77:
         f5:ca:ba:86:dd:ca:51:f5:a2:83:36:86:d2:f3:15:a0:f6:21:
         06:c5:a4:ec:f9:6d:1c:87:bd:f7:0f:35:bf:98:a7:55:92:bd:
         43:bb:11:b0:da:98:30:88:df:17:97:d2:68:a9:8d:d7:1e:be:
         d6:ce:6d:92:e5:8e:55:9e:50:ef:94:b9:71:51:e3:fb:4a:0e:
         72:36:1f:c2:9f:28:56:cf:9f:be:89:0a:9f:88:1f:21:c2:79:
         60:cf:4e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:55 2026 by rpki-client