Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File:                     41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier:          ZHDSeLhopt2hpqos7MLYFDKSQzQcCL+iu1dKzfgOU9k=
Subject key identifier:   E8:1F:48:6A:EB:2E:6D:2A:4C:2E:79:0A:14:85:69:EC:DF:4D:87:34
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer:       /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial:       019D2996D98231C9EA027D8EF578E4267AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number:          01B6
Signing time:             Thu 26 Mar 2026 10:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:45 +0000
Files and hashes:         1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: CNbhnunWA2TKEPRldT/k9Wbd6/6HlmwHfd7fJb5rqpo=)
                          2: fJC9vmdZueXz61wAYAD-WUsaH2A.roa (hash: k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:d9:82:31:c9:ea:02:7d:8e:f5:78:e4:26:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
        Validity
            Not Before: Mar 26 10:00:45 2026 GMT
            Not After : Mar 27 10:00:45 2026 GMT
        Subject: CN=e81f486aeb2e6d2a4c2e790a148569ecdf4d8734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:ec:12:fe:09:88:54:ee:fd:4b:84:ec:3e:
                    d8:10:d6:27:fe:dd:e2:b3:70:7a:40:2b:fa:d7:ad:
                    2e:0c:3e:ec:9b:83:d3:c4:01:dc:7a:c0:3d:0a:ca:
                    48:a5:64:72:15:3c:f4:71:a8:01:c1:fc:b4:11:1c:
                    21:5d:94:0b:0d:bd:75:f6:38:e6:66:6d:38:44:e5:
                    ea:4a:ec:b3:bc:de:13:1b:68:da:60:18:f1:96:3f:
                    91:ac:66:a2:e5:41:32:ef:0d:86:b5:39:8e:0a:65:
                    5c:dc:94:84:85:82:15:95:54:a1:2a:cc:f9:ca:0c:
                    57:88:56:72:63:cd:a2:72:b1:9a:cb:20:50:aa:e9:
                    fd:e6:67:9c:ce:89:da:11:05:f0:b9:b7:ac:6f:88:
                    46:21:63:62:aa:a4:3d:bd:7c:d4:ad:28:e8:5a:a9:
                    05:9d:27:66:55:c1:88:d2:5b:95:04:48:3e:d1:20:
                    4c:56:35:4b:bf:35:4d:e7:af:11:2d:19:8c:0a:91:
                    97:e6:60:9f:d0:e2:db:89:d2:f9:94:3d:de:b6:4a:
                    2c:d7:0b:e5:2c:d0:ac:01:fd:04:66:0b:03:5c:fd:
                    c2:93:f7:7c:5f:07:4f:66:46:10:92:e3:2d:ce:ca:
                    65:f2:22:6b:92:8b:7b:da:87:e3:68:b4:4c:71:5c:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1F:48:6A:EB:2E:6D:2A:4C:2E:79:0A:14:85:69:EC:DF:4D:87:34
            X509v3 Authority Key Identifier:
                keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:89:06:fe:b4:01:ed:25:ce:b5:a4:0d:6b:d4:cd:84:88:5b:
         b9:ce:82:cf:76:d1:56:39:e3:3d:3f:59:9a:c5:a3:ca:9d:f9:
         2f:b0:cc:22:e9:aa:06:65:58:76:1b:a8:3e:94:8e:3e:f5:8d:
         62:19:79:e4:92:ee:ad:26:e8:37:55:fe:e8:d5:28:54:e5:99:
         32:6e:c1:f5:4b:da:6a:ed:5c:96:41:87:be:fa:ab:92:2c:ab:
         2b:65:07:61:fd:9e:73:83:cb:19:35:18:50:00:c2:55:e0:81:
         b2:45:c9:e7:d6:19:49:af:a4:66:e7:cb:d0:19:cd:aa:7e:03:
         48:4a:15:b4:57:1e:ed:fe:4d:3c:a1:6e:c3:5d:40:e1:b9:74:
         dd:46:dc:a6:f0:27:3d:1a:65:62:f9:d9:08:b4:59:df:4f:95:
         bd:71:13:3a:46:0c:5a:5e:60:78:d9:d1:41:fd:d6:82:8c:83:
         2f:70:a3:65:f7:ef:60:58:93:72:a4:d4:ae:65:14:ce:ef:3e:
         51:29:bd:bc:15:4b:b1:80:38:5a:bc:31:39:49:61:2e:67:e6:
         e5:87:1b:64:08:1c:84:c9:7d:9c:36:7f:c5:6d:49:9d:49:d5:
         6d:6d:89:a8:23:c9:86:b7:3b:81:a2:17:5f:ba:88:c5:7b:96:
         02:81:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:54 2026 by rpki-client