Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File:                     dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier:          eoso5/qGnDwnq0qhswfj6A/TzVUJOhNGtQGIMvOx/Hw=
Subject key identifier:   00:62:7A:BA:0A:A8:DF:EE:BB:B2:CB:9A:7F:54:45:DF:E7:15:16:61
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer:       /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial:       019D284E02DFEA311B7923F1A96D1BAFED03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number:          10EE
Signing time:             Thu 26 Mar 2026 04:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:34 +0000
Files and hashes:         1: SwOC6LWRUnc-Ogb7u3vxF_0mea4.roa (hash: /q8N1XNG3IXyW6BA6haLHv1Ug3hcBfXRJEVoULv8zlE=)
                          2: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: JzAo7nGFWD0ae6EiECFm25YVwnDL3uI5bA3bxi0+gng=)
                          3: iGjEi-RetR317ng4nZLQERiyp5Y.roa (hash: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:02:df:ea:31:1b:79:23:f1:a9:6d:1b:af:ed:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
        Validity
            Not Before: Mar 26 04:01:34 2026 GMT
            Not After : Mar 27 04:01:34 2026 GMT
        Subject: CN=00627aba0aa8dfeebbb2cb9a7f5445dfe7151661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:11:e9:1a:03:33:57:84:65:54:65:84:99:68:
                    a2:63:17:ee:3a:2b:b5:39:e3:a1:43:29:b1:01:33:
                    79:b1:39:f5:ad:dc:56:6a:f7:b2:1c:c5:84:b5:2a:
                    12:60:6f:86:92:3d:0f:cb:b0:08:a3:4b:67:46:9c:
                    2c:fa:53:95:c5:d9:49:e1:5b:a6:ec:3b:5a:46:5e:
                    f0:6c:8c:42:c3:f3:ad:e6:32:cb:4a:b8:83:2e:e4:
                    80:f3:9d:c6:1a:0a:ee:6b:f9:18:89:f3:97:33:23:
                    33:74:52:25:1a:f0:5a:b7:de:5e:de:4d:d6:9d:4d:
                    54:b5:47:f2:63:3d:46:1d:c3:9d:c2:24:e6:52:4c:
                    23:d8:73:ac:cc:b6:72:93:50:cc:0e:f8:f3:5b:2a:
                    13:10:26:63:74:4d:74:ab:b5:d9:62:ac:d9:8b:ef:
                    1d:6b:61:38:a9:23:f2:41:02:a5:1f:57:a3:ca:f3:
                    92:41:8a:4e:05:9d:ab:60:94:41:a5:bb:a9:d2:01:
                    c4:10:9d:bd:92:74:a2:91:3d:b1:89:78:0a:a4:e0:
                    7b:53:2a:11:c3:3e:f2:2e:6a:83:db:7e:0e:5f:0b:
                    e5:9b:6d:0f:c3:6c:02:95:a7:aa:9b:73:87:c4:58:
                    18:0b:71:a1:f7:52:54:bb:ba:5c:3c:ee:24:17:5a:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:7A:BA:0A:A8:DF:EE:BB:B2:CB:9A:7F:54:45:DF:E7:15:16:61
            X509v3 Authority Key Identifier:
                keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:05:f2:3c:e7:b9:83:2d:e4:62:f6:00:5f:a0:54:68:2d:
         fd:67:04:4e:30:4b:dc:20:8e:77:3a:50:0a:89:0d:26:43:84:
         df:b7:07:33:ae:0c:ab:2e:23:dd:de:f5:80:c9:d9:fa:f4:96:
         ca:9a:83:26:38:53:19:53:ee:53:f4:d6:0a:87:71:ba:b7:b1:
         d6:c4:c9:65:2d:0f:05:f4:9c:3b:1e:4c:44:76:36:f1:29:99:
         5d:b2:a2:6f:07:b1:8d:75:39:c0:da:6a:e9:d6:67:74:e2:2c:
         d6:ed:72:d3:66:31:29:5f:cf:e2:79:ea:71:f7:c6:18:c4:03:
         27:e3:fa:76:93:3e:80:47:df:23:18:bb:1c:f2:58:c0:be:0f:
         b1:96:3f:fa:95:ad:9d:7f:5e:5d:66:d4:19:69:1a:0a:25:4b:
         c9:ed:78:00:61:59:4e:11:fb:4b:b6:1b:12:7c:82:7e:41:4a:
         c1:8f:ea:ec:e5:a0:e9:1f:af:48:ec:9a:e2:89:d1:86:bf:93:
         82:49:d7:8f:f5:34:d1:50:55:46:5c:eb:81:86:ed:92:57:88:
         3d:01:2d:2b:cb:f1:94:b5:1d:2d:5a:12:8f:1a:93:45:47:72:
         70:de:29:d8:c4:85:be:74:25:80:0e:2b:41:4e:a0:c4:dd:92:
         0a:b3:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:00 2026 by rpki-client