Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          znxrKGsETYLIil/n1G/smirHorLLn03xBrY7yJBduTY=
Subject key identifier:   9F:31:22:2D:F9:CD:DE:59:D7:73:F0:F7:4A:F6:97:21:CF:71:25:AA
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       019D27721DC116B1FEB0A0DAAF6356DBF40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          038C
Signing time:             Thu 26 Mar 2026 00:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:23 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: DcfycY2R71zSyynagxX1MwgKt8VbHaZSBzNzYk5OlKU=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:1d:c1:16:b1:fe:b0:a0:da:af:63:56:db:f4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Mar 26 00:01:23 2026 GMT
            Not After : Mar 27 00:01:23 2026 GMT
        Subject: CN=9f31222df9cdde59d773f0f74af69721cf7125aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:4c:6c:79:c4:05:59:42:da:f0:97:dd:1d:
                    f4:53:8d:20:41:ce:ee:14:c9:28:78:eb:36:ea:db:
                    ad:e5:bc:f7:f8:4f:c3:34:95:39:fc:90:89:58:b4:
                    76:6a:21:da:4a:31:2e:f2:23:99:83:c4:9a:06:7e:
                    00:52:47:2a:d6:c9:27:82:9c:7a:67:3d:90:af:b3:
                    1b:24:93:cd:aa:da:59:29:4b:3c:11:35:03:5d:4b:
                    ca:c2:10:22:00:da:b0:6b:f5:88:af:d6:9f:21:92:
                    85:85:bc:e4:16:a6:4e:af:fe:b7:8f:4a:84:41:5b:
                    b7:ff:95:b6:3d:05:44:79:4a:6e:5c:68:8f:78:8b:
                    f8:c1:dc:f3:f4:15:44:cd:d3:b6:dc:d7:9c:42:6c:
                    ab:c3:1b:b2:15:d3:1c:f6:27:98:8a:7f:36:d6:6c:
                    cf:d0:c3:a7:48:7f:11:e2:9f:24:95:62:15:f6:32:
                    83:12:ce:8a:ab:c3:22:5d:c5:28:73:4c:37:0a:f9:
                    77:30:93:54:04:f8:1c:72:24:82:e5:96:0e:fa:00:
                    0d:5a:9b:92:d8:47:95:cd:e6:0b:72:ca:55:38:73:
                    a3:57:2b:e9:b2:dc:56:90:8d:67:21:b7:b5:1c:c4:
                    e5:4c:9f:b9:78:0c:2f:11:ad:7c:db:58:75:6a:36:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:22:2D:F9:CD:DE:59:D7:73:F0:F7:4A:F6:97:21:CF:71:25:AA
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:de:4e:ad:3b:4f:40:f2:28:40:bb:79:be:58:bc:39:ab:
         be:b7:49:a0:85:52:9e:d9:1c:8a:f8:4e:c8:91:42:45:2d:93:
         bb:4e:eb:60:52:1c:d2:cb:aa:f4:66:74:56:7b:4c:8e:6c:c6:
         60:66:7a:15:a0:1c:ab:9d:d8:2e:fd:f1:4e:64:ab:1b:c2:2f:
         11:75:95:f7:27:5b:e9:05:6f:d1:df:a7:96:22:31:38:80:e1:
         1c:2c:11:01:20:6f:18:07:9f:7b:55:5e:f3:f9:e4:14:5e:4a:
         c4:b6:83:e1:b3:58:e9:c8:3a:be:37:ad:26:5e:0a:92:9d:1c:
         66:58:9e:8f:44:ae:1f:1d:ca:29:14:22:4f:58:4a:32:c8:e2:
         0e:ea:8e:6a:b8:01:40:13:12:98:3c:f1:ce:ae:59:6b:ed:d0:
         e6:22:fe:09:1b:5a:1c:5e:4f:af:3a:3c:0c:e8:67:98:6f:b7:
         c7:80:61:d6:96:ae:0d:58:58:f9:65:9c:94:ef:61:05:8a:6b:
         8d:2b:80:82:b4:25:9f:3d:94:0d:96:98:ae:c2:62:13:56:3d:
         49:05:ac:86:d1:76:2a:85:33:99:f0:45:a3:3a:c2:f4:c3:60:
         cd:00:61:df:0d:ff:8b:7a:b4:a4:30:41:74:29:46:07:7c:8b:
         95:8e:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:41 2026 by rpki-client