Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
File:                     _6_prvuHuuoh5EJdR7EZlr2x4o4.mft (raw, json)
Hash identifier:          9cViWxnJ+f+ALLbE75H0aMvkwjzqUPEyQoRuHytK/fs=
Subject key identifier:   C7:14:5F:D5:1B:E8:28:B1:C3:7D:90:4F:C4:AD:8C:33:19:20:FD:83
Authority key identifier: FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E
Certificate issuer:       /CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e
Certificate serial:       019D28F2CC46D766E2CAD451F761FEAF6BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
Manifest number:          B1
Signing time:             Thu 26 Mar 2026 07:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:33 +0000
Files and hashes:         1: C90AW3XegIArf-bNcNOqfY75gXw.roa (hash: oo8doFg3P1HFO6bcCo29StzUxxdgsNyQretz+OB8VTw=)
                          2: _6_prvuHuuoh5EJdR7EZlr2x4o4.crl (hash: kQveyn/seUJvU5ZyAmZs7t3AlsojSGPAqNLHUSnivh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:cc:46:d7:66:e2:ca:d4:51:f7:61:fe:af:6b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffafe9aefb87baea21e4425d47b11996bdb1e28e
        Validity
            Not Before: Mar 26 07:01:33 2026 GMT
            Not After : Mar 27 07:01:33 2026 GMT
        Subject: CN=c7145fd51be828b1c37d904fc4ad8c331920fd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:44:2e:ef:ed:45:fa:4d:d7:b9:54:f8:e4:eb:
                    d0:d2:61:7a:8f:86:6f:f7:48:dd:38:e1:40:46:55:
                    ff:b5:6b:ea:75:1f:14:98:f5:c2:d7:5e:3f:14:bd:
                    74:04:d9:1e:7e:7a:c9:73:17:a0:88:ed:07:47:6b:
                    2b:6b:46:8f:08:b3:bf:5a:47:20:a8:3e:41:52:06:
                    ba:b6:66:2f:b3:42:ed:65:ea:c8:3f:41:e4:24:db:
                    34:ca:b2:0d:fd:d1:3f:f5:3a:e1:32:4f:06:18:28:
                    9e:2d:ae:b4:9c:0c:7e:4a:4a:9d:8f:45:e7:08:7f:
                    ce:80:b3:f2:c0:26:04:9d:8d:c3:e8:b8:3f:0b:c2:
                    36:fd:6c:cd:55:eb:ee:a3:71:a2:55:16:7b:6d:a5:
                    b6:2e:eb:96:49:ee:11:e7:11:bc:dc:98:9a:8a:59:
                    c6:3d:01:96:b9:fc:df:cf:dd:b5:12:df:52:67:78:
                    18:8b:3f:0c:97:1f:70:72:2a:5d:b8:16:b1:a0:69:
                    f5:f6:e8:33:1f:61:80:23:36:89:19:80:32:27:0a:
                    87:2c:36:5c:c0:64:a7:a7:7e:5c:8e:2d:15:01:3a:
                    cc:a6:52:c5:ca:ff:5d:93:cd:d2:78:ba:ed:3b:ac:
                    4b:c2:bf:bd:25:f2:83:ff:0c:f4:30:20:56:13:e5:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:5F:D5:1B:E8:28:B1:C3:7D:90:4F:C4:AD:8C:33:19:20:FD:83
            X509v3 Authority Key Identifier:
                keyid:FF:AF:E9:AE:FB:87:BA:EA:21:E4:42:5D:47:B1:19:96:BD:B1:E2:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6_prvuHuuoh5EJdR7EZlr2x4o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/550784-99b6-4af1-bcf9-e8164e752c2f/1/_6_prvuHuuoh5EJdR7EZlr2x4o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:04:12:21:73:0c:d4:7d:b5:84:c7:9f:3b:47:8e:5c:c3:
         02:9c:7b:21:26:7b:0e:f2:7a:20:2e:b1:26:61:e6:24:20:51:
         b5:a5:b1:db:6c:98:ed:b2:49:f1:05:2c:37:c1:6b:20:e4:b4:
         11:b5:56:e1:4d:99:93:4f:3c:01:0f:c8:29:c7:aa:d2:c9:e5:
         c8:f9:01:b2:ef:d8:71:a2:9f:2f:6c:ea:f1:7b:29:91:9e:5b:
         c3:7d:72:c5:e5:a0:48:45:a3:7c:9e:4a:47:dc:46:e0:e2:1e:
         c0:a1:20:3d:bd:32:a0:ac:f1:fe:59:71:64:03:53:4f:41:01:
         dc:4a:23:01:58:7d:79:ed:d3:10:c4:f4:2f:5f:c3:0b:94:6a:
         9d:85:72:ef:24:ef:4e:f3:13:7c:08:44:fd:cf:db:2f:7a:48:
         73:c6:7b:49:f7:83:9b:5d:d4:e2:a3:57:3f:40:84:68:06:3b:
         39:2b:4f:46:a6:2b:bc:00:f0:25:71:84:cf:05:03:f6:67:21:
         65:5f:7b:8b:21:47:99:55:64:a9:65:b6:72:90:11:34:fa:67:
         7d:83:ba:e6:0c:eb:da:30:da:b4:bb:13:29:7a:2b:2d:37:2d:
         bf:0f:83:a6:a6:96:6e:d3:2e:09:4f:d9:4e:3e:6f:b0:8e:ae:
         22:3a:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:02 2026 by rpki-client