Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          S8TDAZwoxkJ5UYUERUs5zE9+A3Qa5Wn+Bhu8WBy8eP4=
Subject key identifier:   23:69:4B:62:EF:05:F3:E4:B3:DC:45:3B:DF:5F:EC:2E:A2:7E:29:7D
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       019CAAC6353881103B001CACF8F4D81CBF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          123A
Signing time:             Sun 01 Mar 2026 19:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:42 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: QsxWDlkFTdqYEJA3i1A6zq0q0LELWq0jYBJqALYYuHo=)
                          2: J_85Yuk0PZIWMoiLYOvaX-HXgb4.roa (hash: 5wusu27tOhw5EdKTbLT8B0jjf2cOL1t2db0yd0++2CU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:35:38:81:10:3b:00:1c:ac:f8:f4:d8:1c:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: Mar  1 19:00:42 2026 GMT
            Not After : Mar  2 19:00:42 2026 GMT
        Subject: CN=23694b62ef05f3e4b3dc453bdf5fec2ea27e297d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:bb:29:99:4a:4d:be:61:e9:c1:a1:ea:a0:
                    e8:af:a0:6f:c1:0c:8a:b9:84:50:4a:35:5a:33:7f:
                    03:19:24:35:26:8c:b3:c4:1f:a2:d0:b5:49:bf:1e:
                    8f:fa:1a:3e:ab:da:78:f7:a8:c4:9b:ca:af:1d:8e:
                    87:8c:dd:f5:55:70:6c:d7:f9:b1:f6:7b:f5:58:f1:
                    c9:0f:c6:67:79:c9:97:2a:bd:0c:9d:0d:9f:90:a3:
                    89:14:62:7f:64:3d:fe:2e:4a:5a:cf:53:2f:32:b9:
                    9d:7d:ff:fd:73:b3:ef:a1:83:0f:d4:ab:55:cf:8a:
                    43:7f:8f:d1:80:60:d7:d6:80:76:ca:25:47:69:8e:
                    3b:41:27:50:b6:08:da:ae:b5:97:0a:89:64:e4:79:
                    df:68:03:21:76:b1:ec:44:e6:d7:7d:3a:4b:56:9c:
                    4b:cf:74:cd:b9:ab:90:98:92:ff:47:82:f4:8f:0a:
                    dc:f4:8c:e3:69:cd:10:57:62:99:cd:2f:cc:24:bf:
                    7d:40:49:ec:2e:9a:8c:61:97:90:b3:26:36:48:fa:
                    7f:88:6d:eb:f5:24:58:4b:8d:a2:eb:03:78:3f:dc:
                    8e:5f:66:12:04:ba:d1:2d:67:c3:a1:17:26:a7:29:
                    d7:f4:7d:58:9a:0e:89:fe:dd:ff:13:68:dc:fe:bc:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:4B:62:EF:05:F3:E4:B3:DC:45:3B:DF:5F:EC:2E:A2:7E:29:7D
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:df:42:42:75:42:10:27:98:e4:e8:16:ae:4f:66:f0:a0:92:
         4c:1e:70:80:de:54:bc:53:d5:8a:98:b0:83:a0:19:ae:d4:13:
         7e:0a:f9:ea:80:72:fa:12:2f:27:22:cc:b2:c0:14:3b:4b:d6:
         08:4b:33:77:12:3b:af:96:13:dc:e1:06:37:5a:7b:4a:2f:62:
         cb:78:13:a9:94:ce:b8:b4:11:72:e2:ff:48:e9:76:e2:d0:d2:
         af:09:a6:36:fe:fd:91:50:38:a8:53:84:af:a4:04:79:e4:90:
         64:a1:cc:31:0f:27:e4:88:cf:73:5b:99:eb:0d:40:ea:23:bf:
         b4:4d:8f:2a:23:57:95:62:2b:3f:f4:20:85:b4:37:dc:62:14:
         e1:cf:15:a3:12:dd:47:24:f1:1f:54:83:1c:1b:d5:8e:83:c7:
         44:2c:37:6d:ae:86:1b:ce:d5:6a:31:5c:e8:53:40:9f:53:d4:
         43:8c:1f:0f:25:25:08:85:43:a7:71:f9:da:d8:55:3e:f7:8a:
         63:bb:b2:5b:40:bf:e6:b6:bc:1a:89:b6:2f:e4:04:52:a6:07:
         69:cc:32:49:e4:fc:c6:ed:0b:80:7c:26:61:04:ce:8d:8b:4e:
         8d:e3:e8:8a:a6:97:68:60:00:f3:56:54:a5:0f:13:26:fb:97:
         64:3a:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:33 2026 by rpki-client