Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          A4zDtLCYvCP+Z0glNA79nQ4/Px+xp7e5kPTDfSm+/Ck=
Subject key identifier:   EB:D3:6B:D4:89:B9:21:20:BC:B2:F0:15:BC:37:3D:91:90:B5:A9:4B
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019CACB50F1C73D902A584F5B18B40C3520A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          0D11
Signing time:             Mon 02 Mar 2026 04:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:12 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: 0aUClGwcn18+CGmTcWeGS5t6sWotpafbE/OQlHitpfk=)
                          2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:0f:1c:73:d9:02:a5:84:f5:b1:8b:40:c3:52:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Mar  2 04:01:12 2026 GMT
            Not After : Mar  3 04:01:12 2026 GMT
        Subject: CN=ebd36bd489b92120bcb2f015bc373d9190b5a94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:57:2b:d7:d0:6b:fc:71:1a:44:e7:3e:66:
                    cf:19:92:40:4c:e7:95:d7:96:2a:55:a6:f6:e0:d7:
                    77:23:75:90:24:5d:04:d4:75:58:fd:9b:b4:6c:b3:
                    a9:fe:8f:05:97:a7:39:66:d7:d2:45:8b:d8:14:a7:
                    cd:27:79:7a:c0:56:cd:dd:76:8f:2c:12:24:01:37:
                    ec:14:d5:83:ce:d0:88:f1:17:a1:bf:0e:94:45:27:
                    82:a2:c6:0e:f1:25:77:aa:c8:0e:93:65:0b:f2:2b:
                    46:2c:a9:65:9d:f5:01:a6:27:8b:48:5e:ef:80:9e:
                    ff:8d:19:70:84:37:11:16:0e:70:bc:be:d6:a3:9f:
                    7d:4e:18:38:c8:00:55:3c:27:74:fb:30:f8:02:56:
                    c8:46:1f:49:f0:fd:aa:73:28:e8:57:c6:c4:13:bf:
                    7a:e0:25:67:0e:d2:5b:3e:b3:c3:51:6f:7f:04:dc:
                    17:15:f6:e3:a2:0b:1b:5b:d8:1d:c9:24:9c:a7:28:
                    c9:3c:4b:b9:3d:b6:6c:2c:c1:45:bd:25:c0:65:64:
                    d1:09:a9:39:7b:be:1c:8a:40:95:3e:40:d3:63:e1:
                    85:ff:52:c5:7b:0d:fc:a3:a1:51:58:98:42:44:b7:
                    95:e1:f5:cd:1c:38:17:59:94:53:25:ce:18:16:47:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:6B:D4:89:B9:21:20:BC:B2:F0:15:BC:37:3D:91:90:B5:A9:4B
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:13:2b:e0:90:f5:0d:f0:6d:ae:ad:77:19:d2:dd:21:c1:52:
         06:0f:9f:92:26:02:79:22:28:e1:04:aa:16:59:9d:d4:0b:5a:
         97:bd:83:d7:13:19:dd:19:8b:e5:8d:e8:db:33:b0:01:75:d4:
         08:02:d0:f6:4e:7c:9a:df:a3:2d:66:4e:fb:f4:00:71:18:51:
         a4:2e:27:66:05:b1:d6:2f:45:3a:66:fd:b1:23:04:f3:20:dd:
         8b:b7:a7:e6:d5:50:ac:20:c9:3f:10:d8:f1:4b:a3:15:29:66:
         8c:2a:5d:86:fe:6b:c4:6e:75:b4:0e:af:95:14:71:bd:0b:07:
         ce:bd:70:9f:06:49:3e:84:61:e9:f3:25:2d:09:90:f8:c2:62:
         c9:03:ea:da:d2:0b:3d:72:fd:ef:93:fa:d2:21:fe:ce:f1:10:
         13:27:a9:b0:6e:da:0d:89:f2:71:99:8b:df:bd:e6:2a:bb:5b:
         49:1b:6e:62:79:3c:be:22:f2:f2:76:0b:18:21:c1:31:0c:37:
         7f:95:a7:6b:07:eb:05:bb:41:d3:4b:39:22:ac:55:de:7f:5b:
         46:85:23:16:2c:79:d1:4e:3b:24:04:ed:50:ee:83:33:3d:83:
         40:95:f4:c3:04:81:c6:56:dc:a4:1f:bf:a9:6a:c5:42:5f:13:
         90:24:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:59 2026 by rpki-client