Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          ZyMVqQIKDcG3UmA35WNXBcg3NJqItra0Hg/Qw7/nXTE=
Subject key identifier:   96:84:08:AD:ED:2A:06:71:4E:38:32:2B:D7:03:D4:2F:2C:1A:B2:2C
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019CABD90BAA151CE90742136DE80C521467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0ECA
Signing time:             Mon 02 Mar 2026 00:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:53 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: 7y3x3yOm/qCMfTbhx35ylnNszuntH70eQ208qmOZE6w=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:0b:aa:15:1c:e9:07:42:13:6d:e8:0c:52:14:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Mar  2 00:00:53 2026 GMT
            Not After : Mar  3 00:00:53 2026 GMT
        Subject: CN=968408aded2a06714e38322bd703d42f2c1ab22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:2e:0d:31:08:bb:1e:e8:94:1b:b8:84:b8:
                    06:f1:80:66:65:d1:26:01:1a:13:f5:9b:d1:fe:6d:
                    27:bd:a3:6d:2d:4f:b9:94:5d:0f:1d:33:fa:c7:e3:
                    7a:41:db:aa:6c:27:50:7b:c7:16:04:d8:d0:db:f3:
                    43:25:50:93:28:30:7d:46:e2:35:9a:cc:9e:13:dc:
                    3c:53:a1:a5:1f:1a:c0:19:98:43:69:4b:78:ac:2e:
                    a3:cd:4c:dc:9f:0f:f1:74:fe:2f:83:dd:45:cf:31:
                    8a:45:ee:21:f5:02:1e:79:1f:0e:b7:d7:96:0d:92:
                    d3:c0:d0:00:a7:fb:95:03:1e:11:64:3c:6f:27:13:
                    9b:9a:4d:ef:8d:13:5f:1b:cc:a9:46:50:a3:f7:15:
                    c8:c7:2b:79:d5:f5:bd:75:a7:fd:d6:32:8d:44:b4:
                    99:27:a0:2d:6b:27:c0:87:22:64:1a:2d:37:0a:d8:
                    ba:4f:09:6a:21:77:d3:52:a9:53:b7:54:01:e2:f2:
                    08:0a:88:4a:a8:8b:54:57:d2:f8:94:70:61:69:86:
                    c6:8b:42:9b:0e:47:38:a0:04:07:36:1c:1d:ad:7d:
                    2e:02:17:cd:6e:e7:a8:36:c5:87:73:7a:5b:5b:ae:
                    32:e8:10:2d:fe:e3:68:2b:de:95:b5:4c:07:a6:be:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:08:AD:ED:2A:06:71:4E:38:32:2B:D7:03:D4:2F:2C:1A:B2:2C
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:bd:70:28:51:0c:de:43:51:2f:32:bf:1a:5f:cf:13:aa:
         ed:01:f3:ee:2f:4b:d5:a5:56:cb:b2:63:07:36:5a:04:47:f9:
         6e:be:59:24:47:d5:0d:8a:89:08:c3:4c:08:81:28:f2:df:8f:
         7d:a5:7e:66:da:2e:a9:f1:59:51:92:9a:6b:4b:1f:55:01:28:
         61:15:32:ec:f4:88:51:f9:1c:6c:39:b2:e9:3b:01:33:50:52:
         59:82:23:f8:d7:55:25:2e:bc:29:4b:49:dd:0e:a2:01:31:2f:
         ff:00:54:24:cd:3c:68:67:48:86:dc:9a:0e:a2:f5:ea:5f:e8:
         92:65:6e:05:eb:d4:d9:04:e1:f8:eb:0f:75:fe:a9:c7:d7:d7:
         cf:26:48:cc:d6:54:51:83:7c:b0:26:a7:ec:e5:44:58:b6:b8:
         17:1b:d7:d8:7e:ba:d6:35:b6:98:ba:d3:ef:0a:eb:68:69:98:
         39:4c:76:48:57:8b:1a:ed:f9:b3:75:42:ae:c2:51:41:53:79:
         a0:81:3b:20:57:3d:23:c7:76:a5:49:42:47:fd:9f:5e:db:fc:
         a6:8b:f0:8c:76:f9:1a:54:0d:59:a2:13:40:06:b2:08:92:4e:
         cb:27:a6:8b:a2:fd:59:81:ac:5b:88:32:e5:23:95:30:60:1b:
         ff:b9:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:51 2026 by rpki-client