Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          cs6Qo9UcOhQNNMcpcAtG09S93HCxpuieh+vENErLXlQ=
Subject key identifier:   E5:AA:EB:3F:89:07:4E:92:CC:6B:0F:8D:8E:90:25:F2:9F:54:A9:98
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       019CAE35511D04B71015D9C15A9FE13394E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          07C9
Signing time:             Mon 02 Mar 2026 11:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:55 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: QrZ0CAs0DDbottz8jEOrLVm0uCr2tZJY8+ChC31Pcuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:51:1d:04:b7:10:15:d9:c1:5a:9f:e1:33:94:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Mar  2 11:00:55 2026 GMT
            Not After : Mar  3 11:00:55 2026 GMT
        Subject: CN=e5aaeb3f89074e92cc6b0f8d8e9025f29f54a998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:13:3e:ba:d7:cd:9f:9c:23:5b:7a:b9:db:
                    75:6f:ad:2f:54:8f:63:a6:73:5d:47:ea:53:e0:64:
                    c9:60:8e:09:22:31:d8:c3:ca:8b:16:f3:ff:68:c7:
                    e6:29:b5:b6:26:5e:be:2f:5c:fa:1f:2d:c1:a9:c0:
                    e0:0c:bf:92:67:81:b2:10:07:ba:6b:3d:6a:43:dd:
                    ef:80:2f:9e:11:1d:dc:56:94:47:09:a7:ae:cf:7c:
                    91:56:3b:e6:f3:ff:39:01:cb:e1:62:7c:c9:dc:8b:
                    3b:ed:56:08:ae:d0:d1:71:fa:66:85:7b:f1:db:ae:
                    7e:e3:6e:f6:b9:9d:48:7b:31:0e:92:89:4b:7f:1a:
                    dc:ca:46:b4:7a:2e:8f:63:4f:b3:61:41:1f:2f:44:
                    cc:db:fa:65:ce:84:cf:a5:05:cf:8f:ac:e0:b9:ac:
                    05:b7:a2:cf:27:44:ee:f7:17:df:1e:70:45:36:cf:
                    e0:16:01:fb:78:8b:0a:2b:e6:23:14:c7:ed:25:dc:
                    22:b6:91:96:35:46:41:72:5c:4e:05:53:29:c9:39:
                    ab:84:2b:d1:fa:a8:66:2d:96:6b:96:f7:b9:51:39:
                    c1:ae:e7:c7:13:8a:17:ff:9a:8d:40:09:ca:92:5a:
                    1d:c4:bf:2b:af:95:e9:17:6b:84:48:9e:ac:10:c0:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:EB:3F:89:07:4E:92:CC:6B:0F:8D:8E:90:25:F2:9F:54:A9:98
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:33:2d:6c:84:d6:9c:dc:96:00:77:6b:46:e4:5d:59:05:
         72:b8:45:bd:2b:23:f2:32:ce:31:69:e0:b6:9a:dd:d9:c8:7b:
         12:a2:dc:84:94:7b:f6:8e:b9:6d:85:da:05:46:c7:b8:b5:88:
         e5:25:a0:99:42:ef:d0:8b:de:33:88:33:7b:9b:60:fa:72:00:
         2c:9f:9c:d6:79:b1:84:cf:69:2e:9c:b5:4f:ad:58:85:81:75:
         48:37:57:5f:1f:33:41:16:61:f1:cd:ac:cf:89:23:47:27:63:
         99:b0:a5:0e:62:28:7f:82:d4:b0:b1:40:47:a4:97:69:9d:7b:
         aa:29:43:a3:80:ea:93:0d:bc:4f:8d:9c:c3:ce:08:0a:95:e3:
         07:57:7c:5d:e2:a6:5f:98:50:2c:6c:65:75:1d:29:93:15:23:
         4d:2f:8e:71:70:28:51:d7:b1:5f:84:58:4a:22:06:c6:ee:b3:
         2f:4a:60:d4:3b:b3:b9:85:ea:12:c3:5a:6c:49:ef:83:2c:35:
         57:fe:9d:70:08:4c:bc:80:cc:c2:17:fb:de:5e:cf:8f:b8:7d:
         1c:f1:bf:ff:c2:97:61:3c:da:16:a1:47:5b:ee:a7:42:e2:a0:
         9e:c1:7c:b4:e2:97:e8:89:36:8c:8d:3c:2a:e6:05:9f:8a:4f:
         c6:43:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:47 2026 by rpki-client