Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          Nebm6DaVF7Nu1qnTkhH3OnQ76chNj8uKde6htZM333k=
Subject key identifier:   B3:A8:26:83:0B:7E:2A:0F:7B:F9:59:19:7D:FB:7C:47:F8:63:33:62
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       019CB05B29AF9D91DB2EF837564BE646693F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          09E3
Signing time:             Mon 02 Mar 2026 21:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 21:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 21:01:30 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: h5dhIOhldd03TbbpNS423l/vtrWr2RFJSEDJhrgWaFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:5b:29:af:9d:91:db:2e:f8:37:56:4b:e6:46:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Mar  2 21:01:30 2026 GMT
            Not After : Mar  3 21:01:30 2026 GMT
        Subject: CN=b3a826830b7e2a0f7bf959197dfb7c47f8633362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:c7:31:a3:27:de:7e:ab:48:9b:c4:05:7c:
                    08:54:94:c5:fc:7c:7d:53:34:c9:dc:0f:3a:0b:f9:
                    a7:a2:cd:73:0d:e1:db:29:f3:c8:ea:ca:9d:b4:dc:
                    45:ae:ee:4e:58:07:55:51:df:3f:e0:cd:18:62:c0:
                    da:70:e1:28:55:c7:4f:a8:3a:7b:04:0f:f0:61:7b:
                    98:48:26:d0:fe:65:99:58:97:45:47:10:4e:c5:b7:
                    36:f8:80:dd:f7:1c:b9:f2:15:04:19:f6:cd:b5:f3:
                    ad:ab:92:a2:07:ed:b4:1f:c5:6d:7d:b8:74:03:3f:
                    e1:b5:4e:d5:7c:ec:90:a3:18:5b:93:a8:c8:d3:08:
                    42:4f:54:b4:56:a0:10:b2:16:8e:08:f5:03:fe:dc:
                    b6:5d:fd:c5:f4:00:e9:af:84:f1:d9:aa:3b:93:5b:
                    7f:bf:61:ca:13:2a:0a:6f:14:67:69:29:c5:8f:4a:
                    a7:8b:d1:53:03:c5:02:35:ec:d0:2f:61:e4:9d:5d:
                    92:d5:a1:54:c6:d4:cb:73:2e:c2:00:e7:2f:c3:78:
                    9b:88:a5:52:9b:85:04:44:8c:b1:2a:bf:f0:4a:a1:
                    31:de:b9:5c:42:78:1d:28:6b:5e:4d:ce:c1:01:11:
                    93:d8:de:4c:09:39:bb:e3:ba:b7:e8:9b:ba:51:7c:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:26:83:0B:7E:2A:0F:7B:F9:59:19:7D:FB:7C:47:F8:63:33:62
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:63:5f:ca:6b:f3:cc:7e:a7:09:d5:ea:22:95:ca:39:05:f7:
         ff:df:bc:4d:e4:62:27:f1:c3:40:2d:23:7f:7a:5c:13:c1:f0:
         90:3a:54:38:38:0a:1b:1e:99:61:58:8b:79:30:2e:49:9c:d2:
         96:67:d7:39:0a:b4:fa:c9:83:9f:15:85:c1:6f:8d:e9:08:94:
         6f:e8:b5:45:21:35:e8:97:8c:a4:7f:e9:bd:86:de:58:1c:b7:
         c5:5b:ef:b1:25:16:63:85:76:de:40:1f:6e:a2:72:a2:d0:01:
         d6:5e:24:99:48:9c:6b:0e:15:f8:4a:93:97:98:f0:bf:ee:d7:
         54:69:c4:5c:d5:48:03:da:3d:1c:42:35:be:18:48:b5:b2:50:
         63:11:a9:2e:05:50:2e:41:53:ef:ea:8b:f8:ef:ff:07:d1:e3:
         b5:c9:18:b4:3e:b1:bf:4e:0a:68:2a:88:fb:ba:f6:7f:52:88:
         db:f6:d6:cf:12:ca:b5:31:52:9f:05:97:cd:ee:4e:3b:a0:9c:
         24:78:a3:23:42:d9:73:9b:f4:2b:b3:d0:70:86:3f:36:3c:ad:
         aa:46:f4:9d:f5:75:84:ec:3f:c2:7e:41:d5:45:4a:60:b8:24:
         92:af:7b:aa:d9:d2:82:79:d5:8c:83:9c:3c:88:07:b5:dc:c1:
         26:04:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:30 2026 by rpki-client