Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          YypX1SBs28HjKb6GsGP6Y6NwzZFQzYvHYdwIYJZJZuw=
Subject key identifier:   B7:10:F2:83:0F:10:24:0B:B9:7E:CB:74:22:81:A1:31:25:70:E9:9B
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019CAB33E337B166DC941B9A1E9C138CE47C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0EAD
Signing time:             Sun 01 Mar 2026 21:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:30 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: PrY3OdLWoNtQyQ/Qyvd5dkT3LG2HbjEW6EqgFJ4N8dU=)
                          2: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (hash: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=)
                          3: OPOHu4baKrOuoP3MheEFtHAeXko.roa (hash: A1lA/lI/7Nnxtr0SxEKDti+LjBheE5trX2b66xGDddo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:e3:37:b1:66:dc:94:1b:9a:1e:9c:13:8c:e4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Mar  1 21:00:30 2026 GMT
            Not After : Mar  2 21:00:30 2026 GMT
        Subject: CN=b710f2830f10240bb97ecb742281a1312570e99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:63:96:ef:99:85:d3:44:82:84:3c:52:b1:
                    a1:a1:f1:b1:09:a0:56:7a:2f:5a:69:67:ee:03:63:
                    17:f8:5d:97:b4:22:89:d3:3d:8e:a8:99:81:5a:19:
                    d0:99:dc:33:47:cc:70:83:b2:54:b9:42:a8:ab:9a:
                    30:ce:da:4e:b9:55:66:3a:a1:82:25:d1:d2:18:38:
                    9e:1d:1c:42:25:52:4a:82:65:d2:36:9e:7d:bb:8a:
                    60:4a:d3:54:c0:62:31:b6:05:14:68:e5:0e:bf:c8:
                    36:20:a6:be:fc:72:d9:98:3b:53:40:12:c8:c7:04:
                    d8:18:6b:ea:2d:a2:c7:b9:86:dd:5f:d4:bd:fc:0f:
                    b5:cc:ca:77:86:ad:12:11:d2:2b:32:5a:47:68:a3:
                    bb:c2:ac:cb:d2:6a:a9:a0:36:42:e3:63:07:7d:c1:
                    73:bb:db:d7:37:72:94:dd:0d:0d:42:1b:21:cc:18:
                    b3:de:96:11:be:66:41:eb:5d:3c:d8:8b:8a:32:12:
                    88:13:df:ee:86:96:ee:82:ca:95:c3:19:24:f7:95:
                    bc:ec:21:4a:1c:bf:c0:e7:48:97:0a:08:d8:b8:6c:
                    25:ae:1c:67:33:8c:6a:71:75:2e:9d:54:7a:bd:d6:
                    d2:0e:35:3d:23:b4:6b:1d:44:37:22:e6:e9:27:b6:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:F2:83:0F:10:24:0B:B9:7E:CB:74:22:81:A1:31:25:70:E9:9B
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5a:eb:e3:51:5e:30:c7:17:b3:c4:c7:99:6f:7d:84:b0:3b:
         1d:c5:41:a8:77:b4:38:f0:02:8f:8c:42:79:ec:66:96:61:73:
         93:68:7c:d5:79:a7:99:69:d9:50:05:6d:31:8a:2b:fe:ed:79:
         eb:4b:24:aa:1e:b0:f0:21:cd:99:f5:bf:f9:a9:b5:84:ae:44:
         76:9b:5c:64:56:8d:b6:29:4a:b2:1e:29:a8:90:f7:1f:a7:88:
         b2:fa:02:ee:b1:22:38:81:d2:01:b3:cf:3b:ec:df:33:4c:61:
         0e:4a:c2:0f:53:b8:67:9f:36:d0:22:61:76:7c:ef:4b:4a:62:
         65:91:98:29:c2:59:09:b8:dc:36:1e:05:47:cd:5c:a2:ec:1b:
         1f:fd:b3:5a:96:f9:a1:19:e9:7e:92:92:92:5e:f2:16:97:56:
         df:a2:19:15:e1:b6:20:b8:e5:31:0e:cf:93:d6:15:b8:0e:bd:
         90:3c:2a:33:d5:6a:55:72:f9:48:54:aa:aa:2c:2b:f6:fe:14:
         60:cc:2c:3a:69:22:84:bc:f1:d4:c2:de:3f:a3:fc:d6:db:b3:
         71:48:25:09:5f:47:b6:a7:26:a5:94:68:e1:47:bd:32:e0:c8:
         ca:b9:67:2b:18:09:81:80:3b:fa:e2:5a:31:36:36:5f:96:f6:
         05:52:d4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:32 2026 by rpki-client