Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          ffGVttWRVcTK1194RAv6FBBNopZTBdJH8ICmb7HGVWk=
Subject key identifier:   95:A6:45:0C:C1:AF:88:32:5F:A7:1E:C7:F1:B3:38:6F:7C:DF:50:67
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       019CAAFCFE569F4A33D06535B2D2C8BA6533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          134E
Signing time:             Sun 01 Mar 2026 20:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:32 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: xjyKKwN6pA00YVV413Vhu54AEom1/xkoT8h0OSGnFjU=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fc:fe:56:9f:4a:33:d0:65:35:b2:d2:c8:ba:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Mar  1 20:00:32 2026 GMT
            Not After : Mar  2 20:00:32 2026 GMT
        Subject: CN=95a6450cc1af88325fa71ec7f1b3386f7cdf5067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:2a:d3:91:41:09:42:27:54:4a:40:70:c7:
                    3a:6b:36:d0:23:15:a7:ef:c0:97:1e:f7:89:c5:5b:
                    fb:2d:3b:ee:53:63:ec:92:eb:09:e4:a7:82:9e:5e:
                    6a:04:85:52:7f:18:f2:d0:01:65:e3:c0:9e:e3:c6:
                    5d:9f:df:66:8f:ee:80:af:ee:0f:49:b2:1a:e0:d4:
                    eb:84:a9:d5:6b:ee:a0:4b:60:3f:4e:87:c6:12:31:
                    5f:97:bf:6f:f9:fb:bf:fa:2b:ce:8e:b0:bf:06:64:
                    88:ce:81:fb:83:16:7a:51:cb:4e:fc:f3:cd:ce:73:
                    d7:36:15:e5:42:ef:91:e1:93:7d:24:10:ca:21:2c:
                    bb:c8:ae:b7:af:59:48:c1:74:27:ec:c0:c0:9c:3e:
                    e5:a5:5d:20:38:6d:23:14:05:ee:69:40:6e:47:be:
                    bd:56:3a:ba:85:ea:5d:30:53:13:c7:59:3e:ae:01:
                    39:3b:43:18:42:d6:8f:39:8d:e8:51:25:b8:c8:83:
                    f3:bc:54:ec:36:c3:3f:93:ec:82:26:2e:50:72:87:
                    85:bc:f6:f1:ff:fe:73:c4:65:6a:56:78:89:2f:7b:
                    44:2a:cb:f3:c5:33:f4:5c:92:6a:da:a6:e6:7a:79:
                    b1:63:7c:a5:b3:b2:13:30:e6:8a:89:32:9c:6e:49:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:45:0C:C1:AF:88:32:5F:A7:1E:C7:F1:B3:38:6F:7C:DF:50:67
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:04:8b:a8:a2:97:04:b7:04:b5:87:6d:60:a0:dc:e0:14:
         86:1c:fb:a6:4d:d8:1b:a1:fa:55:4e:33:9c:1a:b6:1b:e7:cd:
         35:f1:99:3d:dc:17:3e:f5:29:e4:8f:a3:79:8b:61:48:51:dd:
         9c:2e:2d:24:33:36:b6:d1:47:78:c8:0c:73:64:b6:0b:8e:7c:
         f5:e2:2b:21:14:88:91:34:47:1d:06:23:42:66:d1:ea:e4:10:
         ed:89:78:37:a9:fa:4b:3b:f0:c8:b6:e0:ee:a2:c6:cf:e3:b5:
         bc:6c:72:ab:a3:3e:12:43:84:ec:92:aa:ee:5f:69:62:b9:cc:
         cf:ce:2e:33:66:03:aa:6f:c7:05:5b:60:aa:17:4c:77:25:4a:
         8c:e9:d5:f1:3b:6c:77:ac:48:5a:07:9c:a3:72:db:81:61:2b:
         5d:81:e2:dc:7f:7a:6a:b7:77:c2:87:86:ee:da:31:8d:ff:00:
         90:a0:3e:b1:7a:92:da:86:5f:6d:ab:74:24:48:59:16:cd:55:
         34:18:b6:5f:2a:88:f9:6d:bd:d8:f0:55:d6:a2:b1:b3:ef:f3:
         f0:5b:8d:68:6c:c7:29:08:31:a8:eb:70:4a:6e:c9:29:9e:a1:
         05:9d:59:30:ba:9a:c6:db:8e:d5:e8:05:6c:7a:3b:5a:b5:68:
         a5:9e:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:17 2026 by rpki-client