Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          e55KJdSmF58nChLKaAPFPToVXxz62Lspc5EOy96+QdU=
Subject key identifier:   5F:11:52:84:1F:2C:A1:44:BB:8E:BE:22:0D:19:9F:93:B5:78:DF:1C
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019CAB6AE6528BC0A79A066B26F06FE46C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          06D2
Signing time:             Sun 01 Mar 2026 22:00:35 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:35 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:35 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: 3Cbb9w9hEmS9ObVLFEg5wYSOpN+K2WQsqStUpq5Ixe8=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:e6:52:8b:c0:a7:9a:06:6b:26:f0:6f:e4:6c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Mar  1 22:00:35 2026 GMT
            Not After : Mar  2 22:00:35 2026 GMT
        Subject: CN=5f1152841f2ca144bb8ebe220d199f93b578df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:fe:38:bf:5e:54:3a:db:12:5e:88:9f:dd:
                    1e:d2:95:00:33:44:31:c7:0e:0c:70:8a:11:19:81:
                    29:56:b2:67:ad:cc:40:76:8b:94:88:57:d4:01:8e:
                    35:3d:e2:83:8a:c4:3e:69:a7:66:14:61:31:63:ab:
                    5f:7d:df:77:b6:b7:f4:05:0f:d2:02:5b:60:5b:d0:
                    e4:c4:3f:c0:e5:92:5e:26:da:1b:bd:56:38:cd:d1:
                    d9:99:f9:9f:1b:b9:b0:16:0a:d5:c6:5e:2a:a7:87:
                    9b:d0:29:37:44:3d:ad:27:5a:aa:b6:20:f6:fd:a9:
                    8f:b0:bc:40:b8:03:87:12:f2:34:12:b0:5b:b2:00:
                    06:94:fb:84:bb:47:b5:5b:86:54:a9:aa:34:75:71:
                    3b:82:99:df:8c:26:29:de:c1:55:4b:55:43:66:bc:
                    db:b3:d5:58:95:d1:7b:ba:74:3c:f4:b8:05:f7:22:
                    a9:fd:aa:c6:1a:3f:3a:3f:49:55:3b:c7:77:5f:d6:
                    30:2f:11:de:15:c3:ae:c7:c1:9b:7d:c9:83:9a:df:
                    a3:52:ae:97:66:24:04:78:2c:a3:a8:b5:9f:b6:f6:
                    bf:83:8b:f7:d7:7b:11:25:69:70:eb:91:42:ce:76:
                    f9:9d:e7:5a:1d:5a:fa:8b:6b:4f:ab:11:bf:9c:92:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:52:84:1F:2C:A1:44:BB:8E:BE:22:0D:19:9F:93:B5:78:DF:1C
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:aa:1c:97:e6:ce:b0:c8:64:f3:7e:10:d5:65:4e:e1:19:
         9c:25:b5:6c:5e:ef:2e:c7:0b:3d:ba:68:65:7b:ed:67:01:b9:
         78:08:9b:a9:25:8c:8c:e4:70:4e:21:9d:90:6b:dc:4c:4c:e6:
         cc:e5:27:d3:9d:2a:ff:15:0a:72:ce:e6:e1:a3:4b:bd:b9:8a:
         31:32:5d:d8:a1:bc:69:18:55:96:83:ef:a1:06:73:6a:8b:ba:
         8d:20:12:7f:3d:69:d6:70:de:75:d9:75:16:a2:6b:bb:d3:96:
         d2:6d:8e:49:33:8c:7e:f0:c9:99:97:34:0b:97:ff:64:6e:0f:
         65:3f:c9:b1:d6:76:e0:5c:87:85:81:0e:09:e7:e4:2b:4b:77:
         7f:f1:11:ef:3d:d1:19:52:d7:72:a5:d1:9f:81:23:ef:77:6c:
         36:d8:ad:6a:d0:8d:53:e5:2b:d3:58:e4:55:f5:99:c7:27:2c:
         cd:20:53:1b:90:70:f7:a5:74:21:3e:ff:89:6e:e1:e5:22:dc:
         0a:1d:39:27:e6:c9:93:cf:69:9f:72:f3:05:5d:d4:5f:1f:7f:
         ce:94:2f:7f:64:6e:8e:1d:2e:b1:57:4d:0b:26:dc:a3:a2:73:
         b7:a6:84:76:17:63:e8:0c:66:22:05:fc:1d:d4:bf:13:aa:d7:
         41:90:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:04 2026 by rpki-client