Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          la6xAcpCKTZUqj//MqSzYrv8sSjuk9Af0tcrq8xD4/8=
Subject key identifier:   EE:3D:4F:AD:23:AB:0C:B4:91:48:97:38:7B:58:F7:9E:53:1B:5A:F5
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       019D2771D3EB217A0D38D60919F42E5A3C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          17C9
Signing time:             Thu 26 Mar 2026 00:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:04 +0000
Files and hashes:         1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
                          2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: tYPFdm0RZ+PVi1miC/EDrpfi1z4qi7CuTCc/Gq17BTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:d3:eb:21:7a:0d:38:d6:09:19:f4:2e:5a:3c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Mar 26 00:01:04 2026 GMT
            Not After : Mar 27 00:01:04 2026 GMT
        Subject: CN=ee3d4fad23ab0cb4914897387b58f79e531b5af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:eb:63:92:16:15:ee:fe:42:1a:6e:f9:83:
                    e5:bd:99:c1:a2:05:90:d7:c5:91:52:87:dc:37:7c:
                    07:e3:dc:01:2a:fe:0c:10:a9:9a:8a:cd:3b:dd:91:
                    11:fc:6f:f4:30:28:50:98:58:ef:6a:c8:d9:d3:27:
                    ca:f3:8f:42:cc:e5:4b:e3:00:21:15:ee:46:03:07:
                    bf:2e:b5:72:bf:0e:ce:b4:84:7e:43:8c:6b:d9:73:
                    a6:83:9b:66:4d:e7:e7:f8:a4:9a:3a:0a:5f:37:f4:
                    fa:7d:b6:0f:2c:5f:ca:8f:0c:7d:5b:08:41:ed:e4:
                    f4:75:ee:93:96:a3:5a:4a:3c:2d:88:fa:f6:5b:92:
                    24:c3:ab:a2:b0:a7:f5:bd:9c:40:f4:94:6e:a3:f0:
                    67:d4:aa:33:03:30:be:15:87:3a:63:e1:98:d1:6b:
                    57:04:24:a8:d7:c4:3b:57:25:d5:51:5e:45:a5:dc:
                    e7:9d:47:e1:76:af:7e:6e:d2:77:48:8c:63:d1:89:
                    42:db:8b:3e:01:a1:25:6a:38:fe:f7:9e:a6:a9:5c:
                    06:55:22:a1:36:e6:13:11:38:c7:75:18:6a:a1:3f:
                    36:62:99:c6:6e:24:af:d1:80:d7:5c:ba:da:f0:f3:
                    14:1e:4c:ce:0c:f5:a3:4a:90:72:64:c7:d0:3a:15:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3D:4F:AD:23:AB:0C:B4:91:48:97:38:7B:58:F7:9E:53:1B:5A:F5
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:f5:c3:79:90:81:79:39:48:32:8c:4f:1c:58:33:70:1f:
         24:05:67:93:e3:69:62:c3:f1:91:be:11:31:0e:7c:a4:f7:81:
         f8:14:a9:a4:6a:8b:34:9f:92:52:35:8a:43:db:55:81:a4:bd:
         af:94:20:07:5f:0c:6b:12:87:c2:cc:4b:e7:29:03:dd:1e:da:
         60:d8:89:ae:1f:e6:19:6e:9a:39:c0:b8:2e:b5:e0:0c:ba:ab:
         12:86:ac:b1:b3:bf:4d:58:f9:d3:f8:0a:2f:1c:a3:c7:a2:23:
         1c:9d:40:80:cb:b2:1d:8c:86:21:72:3b:fc:c9:d0:55:42:fc:
         44:3d:01:19:fb:0d:e7:8f:61:99:df:0c:a0:2e:28:a2:52:e9:
         08:92:1a:e7:8f:ac:a8:f4:bd:d9:6e:4f:25:9e:b7:85:1d:fa:
         18:b7:a7:4b:21:ec:f5:21:ca:94:57:2a:2f:f5:bc:6a:24:e1:
         cb:93:9b:97:78:e4:2b:a7:de:6c:1f:ed:ed:fa:28:f3:eb:81:
         64:1b:fd:f8:c3:fe:9a:ef:32:c6:b9:74:08:4f:2c:7c:c5:10:
         26:93:9c:68:1e:25:c8:d8:9c:f6:1c:27:fa:f7:a6:9f:63:f7:
         b3:07:ae:8f:69:0b:fc:5b:05:ea:8d:b0:70:a6:29:1c:ce:75:
         f3:e2:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:32 2026 by rpki-client