Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          NMMZX3T5mMoYAgAbHs8GRHgj9+hG0Ym9cHM6trJLnUU=
Subject key identifier:   6F:73:91:77:7B:0B:CC:9F:F3:8A:26:2D:A8:57:06:F4:7E:95:62:F5
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019D2A3C02AA86E483201017E2341E82344D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          13C7
Signing time:             Thu 26 Mar 2026 13:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:09 +0000
Files and hashes:         1: 7LMaVQHIURLIHhJQQlzIccTVpOE.roa (hash: 5km+tw1h03H4l3wkZKI+O7HJSeNoMxRPhDOUY2h8vd4=)
                          2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: TnE3k4b01czmTwQmpaw2mBHPf7Kk1GeeDiCfaDKhxBI=)
                          3: LI9K_zdJnsTE9lvQTqFYKf6AYsU.roa (hash: pcuAI5XjcKbL6fmMT5QI/ixfEpBYRotLo9ai79rRnLo=)
                          4: NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa (hash: x5vufpHlYAUdkIPewVIu2Kz4yUhsko+l9KK+oarRKKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:02:aa:86:e4:83:20:10:17:e2:34:1e:82:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Mar 26 13:01:09 2026 GMT
            Not After : Mar 27 13:01:09 2026 GMT
        Subject: CN=6f7391777b0bcc9ff38a262da85706f47e9562f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:3c:7d:ae:8b:ca:88:81:c0:a7:83:25:56:
                    2d:52:c3:29:d8:4b:e3:dd:aa:00:ae:fc:07:97:37:
                    54:e2:da:6e:99:c5:1f:bd:06:4f:3c:6c:40:7b:94:
                    08:0b:8d:ad:33:24:23:1b:11:ea:10:64:35:f7:f6:
                    68:4a:f4:d8:c9:c3:05:f6:fd:8f:40:e9:41:85:81:
                    d9:93:4a:34:f5:51:43:97:a6:b8:17:c6:43:6f:2f:
                    c9:b3:1e:c1:53:fa:13:71:a8:9f:ad:f3:30:b6:da:
                    1e:29:f1:05:85:1b:ec:d6:a1:f5:ce:ba:82:eb:df:
                    5b:bb:01:96:75:00:c2:49:5a:30:82:fd:93:37:fc:
                    34:bd:33:6b:50:75:0d:37:78:dc:ea:43:b2:46:ef:
                    5d:cf:02:a3:de:8b:71:0f:64:a5:88:11:ad:b2:19:
                    15:d0:f1:9b:35:81:58:8f:ba:be:29:40:bd:1f:23:
                    40:23:87:5a:7e:46:23:6c:a1:e9:56:43:d0:b1:88:
                    98:22:29:a5:cc:90:a8:ac:5e:2c:3f:4b:f3:69:29:
                    37:2a:db:c1:c9:06:0b:73:62:31:00:62:a1:03:e5:
                    b1:54:f6:80:80:10:94:32:76:84:e7:1d:a7:2c:a5:
                    0a:4e:3f:1b:33:de:4d:7e:b0:22:c4:10:4b:9e:58:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:73:91:77:7B:0B:CC:9F:F3:8A:26:2D:A8:57:06:F4:7E:95:62:F5
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:3c:2d:0f:2e:24:0a:05:7c:4a:de:c3:45:43:68:a6:46:
         65:93:26:ec:de:24:8c:74:ac:07:02:55:df:26:6a:0f:2e:87:
         30:1e:c3:d0:51:ee:07:2b:b6:53:1b:50:3f:42:ad:f5:cb:06:
         4a:08:1f:41:bc:0c:d3:01:de:50:65:48:89:b0:cc:68:82:04:
         07:32:0d:00:7a:bb:1d:3d:60:62:8c:cc:f0:ff:17:e0:71:e5:
         4a:5c:8c:e0:c1:91:95:62:61:3a:88:d6:41:f7:57:d4:5a:ad:
         80:22:b9:5e:1e:80:c4:73:45:37:07:8f:aa:03:83:5f:11:2e:
         21:fb:ea:c1:f4:08:90:22:53:54:19:97:00:be:6c:de:dc:3d:
         70:57:b5:b9:ce:9f:a8:71:bf:f7:1b:1b:ff:51:cb:c9:71:a7:
         61:de:22:20:66:34:85:ba:72:0c:7e:2b:5e:3f:52:65:2f:b2:
         94:36:4a:85:0c:b3:8f:33:82:13:d3:45:91:8c:1a:0a:51:3a:
         58:fe:41:47:d1:20:1b:d7:dd:5f:a9:5a:62:23:7e:56:35:20:
         a8:80:14:96:18:73:d6:af:71:6a:86:4e:2e:8a:12:ef:c1:46:
         2c:8e:b1:a4:58:df:d1:e0:3e:8b:b2:39:83:9c:e3:08:ab:00:
         cf:8a:66:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:03 2026 by rpki-client