Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          s/1ao7Jh7DwikNjrVVHvHhUQDPA/771D88VWZ6HF+Ac=
Subject key identifier:   74:31:2E:3B:A9:3E:ED:43:45:F3:2E:B8:2A:7F:F2:C7:16:06:8A:02
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019D2695E3FCF9D3D5CBEF75D13E67381924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          05A7
Signing time:             Wed 25 Mar 2026 20:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:50 +0000
Files and hashes:         1: PK0CRUNKPydp1F9sRstNCMcVwis.roa (hash: n+n/sPwhuGlwhn4Gy6p0W0/UiHGQEt+/uBb6OJWsN1E=)
                          2: Z31MissZ7yHyJsx_dTK4RFd8-rY.asa (hash: nIwJfm6qlYIi6/sdM1uVq+e1tR35aqGsM85M/JuSXJc=)
                          3: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: f0VsNVVEcfWh+7+HmPjnOzuFWBX6BYX8JcV5oOGvktM=)
                          4: l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa (hash: 51EMra3zFohpnXCIeOY4jhtjtvE+0ZKY/ys2ekben48=)
                          5: sZ-Iqs_qyDOszNrK_Z5fuxggrOs.asa (hash: JjD0dpY8Ffn+6NJUwfPPxTg9q8Z8wtZ0n2tT9s4zBWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:e3:fc:f9:d3:d5:cb:ef:75:d1:3e:67:38:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Mar 25 20:00:50 2026 GMT
            Not After : Mar 26 20:00:50 2026 GMT
        Subject: CN=74312e3ba93eed4345f32eb82a7ff2c716068a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:0d:fe:5b:79:88:69:08:21:7f:75:47:da:
                    ca:af:91:71:9f:f0:de:ec:a5:13:41:c8:e6:b0:1e:
                    8b:17:15:7b:0e:1c:e7:58:20:f0:52:eb:00:8f:54:
                    a1:35:4f:ff:31:1a:de:45:52:b0:0b:2f:6c:f7:02:
                    5c:26:dd:e4:e1:af:13:4c:09:7a:f1:d6:14:5d:91:
                    d2:24:79:ce:19:00:c1:32:c5:69:0d:b5:e3:b3:7a:
                    08:b4:b2:03:2d:8c:7a:d9:fa:00:af:6d:be:30:20:
                    fb:32:8f:5d:95:80:1b:9b:19:8c:11:98:df:cb:73:
                    0a:03:b9:c8:1c:0a:06:7a:a7:15:f5:7b:85:52:06:
                    1a:ac:d8:bf:fb:88:c8:d6:43:bd:45:59:f8:0a:d5:
                    4f:ea:0c:89:5d:22:b7:40:cd:fb:27:d1:6d:dc:03:
                    5c:65:9b:bd:19:29:15:b6:55:c9:9e:c6:7e:2d:ea:
                    cc:61:23:f0:ee:2b:07:e4:78:1f:a0:c3:0a:62:73:
                    4e:4f:ee:a2:36:bf:1b:c4:4d:60:da:02:28:7f:c3:
                    18:9d:1d:54:51:32:7c:01:e9:1d:e5:18:ad:13:ea:
                    f5:1f:02:f2:c3:8a:2f:05:c2:9f:59:91:f5:95:20:
                    e2:8a:a1:2c:94:78:e3:e9:8b:6f:0c:8a:23:2b:ca:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:2E:3B:A9:3E:ED:43:45:F3:2E:B8:2A:7F:F2:C7:16:06:8A:02
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:06:0b:79:86:4d:34:c5:d5:0a:e8:de:52:46:23:ed:da:ae:
         33:08:cd:b8:60:3b:7b:53:2c:8d:5a:96:4c:5c:84:3d:cb:63:
         2e:56:6c:f0:75:46:ea:11:f1:1a:e1:70:9f:8f:0b:d9:d4:3d:
         4f:91:9b:c0:24:48:5e:f8:e2:74:0c:04:85:c7:3c:b0:dc:a4:
         e7:bf:fe:7c:6a:1b:fa:d8:a8:56:18:9b:16:b1:bd:fd:44:67:
         a4:a7:18:13:aa:bf:7f:6a:ca:ac:64:4e:29:5d:ec:6c:60:e9:
         64:38:13:69:27:88:b7:42:73:f7:f6:d4:6b:52:b2:1e:78:81:
         39:96:2f:b4:fd:29:ab:9d:c6:d5:02:b4:6b:0a:0f:62:1e:60:
         3a:53:0d:d3:68:63:eb:a8:b5:58:a4:b8:94:5f:a9:d4:e4:e8:
         1d:10:8a:15:20:c7:89:5d:80:19:fa:fb:70:5f:d8:f6:77:a4:
         72:5e:cd:0f:15:23:86:52:9f:e5:9f:c4:56:a5:73:56:e4:69:
         f7:13:91:3b:a8:ab:1c:46:2a:8a:13:06:89:cd:d9:32:ad:58:
         4d:dd:cb:6a:c8:a2:3f:83:fa:00:3b:9a:77:c6:91:04:5f:42:
         5c:4b:77:82:7d:7e:a2:6d:e9:d1:54:b5:9d:0b:95:f4:2e:94:
         d6:73:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:26 2026 by rpki-client