Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          4cn6v8p34dHl37qW8c/hMOiQ13uTXTx5KyeLFEdauV4=
Subject key identifier:   64:0A:39:A1:A7:15:0F:79:D5:56:36:35:55:91:55:B4:80:A0:14:EC
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019D2583EDA117C6B2BE43141F108B5E9B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          09CB
Signing time:             Wed 25 Mar 2026 15:01:36 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:36 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:36 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: iMzTqbT+Af9zYAcvMarMO1v9IV0FIAgBthrBt4QXlhA=)
                          2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:ed:a1:17:c6:b2:be:43:14:1f:10:8b:5e:9b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Mar 25 15:01:36 2026 GMT
            Not After : Mar 26 15:01:36 2026 GMT
        Subject: CN=640a39a1a7150f79d5563635559155b480a014ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:cb:b2:00:ef:4b:d4:93:1f:b9:25:d8:3f:
                    92:46:8b:a5:4f:3b:82:b3:91:99:f3:1d:74:ca:39:
                    06:9d:01:52:d3:59:85:c7:e3:85:e6:b2:79:56:09:
                    02:6f:4c:dc:b9:98:f7:15:a7:20:30:75:4b:ff:89:
                    4e:bd:93:80:fc:47:f2:b0:6b:be:bd:f3:dc:dd:c3:
                    f7:a4:5b:e8:cb:cf:7d:40:f7:33:62:cc:33:88:56:
                    c4:10:6f:9d:cd:ef:3d:5f:3f:8c:b4:a7:ba:84:64:
                    34:2b:3f:53:12:82:a0:cf:7f:2b:66:59:b3:01:ee:
                    62:b5:cd:21:64:ea:a5:1c:7d:2f:1d:d9:e1:8c:54:
                    83:dc:25:29:aa:d3:8c:06:09:6b:09:4d:a8:82:2f:
                    8e:90:45:c8:13:4e:7d:21:a2:8a:31:c5:e3:50:b9:
                    77:06:cb:de:9c:d0:bb:4e:41:de:0d:5b:a5:88:8f:
                    a4:6e:65:2a:66:b0:00:e2:e2:f6:44:ee:ca:29:b2:
                    71:b0:b4:ee:d8:e9:7f:5b:d8:f7:85:21:d4:68:d3:
                    de:6c:b3:1e:76:1f:71:e4:ec:13:43:27:1a:88:b9:
                    95:9b:af:a2:b3:8a:a6:f0:fa:01:bf:cd:b8:d5:76:
                    bf:ae:c4:c6:44:2d:98:35:ce:52:09:c0:8b:f8:45:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0A:39:A1:A7:15:0F:79:D5:56:36:35:55:91:55:B4:80:A0:14:EC
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:82:a5:dc:af:93:14:56:c3:9e:16:f3:9d:32:90:f5:62:fa:
         54:3f:b2:f5:e6:3f:1d:5f:ed:32:6d:05:3c:cf:c4:d9:9d:64:
         ad:a6:db:92:1c:cc:f5:e1:8e:7e:6b:74:8d:d8:71:73:e8:4a:
         31:85:7d:c4:4e:b4:15:8b:3a:69:ec:2a:6b:3a:bf:a7:e7:21:
         42:da:43:e3:b4:8a:f1:03:0d:8e:50:9e:63:97:25:aa:58:5c:
         79:54:d0:c4:72:9d:32:95:3e:6c:ea:89:f8:39:b6:5b:ac:a6:
         74:ec:a9:b8:1b:42:34:fd:9b:06:29:ac:8c:38:30:26:c8:d8:
         75:95:20:b0:ee:e8:50:52:a9:35:63:8f:a9:d7:d2:e4:17:26:
         bc:e1:7c:23:f1:aa:f5:ae:dd:cf:6e:34:04:13:d2:13:69:5b:
         35:05:40:70:9d:27:f9:1f:6b:5f:97:f7:a9:fa:08:22:fe:60:
         ed:a9:62:1a:32:42:c7:4e:96:87:26:b1:b6:0d:22:0c:42:10:
         f7:a8:b6:b3:d6:f4:64:e5:60:44:b5:70:5a:86:6e:2c:72:62:
         fc:02:28:41:d1:40:59:d9:5a:b9:91:a2:d7:ca:15:f5:16:63:
         62:6f:87:d3:00:c1:a1:4f:e2:d2:8c:bc:89:68:10:82:90:d9:
         43:37:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:50 2026 by rpki-client