Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File:                     7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier:          8NsEhz+zgMC5faoiEzYtzCKcu+i4QH3zuWu8y0Q/Yl0=
Subject key identifier:   24:74:84:E1:4C:84:F5:44:0E:C8:7B:FC:44:D4:18:31:11:45:D0:78
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer:       /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial:       019D25F10059F52501E8CAB090F9E859E5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number:          0866
Signing time:             Wed 25 Mar 2026 17:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:44 +0000
Files and hashes:         1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: vpyfx+PIshdqfaZxVCwA1NKtR4E99JmLk/uWGRMvhyc=)
                          2: 9jn6dsCG7zUKMoNLEB2Nq7yEmNo.roa (hash: ZpDThViKND8r1v13uLcKpK3wc0tcaMhUMIpaAAxcmHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:00:59:f5:25:01:e8:ca:b0:90:f9:e8:59:e5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
        Validity
            Not Before: Mar 25 17:00:44 2026 GMT
            Not After : Mar 26 17:00:44 2026 GMT
        Subject: CN=247484e14c84f5440ec87bfc44d418311145d078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:ad:a8:1f:f6:9e:3e:31:5e:af:9e:b7:8c:
                    5d:46:d9:14:ec:ac:28:71:da:bf:13:bc:55:e3:da:
                    26:0f:e2:c9:58:d3:02:42:e3:3a:06:84:a8:d7:92:
                    57:d8:df:cc:34:b0:b9:7d:3f:fc:58:16:fa:ce:b2:
                    00:85:52:16:a9:ec:30:e3:7b:36:69:fb:a5:06:bc:
                    f1:ba:46:81:9a:83:4f:12:fe:0c:6d:b4:2c:7c:f6:
                    4c:ad:96:70:89:43:f8:14:6c:6b:ed:12:25:a8:43:
                    74:67:4a:de:ae:ef:32:89:81:99:9b:4e:55:79:86:
                    78:48:70:0e:27:b6:d2:81:1a:57:e7:34:ac:59:f4:
                    7e:68:6b:1f:ae:d9:a8:af:64:87:d1:81:28:4c:fa:
                    54:6f:99:7a:5c:81:74:31:08:d4:ac:5a:d7:a1:46:
                    fc:92:de:79:03:5f:9c:41:31:90:9b:40:3e:8b:b6:
                    10:c8:d9:87:1f:9f:e9:9f:7b:39:62:e1:13:f4:35:
                    78:0a:99:2d:93:46:e8:ee:68:df:ec:79:3b:52:e1:
                    d7:ea:b1:46:af:9f:da:c7:34:51:f5:90:1d:20:f6:
                    c6:73:61:8a:5e:28:70:7e:5f:f8:d0:30:83:54:7e:
                    7e:97:db:23:a5:ed:06:55:c1:e8:36:34:86:41:4f:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:84:E1:4C:84:F5:44:0E:C8:7B:FC:44:D4:18:31:11:45:D0:78
            X509v3 Authority Key Identifier:
                keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:78:49:ef:13:09:cc:bc:6a:e4:da:f3:cf:be:d6:c0:bd:
         91:db:ef:cb:84:bf:07:cf:72:9a:90:21:fc:78:93:89:80:4a:
         b4:0b:69:9f:7c:73:96:06:cc:f4:60:bc:90:b5:93:ab:e9:9a:
         cb:bb:22:c1:c0:38:9b:c9:a0:4e:03:87:34:15:ac:11:b1:ea:
         c7:be:0c:5d:8b:e6:86:e1:a6:c0:76:5b:49:eb:47:87:47:5c:
         14:62:27:ed:97:be:1b:c6:10:ac:ec:6a:0e:dd:f0:3c:6c:af:
         f0:bf:78:da:b6:93:17:9f:c3:1c:9a:fa:48:2b:b8:70:28:12:
         75:9b:79:fe:8e:4e:3d:d8:ee:69:c0:d8:65:32:47:e9:e0:01:
         a0:05:99:83:b2:a3:4f:2e:6f:e8:41:9c:cc:66:e7:f7:04:3b:
         da:d2:97:cf:70:8d:44:6a:60:fb:b3:33:9d:12:e3:c9:0a:cd:
         48:66:9a:b5:ae:43:d2:b7:53:be:34:c2:4e:e7:29:14:11:1c:
         fd:b4:d2:b1:49:ee:d1:43:6f:ce:1e:8a:64:f6:83:d3:e1:9e:
         ec:a7:5e:c1:e4:ce:36:92:e8:3c:5a:c9:7b:83:58:86:54:76:
         23:13:5e:09:5c:57:b9:08:fd:f7:f4:85:c9:2a:1e:bd:44:13:
         78:e8:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:54 2026 by rpki-client