Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File:                     U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier:          OPCgjaRgEMKc+hVOYHONS5BunjEmBUKLbbKkkWhYcts=
Subject key identifier:   9B:B7:62:09:B8:B7:24:E5:48:BE:DF:9D:42:D4:DC:A0:27:BA:29:4A
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer:       /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial:       019D25BAA3E7F4688B39EC86309C9AC85586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number:          0E7D
Signing time:             Wed 25 Mar 2026 16:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:21 +0000
Files and hashes:         1: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: GNBvCMLRNGOLw1jhLAjo7Qy69mOPU+llMKQyTwCwEMI=)
                          2: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=)
                          3: ZT6FomeiG8V5UVVq_9nhQvhkJ7E.roa (hash: VNWPoTgK+6WszCC/cUNxFvYDKEgpXvtoe5rvFlIxorQ=)
                          4: fgZ2gr9j8nkuTcXKTHLTyjKT7Rs.roa (hash: /jAuQCxC5qXXEGyOBRWBeLTs2UBCn/Kok1gqE38op4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:a3:e7:f4:68:8b:39:ec:86:30:9c:9a:c8:55:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
        Validity
            Not Before: Mar 25 16:01:21 2026 GMT
            Not After : Mar 26 16:01:21 2026 GMT
        Subject: CN=9bb76209b8b724e548bedf9d42d4dca027ba294a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:c9:a9:d7:d5:ed:ba:cd:06:a2:42:2a:a6:
                    24:0d:2a:c5:73:a4:d5:f0:e4:47:3f:fd:b1:68:0f:
                    49:04:66:d4:cf:78:25:ea:b8:54:d4:b4:9c:88:c0:
                    9b:e3:56:82:4d:41:6a:cc:72:67:b0:26:aa:c1:1e:
                    39:8a:6f:5d:70:22:a6:24:f5:45:d7:5b:7a:91:0e:
                    53:fa:db:7b:b1:07:f5:82:2b:9a:c3:8f:23:c0:35:
                    26:96:77:ad:03:2a:aa:5c:fc:d9:ea:5e:60:87:6d:
                    5a:9d:e7:d1:2d:83:4f:f0:8d:4d:42:4b:37:2b:d9:
                    80:12:b7:d0:3d:e0:d8:55:f3:54:70:d3:b0:c3:35:
                    92:ab:67:ca:d2:9f:84:ea:f6:a0:2f:d9:de:ec:78:
                    cc:65:c4:07:d7:d7:71:87:52:2b:d6:74:fa:57:a5:
                    22:55:a0:a5:e7:91:5e:11:6e:51:09:af:d7:a3:50:
                    94:5b:ea:14:0d:97:fb:ac:c3:aa:ad:0e:11:59:f4:
                    bb:b0:7d:e8:bd:5b:08:8e:88:0b:66:c9:a2:7a:e6:
                    1a:d8:49:0b:3e:fa:ea:10:a4:1e:ff:d6:33:a3:42:
                    86:b5:f6:70:60:8d:fb:3d:93:75:fc:e2:d6:95:c8:
                    44:90:e9:b7:91:e7:92:53:22:a2:10:c2:a2:1a:b2:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B7:62:09:B8:B7:24:E5:48:BE:DF:9D:42:D4:DC:A0:27:BA:29:4A
            X509v3 Authority Key Identifier:
                keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:10:13:de:ec:83:ef:b1:e0:52:96:58:c2:88:02:d7:2b:
         18:f1:1e:e0:51:1c:4b:ef:70:9c:2b:19:1e:27:aa:dd:57:74:
         b9:38:a8:b0:24:3e:34:60:83:51:d6:be:c0:00:f1:cf:91:c8:
         82:14:e1:99:46:5d:3d:42:68:8d:9b:f7:6c:a9:f5:13:98:09:
         b8:bb:22:3e:a0:9e:19:32:bc:a1:2c:cd:e2:9c:2e:74:5b:0c:
         f1:db:fe:48:90:5c:a5:0f:d7:40:0b:79:ec:26:3f:e7:68:47:
         00:04:2b:44:bb:dc:38:ed:e7:cd:a5:1b:51:53:fb:62:bd:50:
         31:d6:3f:0f:87:eb:4e:59:0f:24:9c:d2:6e:0b:e4:ba:0a:ce:
         39:02:23:b0:f7:9d:d1:2f:1b:3c:51:a6:5f:df:a9:96:cd:59:
         f3:e2:0c:ec:c3:ca:a8:7b:f4:6c:09:c8:5c:cc:d3:c0:df:1c:
         40:6a:e6:77:27:74:4c:d5:97:fa:66:1d:95:d1:ae:4c:92:ba:
         48:67:32:c6:6b:d9:97:37:d1:aa:48:b8:83:6a:47:5c:96:06:
         7d:a9:b2:67:32:99:df:0d:a7:99:25:c7:2a:bd:0a:8b:3b:a1:
         ac:66:c4:d3:07:fa:72:a0:86:1f:12:44:40:5d:e9:c2:76:2f:
         f3:6e:dd:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luqPn9GiLOeyGMJyayFWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0
OWI1ZTIwHhcNMjYwMzI1MTYwMTIxWhcNMjYwMzI2MTYwMTIxWjAzMTEwLwYDVQQD
Eyg5YmI3NjIwOWI4YjcyNGU1NDhiZWRmOWQ0MmQ0ZGNhMDI3YmEyOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvJqdfV7brNBqJCKqYkDSrFc6TV
8ORHP/2xaA9JBGbUz3gl6rhU1LSciMCb41aCTUFqzHJnsCaqwR45im9dcCKmJPVF
11t6kQ5T+tt7sQf1giuaw48jwDUmlnetAyqqXPzZ6l5gh21anefRLYNP8I1NQks3
K9mAErfQPeDYVfNUcNOwwzWSq2fK0p+E6vagL9ne7HjMZcQH19dxh1Ir1nT6V6Ui
VaCl55FeEW5RCa/Xo1CUW+oUDZf7rMOqrQ4RWfS7sH3ovVsIjogLZsmieuYa2EkL
PvrqEKQe/9Yzo0KGtfZwYI37PZN1/OLWlchEkOm3keeSUyKiEMKiGrKZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu3Ygm4tyTlSL7fnULU3KAnuilKMB8GA1UdIwQY
MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt
MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm
LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjQQE97s
g++x4FKWWMKIAtcrGPEe4FEcS+9wnCsZHieq3Vd0uTiosCQ+NGCDUda+wADxz5HI
ghThmUZdPUJojZv3bKn1E5gJuLsiPqCeGTK8oSzN4pwudFsM8dv+SJBcpQ/XQAt5
7CY/52hHAAQrRLvcOO3nzaUbUVP7Yr1QMdY/D4frTlkPJJzSbgvkugrOOQIjsPed
0S8bPFGmX9+pls1Z8+IM7MPKqHv0bAnIXMzTwN8cQGrmdyd0TNWX+mYdldGuTJK6
SGcyxmvZlzfRqki4g2pHXJYGfamyZzKZ3w2nmSXHKr0KizuhrGbE0wf6cqCGHxJE
QF3pwnYv827dUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:00 2026 by rpki-client