Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File:                     Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier:          y9XNxXHu8htwzgW9XLmGEclm+x4fAcXV6S0SxzAvlwM=
Subject key identifier:   B5:19:78:B4:99:46:5E:3A:AF:7A:40:A8:6F:6D:CE:F2:5C:B5:37:E7
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer:       /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial:       019D284E03CD02E12EEB51ADBB5FA2176E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number:          07FE
Signing time:             Thu 26 Mar 2026 04:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:34 +0000
Files and hashes:         1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: vYqMdKIlhcz3P1Qh/BCDMPfmYVIwIedcs9nJJliDN1o=)
                          2: cStfMjNC3Zvni5434bm3caCEf5o.roa (hash: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8=)
                          3: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (hash: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:03:cd:02:e1:2e:eb:51:ad:bb:5f:a2:17:6e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
        Validity
            Not Before: Mar 26 04:01:34 2026 GMT
            Not After : Mar 27 04:01:34 2026 GMT
        Subject: CN=b51978b499465e3aaf7a40a86f6dcef25cb537e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:4d:ff:c2:bd:e4:fb:4b:c2:ac:2c:45:9e:
                    cc:e5:7f:7a:f4:c1:eb:30:22:dc:e2:60:88:47:aa:
                    2c:cc:8f:8e:33:48:a4:0e:03:f1:98:83:91:9d:98:
                    0a:9b:c6:9a:89:c6:c0:5d:0e:ee:48:4d:e9:a8:76:
                    15:b6:cf:5a:4c:89:1a:ee:50:3c:b4:1a:bc:79:2a:
                    12:8b:8b:3b:9e:d7:59:b4:c8:a1:c7:22:48:eb:c0:
                    25:47:ea:71:03:9f:35:dd:37:a6:37:a3:7c:e3:7b:
                    80:1e:a2:4e:fc:d4:1a:21:48:d4:40:25:41:50:97:
                    50:6f:35:80:89:72:63:2d:89:6d:37:d8:b4:07:20:
                    80:59:fc:48:fb:02:a7:cd:b6:2e:db:7e:2b:28:64:
                    1c:f4:c4:cc:ba:3f:42:de:95:ef:ae:d2:b3:15:37:
                    7c:62:29:8b:39:70:db:7e:ca:4a:cb:14:43:5f:0d:
                    e0:49:77:a9:9a:e4:89:b6:74:37:85:d0:b4:cf:8b:
                    07:de:1b:ad:e7:3a:25:9f:17:c6:0d:79:04:33:18:
                    78:b6:c6:aa:ed:ea:31:da:48:31:59:22:58:b5:51:
                    9d:19:74:5b:a4:9b:0c:4e:d0:e6:87:86:f5:7e:c3:
                    3a:7f:3b:4b:23:ee:0b:f7:ec:56:67:5d:14:86:70:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:78:B4:99:46:5E:3A:AF:7A:40:A8:6F:6D:CE:F2:5C:B5:37:E7
            X509v3 Authority Key Identifier:
                keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:2f:79:37:5a:fe:0a:a4:b8:db:43:ec:1d:bb:97:60:ba:
         cb:7e:70:9e:20:32:3b:8a:9e:5f:68:47:fe:a7:9f:c3:46:76:
         1b:a9:50:7d:1c:2c:c7:93:3c:ff:88:f3:b4:e7:4e:7e:67:51:
         09:d8:97:89:61:b5:02:24:09:17:9f:74:76:21:f5:90:7c:d7:
         06:ff:a5:0c:af:08:ed:9a:03:38:28:f7:43:d0:49:b0:a5:58:
         c5:a7:05:00:db:37:8e:69:84:71:cb:93:61:98:34:ff:7d:90:
         c0:dd:cb:0e:a8:36:2f:e9:a4:0b:15:a1:5e:ca:a7:91:2e:23:
         1f:74:40:55:d4:94:75:f9:ca:e1:3f:59:12:b6:5f:77:ab:97:
         cf:11:8a:0f:b4:b3:95:b5:9d:3d:c3:91:7c:7f:a5:c6:bb:50:
         9a:36:47:24:f7:a7:21:d6:93:58:60:c9:f6:b4:a6:d9:5a:0d:
         b7:24:48:68:d0:fb:6c:6c:e2:e3:cf:6f:4c:08:75:fb:55:7e:
         5c:0c:53:f1:d0:c5:b0:f0:d5:ca:df:e2:04:b9:42:1d:15:c6:
         e0:14:d3:bb:8e:81:33:0b:22:78:8a:e9:f4:f7:31:e4:77:f1:
         05:fb:0b:3c:6b:0e:e8:12:7a:02:ff:1c:aa:aa:fb:40:5c:f4:
         c6:e5:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:05 2026 by rpki-client