Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
File:                     4SV-qrv2BNRXAFXCzYrCSbspwQY.mft (raw, json)
Hash identifier:          wyyHXXCPqSg1mOrIyuMwPSsa4BsX3J3e3QEoEeJ4Ru8=
Subject key identifier:   11:73:D4:24:A0:82:18:4D:28:90:8F:00:1C:81:1D:9E:73:FF:14:75
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Certificate issuer:       /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial:       019D26CCD7473348ACC14AD2D59972848574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
Manifest number:          0709
Signing time:             Wed 25 Mar 2026 21:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:51 +0000
Files and hashes:         1: 4SV-qrv2BNRXAFXCzYrCSbspwQY.crl (hash: fztbjkhPNuaHJzx4fy7HXEGAAQOqkNSPBndHNcCQzNY=)
                          2: Cow__epxr4IeLApXgQJT_ozp_JI.roa (hash: +jTTHpcJ2/matk09UTCfY2qQyNuNZXRYvt74bFoFj4U=)
                          3: P-ZfL8dzXcwJu8ZGqV47Drbl2LY.roa (hash: VCOYVLtM2luwqOW170QT0pv1ceh2yF/IHt5QdUYSaJQ=)
                          4: _FU_b8oeqaoyn6FpjAqgWUPLhV4.roa (hash: Lq5rPk3+pCvDEMORepBuUYdy9i9sFctjO+UeBNNLphk=)
                          5: i7My9jnabP2BbLq-P1dWCC8qXAY.roa (hash: R20UohkOneliRpwAUf7Pv+c5QnvrZshoQdlOYXbF8DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:d7:47:33:48:ac:c1:4a:d2:d5:99:72:84:85:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
        Validity
            Not Before: Mar 25 21:00:51 2026 GMT
            Not After : Mar 26 21:00:51 2026 GMT
        Subject: CN=1173d424a082184d28908f001c811d9e73ff1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:17:00:72:da:a3:14:e3:b9:29:35:58:66:
                    53:c2:a3:1d:7f:87:bc:88:0a:74:3c:32:1f:97:cf:
                    1e:13:4c:6d:1a:5e:15:7a:6e:b6:32:e2:5c:5b:5e:
                    34:a7:0f:16:89:de:bd:49:52:9c:4d:90:83:6a:16:
                    b9:56:83:11:f5:f1:91:15:7f:1d:1e:aa:18:62:69:
                    3b:13:b2:d9:5e:1d:16:b8:77:a9:98:b8:9c:5f:86:
                    b0:51:45:0a:c1:f5:e7:f7:fb:22:70:d1:dd:80:37:
                    76:b2:0d:5d:c8:50:2f:96:9a:0f:f7:61:25:0a:ce:
                    01:2a:8a:c6:23:dc:1f:f0:d2:99:b7:01:c0:a3:a1:
                    a9:00:80:6a:85:ea:1c:87:a2:e6:cb:c1:27:4c:af:
                    4f:b4:69:da:60:2c:b7:63:c2:1e:81:84:fa:a9:7c:
                    8c:77:da:e3:81:63:9e:84:b7:c2:56:8d:b3:25:8e:
                    9e:a9:73:cc:09:04:b5:85:86:4d:4e:89:e3:d9:81:
                    e8:72:7f:5f:2e:d3:1d:99:ec:4e:85:b3:1a:7d:71:
                    c5:0d:df:0f:7b:80:9b:55:14:db:20:e1:b3:30:3c:
                    8e:aa:92:d9:4e:a9:f6:dc:86:74:4f:75:df:d5:c4:
                    c8:f7:74:27:87:0f:7d:52:36:63:15:69:a7:02:51:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:D4:24:A0:82:18:4D:28:90:8F:00:1C:81:1D:9E:73:FF:14:75
            X509v3 Authority Key Identifier:
                keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:8f:5f:25:d1:09:f2:40:9d:eb:3e:64:f9:9e:de:ce:e4:
         e7:bb:20:37:ba:c8:35:63:8e:81:a7:ec:79:de:7d:a2:02:93:
         5f:7b:c7:b2:5a:7b:44:16:ae:c9:ff:7b:3c:39:b0:35:9a:6c:
         8c:01:c9:b2:99:a9:e1:a8:33:1a:59:ae:00:67:ef:4b:4a:13:
         14:ba:af:16:20:12:41:a8:91:1c:f1:99:62:b9:11:74:ca:c1:
         c7:de:af:3c:7b:f6:ad:38:5b:2d:b5:5b:3f:e8:a5:03:ec:e0:
         50:6c:32:4d:ae:6c:85:fa:60:04:52:05:da:b2:c2:5f:f0:59:
         e7:57:38:75:34:d3:08:32:63:c6:6f:0d:8d:ae:2a:61:49:0b:
         ba:01:a6:d4:58:ca:aa:75:2c:f1:a6:ee:f4:ef:86:ec:da:a4:
         e2:1a:fe:df:a9:f1:ef:17:1e:46:35:c1:e7:7b:67:eb:ed:9f:
         ce:c6:d3:2d:ed:20:85:e7:e3:69:aa:3e:52:68:3f:ca:49:2c:
         be:4f:85:ab:a2:35:e5:b3:6d:08:53:45:e6:6d:ac:27:65:7d:
         6f:11:d2:46:d8:58:27:2e:27:17:48:a4:fb:eb:c7:d5:ff:ec:
         e3:bd:e2:b4:89:e5:73:b2:4e:ad:3d:85:e8:ce:07:95:48:6e:
         9a:53:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:12 2026 by rpki-client