Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          7w3ka5tXRnmlzpo9xgL1GddkqBU7rgZX1Km1yOZRj1Q=
Subject key identifier:   7D:CA:31:50:4A:9B:08:46:B5:05:B4:47:B4:DC:67:D2:53:0B:12:5E
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       019D273AB2032945426A0F3B074E1152F949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          1398
Signing time:             Wed 25 Mar 2026 23:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:51 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: uK9zp1a9cGcVIBl2Enu8W9FGpgbxp+PdDUpUI50px3g=)
                          2: 2a-ajfpkZAsjReLLQ1xduA5jH68.roa (hash: lQdPyjxms9XmoRw9yTquBchApgiBDYUsw2V+v//4ubw=)
                          3: 3qWiv8aUt9sce-sZcGdmrNaNLPY.roa (hash: fDS2D0rIZulEuzsnb+BYc++UCvsn6GakJSLWm65oY60=)
                          4: 5o_jXKDrMZ_VUtAMAA1b61XpZY4.roa (hash: cW/aLAiDeErlaNGgC/UoOefJEPVaWg9YZ9ILa/HwLxQ=)
                          5: iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa (hash: +sR86m8s5uPTFwMcLKL+T0A/ZDbNibZcTed4QGQkB+U=)
                          6: m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa (hash: AQFWIEldUOojspkBOhlpdbyceFMGqpqRnivtz2V3WHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:b2:03:29:45:42:6a:0f:3b:07:4e:11:52:f9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: Mar 25 23:00:51 2026 GMT
            Not After : Mar 26 23:00:51 2026 GMT
        Subject: CN=7dca31504a9b0846b505b447b4dc67d2530b125e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:d5:aa:86:ce:47:d7:ce:8d:4a:ed:26:60:
                    5e:ff:b2:b8:ab:e6:67:3f:47:a0:cd:c0:88:3d:dc:
                    93:56:db:29:a3:a3:f5:e1:ec:93:1c:44:60:29:34:
                    01:98:7b:fa:08:2a:95:a2:54:68:80:b4:55:30:e1:
                    26:cf:9a:91:07:94:9a:fc:58:11:8b:fa:a4:27:ab:
                    53:55:77:7f:a2:14:1a:d4:70:74:b3:77:d2:3f:0e:
                    54:df:a3:5a:59:3d:ad:a3:1e:f8:f0:8e:2e:d5:51:
                    2f:92:b5:43:db:60:6a:b9:98:11:23:53:13:25:5e:
                    e5:7f:3b:d7:6b:0a:8d:d0:05:97:a8:cc:81:ef:cb:
                    98:57:12:31:9d:3f:34:38:eb:1c:be:51:90:e5:e5:
                    55:37:5c:98:24:bb:25:9e:78:88:c7:57:fb:65:9a:
                    f0:e6:74:ca:af:01:2b:a5:a4:c4:c0:2d:20:82:90:
                    dd:26:0c:2e:df:48:4e:03:75:6c:52:5f:4d:fb:1f:
                    ca:9d:dd:94:0b:29:01:62:8f:ea:e7:72:e5:1b:7c:
                    da:39:85:cd:94:a0:45:b0:ee:ba:b7:be:02:7b:d2:
                    b9:f8:2f:65:b5:d1:f1:0e:de:48:00:3f:f6:29:51:
                    67:60:17:76:6e:a0:8b:ca:6b:6f:e6:79:96:b1:cf:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CA:31:50:4A:9B:08:46:B5:05:B4:47:B4:DC:67:D2:53:0B:12:5E
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:22:70:c2:75:6e:de:8d:f6:78:2b:91:a0:03:bf:d0:db:e1:
         1d:96:41:12:e8:14:ed:55:de:89:1f:83:18:43:ac:c5:70:96:
         a7:a9:35:f3:1c:cd:c8:e9:45:89:e5:9c:7e:58:c7:a6:8d:85:
         c6:8f:04:71:3b:e8:da:5d:4b:6b:8e:b3:dc:87:86:ca:82:ef:
         5e:91:dd:d6:e1:fd:4e:04:88:e0:93:86:25:f3:44:97:39:75:
         0c:a3:59:80:df:16:06:e6:71:00:90:32:b2:8a:4c:59:34:40:
         22:e5:74:1f:ba:68:09:a3:02:b9:e8:90:85:e2:3a:4a:c7:83:
         33:33:c2:b0:6f:24:43:32:d7:26:3f:86:46:0e:80:20:02:52:
         b3:ac:98:42:38:9b:aa:34:81:e6:79:4a:bf:3b:20:d7:ec:fe:
         db:f5:b4:cf:fb:54:8e:c5:1d:f6:af:5b:18:ab:4c:9b:8a:4f:
         b8:8d:f0:9f:68:16:9a:61:db:69:20:0c:73:ee:19:92:a4:cc:
         1e:e4:d3:ed:eb:b8:74:98:ac:7a:bf:e0:4f:a5:68:94:3e:6b:
         40:41:66:87:94:3b:1a:ac:92:70:0d:87:a0:59:42:57:d6:1f:
         78:ef:0f:b8:2c:f1:9e:cb:44:71:8a:5f:72:87:86:90:01:b7:
         0d:34:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:34 2026 by rpki-client