Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
File:                     fHcuHibmwj9ArWZoyF_pUNoQY_w.mft (raw, json)
Hash identifier:          KQGcqGf5jOO7ylYzWLprQbbXZsMBSTt9inUtVgbPKHE=
Subject key identifier:   71:7E:14:A6:39:F9:08:E0:8C:1D:E2:06:03:64:68:54:1F:26:BA:EE
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Certificate issuer:       /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial:       019D284DA33323C893207CBC84C9261C2EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
Manifest number:          0D08
Signing time:             Thu 26 Mar 2026 04:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:09 +0000
Files and hashes:         1: InuSEjaNg3rFru5SD41hoAmXP0c.roa (hash: enL9L24UrjllANwEOw6nH7qCBd8PZHL+JdixXw9Aqk0=)
                          2: SVhcT7-f91GWHF3ezAp4CabQJGE.roa (hash: I2BGiiPzcbR9Xi/UTC8SBNMbYW3PmqoOXqk7AuptfuE=)
                          3: fHcuHibmwj9ArWZoyF_pUNoQY_w.crl (hash: GHEcRYxrEwo6uZpNcLHBgAAlzl89gQ5/xixayNoFwMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:a3:33:23:c8:93:20:7c:bc:84:c9:26:1c:2e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
        Validity
            Not Before: Mar 26 04:01:09 2026 GMT
            Not After : Mar 27 04:01:09 2026 GMT
        Subject: CN=717e14a639f908e08c1de206036468541f26baee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:22:5e:55:33:c4:4d:2a:43:7f:2b:f7:c1:
                    3e:c7:0f:a3:d6:09:f8:83:9a:98:d1:3c:a7:d8:31:
                    85:21:9b:a1:b0:56:26:ab:a8:95:13:00:02:3d:62:
                    d4:79:29:1a:f9:21:79:51:2f:18:5e:a1:fc:17:8b:
                    3c:9f:4e:02:80:b0:7a:03:06:71:84:94:06:c1:8a:
                    01:ec:59:2f:f7:d3:66:ef:c2:3a:4e:b2:03:d9:50:
                    55:47:37:39:32:2c:35:31:18:23:fc:b1:eb:2c:0e:
                    7f:34:9a:c3:86:b3:da:6f:b0:b4:40:ca:f0:f5:4c:
                    0a:ec:be:db:3f:ce:ff:61:37:12:1d:53:ec:8a:dd:
                    b3:f7:96:1f:58:3f:d3:0b:87:b1:c9:64:e4:95:3d:
                    eb:3c:56:a0:8d:0a:ee:37:b8:db:67:24:db:69:65:
                    f1:1d:66:06:48:1b:49:7f:69:e9:8e:0f:8e:15:08:
                    00:1c:70:36:86:f8:e8:3a:d5:3a:1e:d3:e9:da:9b:
                    52:2c:46:4c:b9:a3:8a:7b:e2:e8:03:ce:2a:29:01:
                    58:77:64:86:8f:9e:ea:ba:82:24:82:72:55:d4:74:
                    54:dd:a0:51:f6:63:bd:b8:79:d1:f9:ce:33:45:04:
                    c2:b1:b6:ca:63:55:96:a0:4c:f1:82:3a:63:92:d2:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7E:14:A6:39:F9:08:E0:8C:1D:E2:06:03:64:68:54:1F:26:BA:EE
            X509v3 Authority Key Identifier:
                keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:9c:92:2f:01:9b:09:54:17:76:74:aa:be:24:97:72:d6:
         66:18:cc:37:84:16:20:5e:b2:18:21:e0:97:2d:b0:33:f3:38:
         67:16:0f:53:72:5a:e5:b3:b4:55:48:77:72:2e:95:16:df:af:
         20:c4:e4:90:53:d0:8a:eb:d2:f5:7e:df:90:14:cc:6c:f2:c0:
         f6:6e:ee:36:b7:68:d4:1e:e3:cc:4f:9a:8c:d9:c0:92:b9:93:
         e4:15:b7:38:82:bf:2b:43:a8:65:91:0e:17:d4:1e:06:07:0d:
         4b:51:d8:a1:2c:cb:b6:fc:d5:43:f0:2a:8c:6d:2f:96:51:67:
         0c:66:32:4b:74:d9:a6:ac:39:74:9a:33:fd:a7:7f:61:fc:75:
         a7:d2:8e:55:f4:06:d6:10:5c:5b:c5:f0:ab:07:7a:8e:0b:76:
         43:52:16:a3:30:ee:c9:05:05:3d:bb:b4:a1:23:e5:c0:24:2e:
         a4:23:25:db:75:67:97:ab:bc:74:8a:38:2b:b0:98:de:6c:90:
         55:c1:6a:cc:b4:da:fb:84:7d:8f:0e:8e:83:14:b2:1c:79:c3:
         d6:8a:a0:bc:7d:7c:50:b2:ad:a2:9d:ab:9c:bb:89:e2:46:a9:
         93:7c:fd:61:ca:15:ed:bf:ef:fe:5c:a2:8a:bf:9c:13:72:b2:
         7a:74:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:54 2026 by rpki-client