Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          Hmpvwarz70JBa7r18B9KoXzaUwLnzZNVTqX8PCuLHWU=
Subject key identifier:   D5:3B:CF:AF:53:F6:7F:E0:59:8B:AF:9D:9E:0E:0D:6F:71:E1:CE:A9
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       019D29614FFEAB4C39271E8D1512BE0DCE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          0C08
Signing time:             Thu 26 Mar 2026 09:02:16 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:16 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:16 +0000
Files and hashes:         1: 2H14aLA4Cp324rBqEO8djM07PBg.roa (hash: AyLJeaWqYxVRZJAqZbG+ccG5qtic1hAj5FwGn1wevMA=)
                          2: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: AQq1ljd3cGNYN7EoP/jOaz4QL/YG2el8Whua+UcZ5b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:4f:fe:ab:4c:39:27:1e:8d:15:12:be:0d:ce:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Mar 26 09:02:16 2026 GMT
            Not After : Mar 27 09:02:16 2026 GMT
        Subject: CN=d53bcfaf53f67fe0598baf9d9e0e0d6f71e1cea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:72:40:36:97:a4:90:14:2a:b7:0f:99:9a:
                    f7:e9:d1:ff:3c:d0:d4:86:64:ba:2a:1d:28:96:9f:
                    81:a5:18:db:f8:39:d3:b0:c4:f4:b0:1a:91:a8:c5:
                    dc:aa:8c:c0:6b:20:7d:8a:c0:07:99:7e:ce:7d:38:
                    8a:97:5c:37:73:2f:0c:05:3d:79:5f:22:a5:e3:81:
                    a0:e1:a3:5b:af:f2:8c:5b:0a:3e:1e:e4:f4:7c:46:
                    10:25:68:ae:2b:60:ad:71:dd:59:4d:9d:c5:3c:32:
                    e1:2d:b7:be:3c:87:f9:e6:21:74:06:5d:56:e1:d8:
                    14:74:52:a3:fd:c2:e9:44:96:2f:88:49:31:f0:be:
                    ef:5e:23:c9:db:e1:8d:d5:c7:bb:03:00:ec:78:bb:
                    09:91:c3:2b:39:a9:d9:ce:f6:76:66:b3:e5:c5:96:
                    f0:ea:e3:a2:fb:bb:c9:cc:14:15:3b:38:99:77:7d:
                    59:84:c2:3d:d5:00:36:03:73:1c:13:74:7c:ca:3d:
                    76:84:4d:ab:42:a1:b0:e9:13:e2:eb:39:e8:83:7f:
                    0b:b2:15:5a:5e:40:1b:4f:47:31:4c:96:98:fe:49:
                    23:8d:f0:79:ff:b3:d1:6b:e0:bd:09:7f:99:33:ae:
                    21:04:f8:7e:75:71:e9:1e:95:5f:b2:b5:ec:44:26:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3B:CF:AF:53:F6:7F:E0:59:8B:AF:9D:9E:0E:0D:6F:71:E1:CE:A9
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:34:f3:8e:25:a7:8a:f9:c6:e5:c3:84:13:61:0f:9c:9e:
         fa:72:99:24:0c:96:32:43:03:2b:97:76:e7:81:38:1c:67:d9:
         0a:79:df:40:39:d7:e9:36:cb:16:65:b9:1f:e1:49:8e:d8:ad:
         d2:7a:32:fe:82:41:1f:c0:75:c8:be:46:b4:7a:a9:23:3b:ea:
         3f:5c:e6:7b:0f:58:85:a7:2e:b8:16:27:30:ac:0b:c7:f7:fc:
         12:8a:1e:07:93:f8:a0:8b:d1:22:80:68:54:09:6a:e1:6d:52:
         e2:2a:59:98:2e:3e:bf:c5:da:51:e9:4b:d9:39:21:86:07:54:
         88:c7:24:6b:61:a4:49:54:8e:a0:bd:77:59:66:f5:68:54:fd:
         45:84:01:4e:56:9d:cd:31:3b:44:78:a3:bd:d9:d4:5b:50:f4:
         0f:97:ae:c7:8a:77:22:ba:f5:40:69:6e:9b:a7:ef:bb:ed:a2:
         b8:df:f6:b7:ca:e5:25:01:f4:2d:b6:6a:53:cd:0e:58:40:4d:
         0f:42:7e:77:d5:ed:8e:5c:f6:03:74:ab:6d:38:3a:a6:ff:87:
         ce:d8:99:d1:d1:a5:4a:fa:cd:82:fa:ae:33:33:4b:54:b3:f1:
         ed:db:d0:ef:55:ff:5c:83:26:69:e3:63:c5:55:50:25:ed:d9:
         9d:7e:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:34 2026 by rpki-client