Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
File:                     _utSjKSLH0R1gsVMz27XgHUbUdU.mft (raw, json)
Hash identifier:          QFZowzmJ6SKPHQLH+IbRLWT5yzNy1ZVwX2IWcowA72w=
Subject key identifier:   2C:CB:51:F0:84:7E:E0:E2:72:DC:0C:2B:90:8A:91:4A:64:09:41:BC
Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Certificate issuer:       /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Certificate serial:       019D28F20E8D85A5F5C4943595E113F3A66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
Manifest number:          0858
Signing time:             Thu 26 Mar 2026 07:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:45 +0000
Files and hashes:         1: 7_rG0Ys6N4MGKrUhbuLLuJOKJEE.roa (hash: Ak2EaVXWEuisf+jOK9GcgBrIGLgB4b6VE6wIZKk5k7w=)
                          2: H2qjaqkpwL5u41T0q_WKY3L5TkY.roa (hash: p+2kMb78SWk8CqMJN3/d8JhczlAwZKrwDn4bucPWqNw=)
                          3: S26hfP1BT8O4C447UhaCygwPQWI.roa (hash: +53cRX698lifV/VIJ2tyQ5f4Lx93epMoKg9qTm5GnSA=)
                          4: _utSjKSLH0R1gsVMz27XgHUbUdU.crl (hash: KH6lbVvb9ZOXfnsFM33/N6VM+XFHNbwvMSvEpEHePk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:0e:8d:85:a5:f5:c4:94:35:95:e1:13:f3:a6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
        Validity
            Not Before: Mar 26 07:00:45 2026 GMT
            Not After : Mar 27 07:00:45 2026 GMT
        Subject: CN=2ccb51f0847ee0e272dc0c2b908a914a640941bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:d8:7a:8f:e3:6a:a5:82:4a:04:15:ec:68:
                    42:61:9f:df:12:a5:10:41:ae:80:cc:d1:cb:26:ef:
                    6a:16:aa:ef:6d:bc:ef:0e:1e:ac:29:13:ef:2f:ea:
                    e5:bb:68:c7:ea:ba:b9:e6:af:05:ff:66:21:86:4d:
                    00:8d:5a:8b:d2:c3:ec:d6:b0:e9:0d:0d:53:0e:39:
                    05:73:d3:a2:7b:88:c9:47:5e:bc:01:e3:19:17:31:
                    d9:50:f9:5a:4d:47:0c:fe:b0:fd:f4:90:b2:66:77:
                    90:64:bc:bf:16:4d:a0:6f:8a:b7:d7:d9:71:7d:fe:
                    12:1a:16:40:d4:c5:ff:b2:cc:8c:b4:16:df:e4:f7:
                    14:99:96:25:1c:8d:f0:9b:6b:60:b2:33:d4:92:6f:
                    bc:3a:59:86:a3:07:88:b5:6f:7d:c9:27:f8:20:7e:
                    6e:56:6d:ee:68:b9:f3:d4:01:4e:e5:56:0f:a2:39:
                    a7:ec:49:20:1c:d4:89:ee:6b:f1:2d:8b:ed:19:17:
                    5b:65:de:47:36:55:2e:d7:7e:b5:f6:9d:47:f9:67:
                    a2:45:4e:42:e2:67:e2:05:b7:6e:47:78:4d:d6:21:
                    5f:01:ab:a2:53:17:7d:f8:64:8e:ea:a5:b7:71:c4:
                    1f:c6:f3:0a:b2:cb:30:be:bb:5c:7e:6d:2e:8a:5c:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CB:51:F0:84:7E:E0:E2:72:DC:0C:2B:90:8A:91:4A:64:09:41:BC
            X509v3 Authority Key Identifier:
                keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fc:0a:ff:61:0e:40:2c:10:67:1c:39:ca:e3:ac:63:3d:84:
         6c:4b:a5:c3:55:82:f8:ab:89:4b:b5:e7:03:44:83:f9:06:45:
         c7:52:ce:fc:90:ed:5a:81:b3:4a:9c:45:38:49:13:01:3c:fd:
         5a:65:73:db:9c:2d:46:50:f9:1d:18:c1:83:c3:66:8f:91:06:
         0a:19:00:2e:ae:bc:d9:86:f8:74:15:37:dd:cf:fd:03:4e:3d:
         e7:2f:ea:c6:94:a7:1f:f0:5f:a0:ae:01:20:31:65:80:f0:f7:
         1d:49:0e:dc:dc:60:52:a3:b3:c4:ae:a4:c2:ec:cb:e5:70:8b:
         9e:ba:b1:8b:b6:dc:47:71:5d:20:67:3e:46:bd:df:dd:74:f5:
         6c:7c:28:8c:8e:23:a0:b2:2f:92:a9:95:44:eb:bd:f4:66:2d:
         35:90:fe:f7:ae:7f:f1:8f:bd:be:f8:6d:56:54:76:62:cb:93:
         b9:b2:9c:e6:14:1c:3a:32:ac:67:df:ef:91:2d:b5:be:1a:39:
         29:25:c3:43:a5:4c:cd:e7:00:3c:cc:be:5d:7a:4f:03:31:dc:
         28:86:60:2b:45:6c:d2:24:6e:d4:18:01:7a:aa:88:64:b4:b5:
         51:46:d5:cd:bc:b6:e7:14:98:20:df:41:88:22:31:3e:59:48:
         b2:97:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:51:25 2026 by rpki-client