Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
File:                     7VprotIki8R4KsD9s8ZLlGZAsJw.mft (raw, json)
Hash identifier:          6fLxr14XkllUH1lPcEjRSl5+qhIvo8dYBCz5jLC4idI=
Subject key identifier:   5B:FF:3D:44:17:7A:D3:03:0F:F5:66:F7:8C:84:C0:BE:AE:2C:D7:B5
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Certificate issuer:       /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial:       019D273AB6F27CE30E4203D79809A4CC2868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
Manifest number:          08FC
Signing time:             Wed 25 Mar 2026 23:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:52 +0000
Files and hashes:         1: 7VprotIki8R4KsD9s8ZLlGZAsJw.crl (hash: qF05wXWqNwwjNfwyRk2oOoqg94BkCUdx9Kq3/z9WmzU=)
                          2: DJtPMCH1_eiwDT79e8HqwTlL5Do.roa (hash: X+r4syN6QZd0tX31W/SeV5RknE2K5CdhB+d8e4upXrM=)
                          3: OeXUCM0rcgYsFn8_0wkR-Kaaw-A.roa (hash: MhHkIFe4oRCwqObdvBfiVfImsE4G4J+KgigbD3rGs9A=)
                          4: icFHDnkNwFTjsYY-SzduNjO_EqE.roa (hash: bzWm99q/qtEZJ/W2n/KzAK8PGJMkB7eWMwvqfDNeRPI=)
                          5: oOGxWgRI9chP9dLuo4u1njWP4rQ.roa (hash: NtM4yc9nFeOQLsS06C9rnI3lpf0UgW1F4jqaGJ55u5w=)
                          6: ybEmTlBBcJOoXWgr8m9z365o4bg.roa (hash: TRFDu1M5/mKWuPLtqvrlWG7LoIAWdxPjONN7AlGo3v8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:b6:f2:7c:e3:0e:42:03:d7:98:09:a4:cc:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
        Validity
            Not Before: Mar 25 23:00:52 2026 GMT
            Not After : Mar 26 23:00:52 2026 GMT
        Subject: CN=5bff3d44177ad3030ff566f78c84c0beae2cd7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:f6:2a:18:43:34:28:5d:50:8b:6b:01:0b:
                    7c:a5:7d:a3:33:9b:66:69:9a:7d:d1:19:6d:62:c7:
                    f4:84:01:78:4f:6e:e2:a9:02:4f:99:bc:f6:68:86:
                    08:bc:0d:25:83:ae:eb:00:2c:b1:6d:3e:9c:0d:09:
                    77:d0:07:f4:b2:a4:d0:4e:0d:2b:49:fd:a2:3e:e0:
                    d5:82:c3:9e:66:38:96:83:08:4d:2e:20:07:d6:f8:
                    02:09:8b:35:1b:df:ab:a4:52:dc:4f:70:44:0c:d6:
                    ff:0b:c7:5c:67:ce:d8:68:e0:8e:ad:36:43:b3:66:
                    be:d8:c2:39:50:9c:50:f7:02:1b:cf:ae:bf:60:85:
                    85:34:b7:aa:33:b6:20:66:4f:bf:fe:d2:8d:93:0e:
                    4d:86:09:56:e3:7c:63:95:86:03:08:d7:50:21:e2:
                    88:66:7e:a9:10:ea:b5:13:32:5d:73:a1:b1:1a:53:
                    07:81:0c:b0:e5:fe:3e:de:25:4d:1b:83:3b:32:1c:
                    92:a7:da:a2:36:90:3d:1c:bc:6e:89:70:84:53:58:
                    f2:65:26:b7:0d:6f:d6:e7:65:55:f0:24:7f:12:76:
                    c7:78:68:91:25:d4:f0:2f:2f:d7:02:7d:13:33:a5:
                    7f:ba:bf:ec:28:fc:1f:e3:58:18:91:b1:fe:4e:29:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:3D:44:17:7A:D3:03:0F:F5:66:F7:8C:84:C0:BE:AE:2C:D7:B5
            X509v3 Authority Key Identifier:
                keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:c9:de:21:55:c5:0b:31:d9:6f:7a:1b:86:4a:14:a8:e9:
         b0:d9:67:3d:79:7a:e9:78:56:44:56:13:37:57:28:2f:ed:39:
         00:27:72:d3:4c:5e:47:9c:5e:46:68:5c:74:5d:a9:08:4c:60:
         87:ba:74:00:18:86:6f:dd:6f:a9:e6:94:51:49:c1:18:04:fb:
         6d:e9:bb:c3:f3:c7:ab:e9:e4:2e:86:14:7f:b0:a5:81:5b:fb:
         75:62:8d:21:d9:db:6a:b6:63:b1:2b:17:56:c0:b1:ab:7a:f2:
         02:b6:0a:46:a8:a0:9c:15:b0:c0:1b:1c:8f:f0:71:76:82:d1:
         8e:5a:e3:41:cc:4a:a3:1c:06:69:7a:c6:1b:5e:d6:e9:5c:ff:
         bc:0c:f1:12:16:85:ab:65:bb:69:b0:5d:af:3e:aa:a6:34:0a:
         b2:d2:47:4b:8c:8b:f0:5e:b9:0d:aa:64:20:5d:a6:20:cc:90:
         bb:f0:db:8c:04:70:74:2b:b0:4e:b3:74:69:36:d7:b8:5c:df:
         ae:18:e7:b3:c5:18:48:a0:03:8d:45:1e:e4:65:1d:e1:6f:6b:
         08:81:c3:ed:7d:59:26:69:32:18:ec:1c:74:cb:cb:55:06:4e:
         01:45:a3:82:23:cb:e7:e8:cb:e9:91:37:d4:48:f2:7a:cd:47:
         14:27:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:44 2026 by rpki-client