Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File:                     R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier:          LRADlurnqWk9vb6Ii3KS5G9wy6GR49xFUOiLEnrNLnA=
Subject key identifier:   B7:AE:4F:49:05:D8:B3:4E:B5:13:FB:55:CC:C0:BD:3E:7C:B5:37:F7
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer:       /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial:       019D2AA9AD2965CAF5F760920A38FFB0CA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number:          0F18
Signing time:             Thu 26 Mar 2026 15:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:56 +0000
Files and hashes:         1: DZomHa7MNWM2aR3KMMyRYlA-WUU.roa (hash: 2GJc+KyF+az2unS4dK+tq1FNMv4LlONqh2LlVoeRIWk=)
                          2: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: V7mQ1zJZl203rjY8ZVwsQK9QlAGAa8oAtX1dvuu0T9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:ad:29:65:ca:f5:f7:60:92:0a:38:ff:b0:ca:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
        Validity
            Not Before: Mar 26 15:00:56 2026 GMT
            Not After : Mar 27 15:00:56 2026 GMT
        Subject: CN=b7ae4f4905d8b34eb513fb55ccc0bd3e7cb537f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:d2:02:53:24:8c:8c:33:1d:8c:dc:f9:4a:
                    6b:54:0b:e1:9d:a3:7c:8e:1f:a3:11:7e:43:8d:c4:
                    b4:fa:09:e5:07:5e:52:eb:ad:03:d0:39:b6:8d:4e:
                    07:1f:4b:ad:6b:63:fa:30:19:e1:4c:aa:52:a0:00:
                    68:f7:0d:03:fb:ca:fd:33:72:f0:7c:95:bd:2c:ad:
                    11:23:c1:a6:7e:21:e6:67:d7:ce:68:16:7b:86:4d:
                    48:86:a1:a0:4b:7c:d4:dd:05:8c:1d:04:7a:a5:8a:
                    5b:1e:d4:14:30:5b:cf:07:c2:cd:0d:56:f8:56:f9:
                    7d:fe:ef:83:3e:b6:ae:ec:dd:b8:45:a2:6f:dc:0f:
                    3b:d7:84:d4:3e:71:ab:48:da:fa:42:0e:17:50:9b:
                    dc:06:46:2b:4b:ca:61:9e:6c:1b:ad:bc:aa:a0:46:
                    d5:38:5d:25:b3:b3:11:68:22:a4:b5:10:b0:8d:d7:
                    75:6f:59:67:96:f0:bc:e0:6f:f3:2a:63:a5:20:40:
                    bd:19:ba:84:b6:e3:5f:d8:1d:ab:a8:2a:0b:54:ca:
                    c9:54:99:61:52:98:fa:d5:c2:05:8d:1e:0a:26:25:
                    08:ce:7d:cf:08:15:9f:87:8d:f5:85:15:9f:06:fa:
                    9f:29:62:28:ed:65:65:e6:9a:8e:59:84:51:8a:f2:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:4F:49:05:D8:B3:4E:B5:13:FB:55:CC:C0:BD:3E:7C:B5:37:F7
            X509v3 Authority Key Identifier:
                keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:ea:6c:53:8e:f2:97:19:9b:1f:c3:07:39:8c:23:b2:ce:
         79:5c:9e:63:9f:75:b0:23:4d:02:9e:0d:60:17:2d:a5:ce:75:
         12:33:09:22:a7:2e:05:ae:62:de:9a:a9:56:5d:53:3c:42:fb:
         ea:c1:00:de:5d:1c:02:ab:4d:3c:3c:e4:e3:f2:a8:70:90:1a:
         3d:54:e6:51:55:c6:77:98:e5:ac:d7:a5:9a:da:e9:0a:f6:09:
         5e:39:41:80:a2:19:4d:e0:a1:3b:9d:20:82:2d:b1:0a:ed:f2:
         35:47:76:b3:2f:d4:98:af:84:c5:a9:9b:a1:a9:56:59:72:12:
         fb:61:05:f8:06:98:7f:ec:67:24:42:f9:0b:31:6e:ab:83:a5:
         b5:41:52:e1:00:94:78:82:60:5f:90:c5:79:9b:73:f5:a0:eb:
         95:68:d4:9f:6e:4f:28:e9:e9:4b:bf:60:89:83:b6:3e:89:b9:
         42:87:11:d1:0e:de:82:e5:81:a0:48:1a:80:ef:29:83:3b:8a:
         49:13:95:ae:71:af:91:b6:4b:99:00:5e:29:90:99:11:1c:9b:
         65:b2:ca:30:f7:1b:d5:b8:d3:3c:0e:59:7a:5c:e5:95:25:26:
         35:6b:a1:e3:1a:c3:f0:8f:a8:c9:da:07:47:69:0a:f1:f1:c4:
         5c:24:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:47 2026 by rpki-client