Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          tQ9x0g6cIBxkvsY4YlUILIdlG0xdciC/VL8BMPu4YvI=
Subject key identifier:   1A:F2:4C:04:4B:D5:F3:9B:16:73:07:EF:84:40:AA:7E:F8:C4:8B:6B
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019D258420FB1B115EEDB00B0F9C94E3DA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          0782
Signing time:             Wed 25 Mar 2026 15:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:49 +0000
Files and hashes:         1: DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa (hash: pOXeNunBUp7XMmyt7KCLlUiodAtYd49vUDG9ePb2slQ=)
                          2: GP_Mj6PAxOglARXWqt3O7csqHl0.roa (hash: 9RdzBSdQWGA/ZjrTNqzOgihxpuYok+ZxFPtV3uGFuyA=)
                          3: JjxyiyRAHIZDhSB7r9odWsogzv0.roa (hash: cTZJnhtnZxGwp2Q9A0lYiODLfA95pG6O1DIOhv9ttYY=)
                          4: Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa (hash: CvQQy58T2+JT1V1PpCMrbgGvmKiUqKITp6SsZ8+pjsw=)
                          5: o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa (hash: YKENZtDbouX123QC9IjXYuWhmGFmJEwt6IRC/Z5j654=)
                          6: tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa (hash: gRJclz6t9y/Q1g8bocXmUp9M+K0hzT5o06prGgkqzrY=)
                          7: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: PJQ+htkaW2FkeQtzV7WnE4uO+EiTEl1N0m+TKZPO09E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:20:fb:1b:11:5e:ed:b0:0b:0f:9c:94:e3:da:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Mar 25 15:01:49 2026 GMT
            Not After : Mar 26 15:01:49 2026 GMT
        Subject: CN=1af24c044bd5f39b167307ef8440aa7ef8c48b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:c5:cb:f6:bb:ca:b4:f1:ea:1b:8e:fd:6c:
                    93:57:7d:55:21:83:ee:4d:2c:c5:3a:a0:5d:ff:6f:
                    57:57:e1:83:26:5e:9a:9e:41:84:2e:5e:14:69:ed:
                    46:52:aa:b8:cb:78:a3:8d:96:41:29:38:2d:13:31:
                    76:05:9f:2c:fa:71:7f:34:0e:41:dd:31:39:ab:41:
                    66:80:c8:75:05:14:1e:c6:b8:f7:e0:e6:28:5e:39:
                    12:b9:fd:c4:40:2f:89:3d:ce:ad:b2:9d:0d:aa:ba:
                    ac:38:02:d8:f0:36:40:71:e7:e9:fc:7a:8c:55:ed:
                    98:b9:6b:55:29:c5:c8:d4:7c:3e:01:8b:f1:08:96:
                    a6:0b:09:a3:d5:a5:69:01:1b:d7:28:8d:77:a0:8f:
                    88:1d:76:61:fa:73:0e:91:ff:25:df:d5:fe:24:17:
                    fc:50:8a:3c:04:5d:db:a0:ba:e0:a4:f2:7b:fa:ca:
                    67:bc:ed:25:99:1d:a0:85:db:fa:1c:e4:e7:b4:38:
                    81:a5:53:bb:a4:21:2e:99:5f:31:22:6f:e3:16:d0:
                    ec:b9:71:a3:2e:41:9e:5f:8d:e2:85:57:11:a5:19:
                    68:28:55:3f:3b:d3:82:a4:a3:01:2c:f6:92:3c:6b:
                    35:75:4e:83:c6:22:50:2d:0d:24:06:85:ee:b1:d4:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:4C:04:4B:D5:F3:9B:16:73:07:EF:84:40:AA:7E:F8:C4:8B:6B
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:29:d6:7b:9c:62:7c:7e:51:c2:a1:79:1a:4d:73:f9:93:
         6e:c8:11:dc:b4:c2:fb:06:ef:ea:6d:0f:59:72:9e:07:d1:b3:
         cf:69:18:ce:53:bb:78:96:c8:e5:1c:48:6e:f8:63:3d:44:ce:
         50:9f:08:0b:96:3a:a4:ca:17:89:37:2c:61:ab:82:f4:c5:b7:
         81:31:5f:27:9e:b7:8c:d5:b3:72:d6:09:98:af:6c:9f:88:f1:
         a6:7f:a1:3a:10:38:73:20:2c:36:85:13:66:9f:f1:4d:2c:ed:
         73:55:0f:e0:df:79:73:c5:88:48:41:ef:14:11:63:d9:92:06:
         e4:3e:c6:86:66:06:0f:3c:60:87:5d:d1:0f:f9:4f:92:62:85:
         a2:ba:8e:ec:77:76:0b:80:e6:91:84:08:47:56:59:10:ce:db:
         7f:7b:8e:2b:70:2c:39:28:4c:4b:d1:f7:6f:5a:ae:93:85:8a:
         c5:8a:d0:35:e2:88:7e:0b:34:6f:bf:b9:62:17:2b:f9:fd:60:
         e3:a0:59:d6:de:b8:8a:f5:48:0a:d5:fc:71:7e:e1:7a:12:78:
         42:88:97:8f:f9:d3:0a:ce:0a:53:ad:19:3e:31:52:40:81:48:
         af:a3:67:2e:a4:52:85:9c:7c:26:f0:09:4d:b6:10:97:db:93:
         7f:e0:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client