Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File:                     MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier:          kdb76FnKnEdsoJRW3jsmSiNMBjaxvp+WaxEnw0rcec8=
Subject key identifier:   0D:8E:6D:0E:B1:B2:01:9A:2D:9A:33:9E:1D:F6:48:3A:74:D8:F4:EF
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer:       /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial:       019D3488C40501FC92BBC63BEB1B1F5E7E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number:          07F7
Signing time:             Sat 28 Mar 2026 13:01:11 +0000
Manifest this update:     Sat 28 Mar 2026 13:01:11 +0000
Manifest next update:     Sun 29 Mar 2026 13:01:11 +0000
Files and hashes:         1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: /5NRWeAzs9DXOys8qiNmazMMxW19C/uArM4k76TXMZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:88:c4:05:01:fc:92:bb:c6:3b:eb:1b:1f:5e:7e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
        Validity
            Not Before: Mar 28 13:01:11 2026 GMT
            Not After : Mar 29 13:01:11 2026 GMT
        Subject: CN=0d8e6d0eb1b2019a2d9a339e1df6483a74d8f4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:fd:c0:1e:14:a3:c2:cf:c2:9c:4b:62:5c:
                    ed:e2:7a:ff:75:ac:3b:40:8c:a3:82:3a:1c:aa:11:
                    d7:c8:14:3f:bd:a2:0c:75:dc:e5:4a:e3:c9:be:3a:
                    e0:d6:3a:ee:f7:b0:4d:da:a1:db:7e:c9:cf:2a:47:
                    e7:6b:7b:8c:79:b9:b2:e7:b8:ac:a2:6d:eb:5d:13:
                    c0:3d:c4:9c:6d:b8:81:56:02:55:d8:41:d1:7c:c2:
                    b7:55:90:8c:d5:11:ef:d7:0b:8f:42:7d:db:3e:44:
                    79:9e:93:fd:14:26:45:d5:c7:f6:7f:ea:07:ed:82:
                    4c:8f:88:dc:4f:06:82:4d:7a:3c:0f:e7:fa:ed:5b:
                    32:42:60:47:36:ea:ca:67:b4:55:63:d9:18:f2:be:
                    43:cd:d6:24:b0:85:81:c9:6b:ab:1a:ec:c7:d0:f7:
                    84:b3:51:07:2b:4a:df:fb:26:9d:0b:2e:83:23:b4:
                    02:24:ee:bb:d5:dd:e4:48:a0:e7:6c:ed:26:b4:ae:
                    1f:3f:b4:9c:b9:4a:40:f9:ac:27:51:ad:d3:bb:de:
                    44:3b:e6:7a:bc:1c:b4:ea:26:6e:52:4f:7a:18:13:
                    aa:f6:92:cf:2e:17:56:48:08:36:8a:fb:bb:dd:7b:
                    80:37:1b:3b:ab:e6:4b:0b:a0:83:17:da:f3:2a:cb:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8E:6D:0E:B1:B2:01:9A:2D:9A:33:9E:1D:F6:48:3A:74:D8:F4:EF
            X509v3 Authority Key Identifier:
                keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5a:30:8e:0a:ec:c8:37:39:ee:0e:f7:12:2b:2a:1e:ad:76:
         cd:ea:04:49:c9:60:9d:e9:3a:df:cb:81:9a:c9:83:72:b9:b8:
         65:ed:ea:f2:7c:ec:10:7b:6f:7f:5b:d6:cf:38:bc:5b:5d:ff:
         6d:3f:f6:15:ff:4a:48:85:4a:0f:0b:8b:78:d4:f1:91:0e:4b:
         0d:e1:71:0c:26:32:88:d9:63:80:83:3f:f5:57:37:63:ff:8a:
         08:fa:1b:17:c4:d9:38:54:e4:90:d6:c0:91:fd:9b:d8:bc:91:
         94:6f:5c:18:20:cd:33:71:47:75:28:7f:11:67:f6:af:f8:2f:
         a7:0c:13:3c:9a:c0:86:32:65:03:f5:b9:f8:4c:bd:21:ac:ad:
         cd:ea:81:2e:bd:67:37:b7:95:43:7c:5c:ff:9b:be:4c:31:2f:
         00:d7:90:b7:cb:c1:63:07:67:06:5a:f5:48:eb:ca:cb:5b:b7:
         48:65:fd:87:fd:57:d6:9d:ad:e1:6d:36:ce:a9:95:c3:13:89:
         65:5b:24:2a:d8:fb:01:a5:2e:35:01:23:2b:b3:3c:29:91:39:
         77:40:ad:2e:25:08:a1:6c:df:4d:c0:35:57:a7:d6:d8:7d:f3:
         07:fb:41:cb:30:ab:ec:3f:5e:ca:b6:8c:2d:47:40:d4:4c:5a:
         84:cf:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:21 2026 by rpki-client