Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          WYr2HAQnL5c/Yk2+bL47lg4UPY2/dbFf6SRa7IBo3SA=
Subject key identifier:   C7:58:F1:A6:6D:CA:E3:F5:AD:B8:58:30:B0:9C:D2:4E:12:F7:5E:56
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       019D28BBCAFD030A2AB19C519265211DC00F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          1361
Signing time:             Thu 26 Mar 2026 06:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:28 +0000
Files and hashes:         1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
                          2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: LcPJbWRr9I4oGQf8v6A4la1lukvoPh55v3XPiiuKDxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:ca:fd:03:0a:2a:b1:9c:51:92:65:21:1d:c0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Mar 26 06:01:28 2026 GMT
            Not After : Mar 27 06:01:28 2026 GMT
        Subject: CN=c758f1a66dcae3f5adb85830b09cd24e12f75e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:87:9d:5a:36:f2:53:b1:6e:e0:d3:1b:c2:
                    50:db:d7:76:b0:e9:78:4f:fc:49:41:7b:f0:31:a6:
                    93:14:e1:ef:6c:6d:26:d9:c0:3d:37:ec:a7:dc:3c:
                    ef:fe:95:06:9c:8a:cb:a0:52:64:5b:cd:2d:1d:22:
                    c5:40:56:23:d1:ff:38:74:38:29:4e:0b:c5:3b:02:
                    6d:cd:48:2f:cb:bd:9d:69:34:5b:76:f4:7a:b2:b2:
                    81:0e:14:22:e7:d1:4f:a1:81:b1:d0:61:72:fd:74:
                    27:06:6d:a8:21:3f:92:03:ee:eb:22:71:fb:73:98:
                    ca:38:28:e6:e6:e3:3d:78:19:36:e6:b7:fb:3c:e5:
                    24:0b:4d:50:03:9d:84:48:bd:c9:1f:b7:c2:3b:ce:
                    7f:1a:0e:a7:92:cf:9d:7a:2e:fb:9c:7b:80:06:27:
                    f1:fa:43:85:5c:7d:17:dc:58:27:b3:66:0e:dd:2e:
                    80:6e:5f:9e:1c:a2:41:00:9a:40:cd:9c:8f:57:30:
                    0d:ed:ed:2e:b5:02:ab:a5:0a:8b:db:83:ef:6d:27:
                    0d:75:f5:6a:39:4a:54:25:66:4f:60:bd:c5:85:b5:
                    58:39:66:28:0a:ab:6e:90:62:48:7b:04:e9:04:2b:
                    7a:ee:00:57:a9:56:7a:2a:b4:d2:31:b5:0e:20:30:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:F1:A6:6D:CA:E3:F5:AD:B8:58:30:B0:9C:D2:4E:12:F7:5E:56
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:80:8c:59:9c:b6:12:4f:8f:8d:30:ca:8a:c0:a6:ef:92:74:
         0c:68:10:f2:29:a0:dc:d3:5a:9c:9e:4e:0f:ed:d3:a4:e8:b1:
         da:4c:49:25:b1:60:68:43:bd:69:2d:83:cb:8a:e9:64:2d:44:
         dc:53:93:b6:c3:43:09:4b:75:77:35:8d:3d:85:69:d8:c4:38:
         57:2c:ae:d8:18:e0:9f:1d:91:7e:b1:26:5e:29:24:04:f1:c2:
         08:07:3b:ce:c9:c0:76:91:ec:93:ce:db:d1:e9:ab:bc:49:09:
         95:b1:7c:80:99:c3:6b:7b:4a:9c:54:37:24:0d:47:e3:ff:37:
         bb:93:60:2f:96:36:19:92:11:69:05:cf:1d:10:d3:3d:67:0a:
         61:67:c5:18:cb:f6:58:d8:57:3d:32:95:6f:0c:b7:22:c3:fd:
         c4:bf:59:ca:7a:9d:c0:9c:22:01:5b:79:20:09:9a:c6:b0:cf:
         47:48:63:6b:ab:fc:43:18:25:41:0f:75:a7:21:f8:b0:2c:e5:
         1d:0a:12:d4:df:0f:56:56:30:72:92:78:b1:c9:a5:4e:49:74:
         e8:6f:18:1c:c0:ac:fa:6b:bb:6b:bc:97:c3:76:8a:5f:a4:68:
         e9:cf:8a:5c:b7:4a:75:17:0e:e3:44:c6:17:0e:92:de:31:11:
         8a:21:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:51 2026 by rpki-client