Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          hrb34nLAfqtRgIZ0RgWQlV0mb96I3g3khYrdvGY+KH8=
Subject key identifier:   1A:EF:AC:68:CE:17:C9:B1:3F:B1:02:A0:5A:FD:08:C2:4E:17:17:15
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       019D2A0491BE2D802A19C514AA4EA21D0A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0E65
Signing time:             Thu 26 Mar 2026 12:00:35 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:35 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:35 +0000
Files and hashes:         1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: Qc+giLFOd46IP31kUi0u73vcVANxSP5h5XcOqdxOr/Y=)
                          2: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          3: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (hash: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ=)
                          4: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (hash: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:91:be:2d:80:2a:19:c5:14:aa:4e:a2:1d:0a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Mar 26 12:00:35 2026 GMT
            Not After : Mar 27 12:00:35 2026 GMT
        Subject: CN=1aefac68ce17c9b13fb102a05afd08c24e171715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:2e:36:ae:c7:06:41:e3:60:fa:1a:f6:fb:
                    2a:6f:22:38:dc:3c:62:23:67:20:98:5c:22:73:c1:
                    25:42:6f:ac:d5:8a:70:36:f1:50:82:83:b0:02:18:
                    16:0e:f6:71:99:92:18:53:74:91:47:54:2c:51:8d:
                    d2:6c:05:1b:25:24:db:13:d4:fc:5a:4d:dc:30:d6:
                    9e:43:a4:56:48:e4:66:76:63:fc:8d:99:cb:c1:4a:
                    3e:f9:a6:b6:ca:0b:85:d4:3c:8d:3e:00:5e:fe:06:
                    7e:d0:48:45:7f:21:d2:cd:0f:a5:59:96:3d:c7:d2:
                    d3:f5:14:d3:ff:30:03:47:7c:dc:a1:fc:93:6a:36:
                    9a:c6:9e:f9:f9:4f:4c:99:a0:72:4c:5e:9b:40:7d:
                    fe:5a:9e:19:4e:39:44:51:82:89:01:a9:4c:19:51:
                    25:1d:b1:c7:7a:e6:24:2c:e5:04:ef:d1:b7:9a:5d:
                    c3:b6:7a:91:d9:1e:f1:05:f7:33:24:d1:af:e7:d2:
                    c0:3e:6d:75:d3:69:c8:09:10:c2:33:09:47:fd:aa:
                    1d:90:e9:df:f9:43:65:30:05:8c:90:c2:b4:35:26:
                    0a:66:2e:21:12:8c:ad:56:0c:6a:a8:ab:f3:d2:0f:
                    3c:3e:71:47:e6:6f:40:d7:29:e2:b0:c4:88:c4:58:
                    a2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:AC:68:CE:17:C9:B1:3F:B1:02:A0:5A:FD:08:C2:4E:17:17:15
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:12:16:f1:ca:f5:97:fc:3b:90:08:4b:03:fe:1c:5b:0a:b4:
         ac:a4:0f:e5:11:44:c4:0b:10:b3:d9:ca:44:fe:a4:1c:c9:3a:
         fc:f0:ee:2a:c1:7c:9d:89:05:4f:e2:be:86:2f:bb:f1:c8:3e:
         6a:66:95:c5:2a:39:86:d6:8d:4c:65:57:17:b7:d9:be:81:db:
         81:cc:a9:d6:11:e2:a7:9b:1c:ef:69:91:a0:fd:14:58:91:a2:
         90:8f:c8:87:24:f8:8c:9e:51:77:cd:a3:97:7a:91:b7:ab:d0:
         44:8e:be:6e:e6:57:5f:e7:65:05:91:b4:6a:52:8b:ca:64:05:
         65:2a:d3:19:15:f1:65:92:19:91:10:cd:50:a1:91:40:f0:ff:
         51:5c:82:fa:03:87:ff:51:6f:ee:ea:7e:32:a8:63:45:9d:69:
         53:32:fc:d6:be:d4:e6:aa:f1:e9:68:fe:ee:fd:fb:b0:54:88:
         e3:05:f4:f9:a2:70:2d:86:a9:5d:9b:98:19:99:46:23:ff:1f:
         af:4c:73:aa:f0:72:07:09:dc:ee:ee:b5:2a:fc:21:7a:29:8f:
         86:c9:32:25:bd:0e:ba:bf:a0:eb:69:a5:85:65:3f:41:ed:ce:
         ce:16:b3:6e:f0:21:1b:3f:66:a6:c8:fc:99:d2:0e:e0:dd:e7:
         1b:81:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:35 2026 by rpki-client