Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          8pnz1bqcKwMf0698h09YiIpwGtT+WyMLaK7aLISDg8Y=
Subject key identifier:   E7:85:69:06:B6:8F:F4:E2:A3:DD:41:A4:22:82:AB:96:72:37:EC:1B
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       019D2704C51B9EF12F9249A4093221EC7805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          14FE
Signing time:             Wed 25 Mar 2026 22:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:57 +0000
Files and hashes:         1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: I1BWdSO8ulzIQJoSWU4GuDQbg6yTiGFhpcwrb0rCi4M=)
                          3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c5:1b:9e:f1:2f:92:49:a4:09:32:21:ec:78:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Mar 25 22:01:57 2026 GMT
            Not After : Mar 26 22:01:57 2026 GMT
        Subject: CN=e7856906b68ff4e2a3dd41a42282ab967237ec1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:a3:c3:aa:15:c9:52:09:c3:32:5b:e0:6c:
                    52:f8:52:88:7c:dc:0f:9b:6b:fe:92:e5:2b:13:44:
                    06:c6:80:0a:8f:ba:c8:1a:85:fe:23:92:df:72:d1:
                    bb:6e:54:8f:6d:29:9a:64:d3:66:db:a1:7a:23:d3:
                    6b:a0:3c:e0:2a:65:d0:44:b7:76:36:3c:73:f6:2d:
                    56:3f:35:52:27:ac:38:4a:aa:57:55:96:f8:fb:4f:
                    0a:fb:ed:0e:de:72:2b:07:62:f5:98:89:8b:25:00:
                    9c:4a:da:e2:a7:9a:7a:b1:7f:69:a2:0d:0a:a2:d5:
                    47:f3:c4:fc:09:c2:93:60:70:ab:40:ca:87:41:a7:
                    21:13:a7:e0:58:e9:d0:1a:21:ea:09:4d:bd:24:2e:
                    54:4d:0b:98:fe:06:9f:21:f7:47:f9:0b:e8:0b:f4:
                    43:d8:b8:18:c1:f1:47:13:2f:ce:5e:ad:9b:15:54:
                    d0:09:8a:90:26:4d:a5:a4:0e:0e:26:5f:c3:90:4c:
                    c7:bf:1b:74:8c:31:50:7c:03:51:c6:fb:8f:3f:c2:
                    14:50:50:bc:99:9d:1e:de:ca:31:cb:f5:c2:08:31:
                    f2:a5:d3:45:46:7e:c2:89:5b:0d:32:65:88:b8:dd:
                    f8:b6:5d:ce:b7:21:ab:1a:cb:38:b6:3b:99:52:16:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:69:06:B6:8F:F4:E2:A3:DD:41:A4:22:82:AB:96:72:37:EC:1B
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:db:dc:78:49:03:df:d6:8d:96:6a:51:5c:ad:a0:b1:93:
         b9:f8:38:69:81:9f:39:e9:e8:de:cb:ce:a6:80:83:56:c2:2d:
         b9:50:68:9e:94:69:b2:96:31:26:70:3a:18:ab:fd:45:97:2a:
         2e:dc:06:ea:1f:20:7e:c5:dc:c7:cb:7e:6e:6d:47:bc:99:ea:
         b1:df:0c:b3:ec:4e:86:51:b6:e9:ce:dd:23:95:50:66:20:ec:
         0f:36:39:6f:1f:c1:05:71:c4:91:37:aa:86:60:bc:db:38:85:
         99:ca:7e:bc:56:55:1d:3b:0f:65:c0:3a:53:c2:9d:81:ba:8d:
         57:c3:6a:a4:63:19:05:60:bc:80:4e:dc:a0:34:b3:8e:3b:ca:
         0c:e7:22:dd:c2:d4:01:7e:f2:52:53:d9:24:c2:38:29:de:b6:
         34:8d:db:61:5b:df:be:ba:39:33:8c:de:c2:ae:4b:9a:c9:f5:
         13:75:9c:35:d5:24:c4:62:6e:ed:a3:71:8f:83:d3:59:45:29:
         80:4e:51:98:d3:5a:06:7b:46:53:55:67:12:d5:99:f0:58:09:
         54:68:0e:c5:d5:0b:c4:cb:56:e7:ef:f1:9a:a3:fb:6a:0c:7c:
         22:84:20:55:42:e9:67:f7:e9:1b:64:f0:40:f8:d2:c6:e0:1d:
         71:90:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:28 2026 by rpki-client