Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File:                     F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier:          ijw7N/TnlXQiLgDGWfEVweXIIHmoKA5YDxKmbtQjJBI=
Subject key identifier:   AB:21:CD:51:38:B0:40:79:59:21:5A:BF:1C:F1:CB:5F:C1:5C:7D:81
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       019D27722CBF5D6FBBB9D5967BC1371B9E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number:          11F9
Signing time:             Thu 26 Mar 2026 00:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:27 +0000
Files and hashes:         1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=)
                          2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: 23d3XdA4Xpj0vyB3120RyZqRByBFMw0Eo97mRS7ofe4=)
                          3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=)
                          4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=)
                          5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=)
                          6: bfitLnMyeXOFCrvSzyZPQGVZpAM.roa (hash: LVos1+eHW85xt3iMWb/Qf02D4fJoID0MB/GuI/v1bVA=)
                          7: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=)
                          8: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=)
                          9: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=)
                          10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=)
                          11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=)
                          12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:2c:bf:5d:6f:bb:b9:d5:96:7b:c1:37:1b:9e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Mar 26 00:01:27 2026 GMT
            Not After : Mar 27 00:01:27 2026 GMT
        Subject: CN=ab21cd5138b0407959215abf1cf1cb5fc15c7d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:ec:d3:5b:e5:09:7b:e5:ea:25:88:90:c4:
                    43:be:ab:27:5b:03:46:aa:2e:fb:5b:c7:27:a7:f7:
                    6b:fc:ba:e0:07:54:bc:3e:3c:7f:95:31:f1:49:91:
                    2e:51:78:28:a6:1d:e9:f9:09:e4:ba:cd:b4:5e:18:
                    c6:fb:48:2f:60:f1:9f:09:cb:a3:fc:0c:7a:ec:78:
                    93:5d:33:0b:c6:86:2e:34:20:26:db:c1:d2:71:cc:
                    d2:50:0d:6e:40:bf:28:8e:4b:8b:03:66:4d:a6:5e:
                    2f:18:cb:ba:80:c8:a5:51:0b:a6:06:8e:7f:56:af:
                    54:09:bf:09:48:3c:e0:fb:6c:62:3d:3f:05:08:e2:
                    fe:78:a7:c8:ff:63:c1:2a:7b:ac:29:22:2d:df:0e:
                    ff:8a:89:ea:05:65:09:71:4a:68:4c:2a:5e:cb:13:
                    0c:20:89:58:b7:e9:4c:39:97:f3:b3:e7:b3:a1:2f:
                    84:f6:61:0a:db:2a:c5:50:9c:6f:a3:47:eb:a6:c0:
                    ed:b7:19:65:80:61:40:ed:f7:d1:f1:b1:fe:a1:cf:
                    2f:13:b5:24:01:93:4a:b7:fd:2a:e9:b9:50:d0:7e:
                    85:84:e3:b6:10:79:26:97:ab:d6:99:35:42:7a:40:
                    02:42:69:e4:61:ff:00:7f:f2:d2:18:12:11:42:d5:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:CD:51:38:B0:40:79:59:21:5A:BF:1C:F1:CB:5F:C1:5C:7D:81
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:92:98:be:33:61:51:48:46:38:47:ca:2f:22:e4:55:64:b5:
         75:66:25:f5:63:70:64:b1:6a:16:b2:a5:78:86:16:12:9e:e3:
         04:1d:aa:c4:d0:c8:45:7a:68:35:49:bf:df:4e:d1:46:76:2a:
         e1:d6:cc:a2:24:20:7f:2a:0e:b7:a0:2a:4c:f0:9a:fb:dd:d0:
         e7:6e:d0:ce:0c:be:44:ab:14:4c:a8:e7:34:0d:4c:a4:a4:5d:
         68:2c:8e:e5:7e:0d:1b:a1:fe:d2:ee:4a:68:d5:58:5d:c1:b3:
         14:42:cc:21:64:55:6d:e4:22:52:4a:35:47:bd:98:76:4e:63:
         b3:5a:45:9c:b4:f3:e6:0b:33:85:16:3b:98:a0:64:30:2f:65:
         44:0a:cf:aa:49:c4:08:af:96:b8:e3:ad:00:c4:e3:b6:72:1a:
         70:45:61:2e:9e:0c:c0:31:f5:3d:f9:a5:61:5e:37:6b:f0:29:
         a5:8f:b7:86:d7:b2:89:75:be:15:33:cb:b8:5d:85:38:68:1c:
         d3:61:89:c2:38:b6:b1:cd:cd:fb:b0:5a:e1:9a:01:a8:1b:6d:
         70:7d:05:76:ed:56:4e:49:50:50:47:e0:04:5a:9b:db:f7:b1:
         46:17:36:37:d3:da:02:80:51:54:9f:c6:07:de:63:79:71:36:
         4d:7d:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:55 2026 by rpki-client