Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File:                     MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier:          MS6u+v8+qxFMck/7tqzj4wiar7uwo1jI8ui3COHIxbA=
Subject key identifier:   ED:05:21:93:CD:3E:A4:42:3C:0F:EC:59:53:25:B3:80:17:F5:73:D9
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer:       /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial:       019D28BBB060DA2AD4069C7D8DD67A226F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number:          13CB
Signing time:             Thu 26 Mar 2026 06:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:22 +0000
Files and hashes:         1: 6JZ7XwAAQjYcJy-iMu7ApYDu0IE.roa (hash: OgfErWAGIy3L32XMleS4jSHvDJW/cp8NDQpdWGx5uXw=)
                          2: MseO7vestFH8N1df65EU38zBzfs.crl (hash: cdH9kOw55OBP18T5/WNVkmbBoAzzwPdILJeq6V727b8=)
                          3: bnh9H9MtaO7JJkGv9fB6vzfbRL8.roa (hash: OarhJBM7HcEYsfcrksfUPdeB09DN8UfGjioylIK5c3k=)
                          4: dF9sPCEN_zHoOwfh4IOcs-1yTLs.roa (hash: 3JIrXXGe/T2UAMIBqEouLulWgUj2qDcUjutd+HRZT2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:b0:60:da:2a:d4:06:9c:7d:8d:d6:7a:22:6f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
        Validity
            Not Before: Mar 26 06:01:22 2026 GMT
            Not After : Mar 27 06:01:22 2026 GMT
        Subject: CN=ed052193cd3ea4423c0fec595325b38017f573d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:ad:04:97:78:81:42:dc:d6:f6:30:a3:e4:
                    89:78:70:40:71:ae:93:44:71:d7:d2:08:4d:ab:8a:
                    5a:f7:f8:97:3e:8f:b0:d6:1a:2e:f7:7d:52:36:7c:
                    1f:38:35:ee:12:c5:cf:09:5d:14:95:2a:fb:37:1a:
                    3c:c9:91:d7:fc:28:7b:62:cd:19:7e:6e:25:17:3b:
                    fc:3e:2d:cc:4f:c1:c4:6a:64:ad:c8:c1:57:d0:5d:
                    b3:de:3f:68:27:a3:05:bf:70:95:cf:5c:d5:c8:62:
                    06:3f:36:35:e1:6c:4f:bb:db:10:22:70:90:a3:ad:
                    31:18:3b:67:99:f9:e3:dd:5c:99:42:af:96:d7:e8:
                    8c:a4:9c:2e:e2:2b:05:14:03:8e:03:06:12:cf:0e:
                    37:f3:a8:16:8a:7b:d4:ec:75:29:8b:b0:2d:ef:7f:
                    44:ae:9c:5f:4b:91:d3:51:91:e4:b8:20:bd:07:8b:
                    ba:a6:56:22:16:9d:6a:c3:4d:e3:4c:eb:73:17:5f:
                    35:f0:ec:0e:42:06:6f:fc:ed:af:38:74:c7:28:b7:
                    f2:12:0d:85:e5:3e:7b:4e:fd:aa:13:cb:d4:20:1d:
                    87:41:00:b3:7e:94:68:7d:2a:05:50:d3:52:01:3d:
                    f4:ab:5b:3d:78:d4:44:48:3c:cf:3a:82:c7:9e:ed:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:21:93:CD:3E:A4:42:3C:0F:EC:59:53:25:B3:80:17:F5:73:D9
            X509v3 Authority Key Identifier:
                keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:8d:d7:7d:32:08:9d:a8:f8:35:45:7f:13:95:ba:1c:63:
         b0:ff:83:71:c3:a4:27:62:de:b3:92:34:3e:74:26:5c:c0:03:
         cb:22:fe:65:77:d3:98:87:7d:a5:ef:d5:34:ff:61:0a:9c:2e:
         06:48:7b:ea:c8:f3:5c:13:df:3f:61:dc:37:01:df:0a:91:14:
         1b:7d:23:31:08:e2:53:3a:d2:a9:d9:e6:b7:bc:a2:ff:a1:53:
         fb:87:ef:f5:93:f4:64:d1:a8:a7:a6:f0:da:2b:77:18:5e:3a:
         cb:d1:0c:85:b0:a9:db:17:c4:c2:b3:89:b1:25:2a:31:82:26:
         9b:8c:a8:f5:07:d7:c4:e9:84:26:dd:a1:4c:39:8a:58:3f:cc:
         7f:bc:6d:0d:f0:4f:21:31:70:b3:94:d1:d6:06:e9:bc:b5:cb:
         91:27:cc:3f:68:eb:7c:9c:eb:dc:32:2c:67:14:1a:56:70:31:
         a8:92:88:91:84:8d:a3:f5:f2:08:3c:05:0b:c4:6c:ec:97:49:
         5c:c1:c7:32:a8:b0:17:84:b4:61:d2:0b:f3:68:56:b6:f7:6f:
         6c:29:71:10:de:c2:93:66:62:79:6b:c6:6f:78:3a:83:d9:3f:
         61:3e:14:c0:5d:62:8e:2d:6c:b5:8c:e4:71:43:36:a2:b9:dc:
         da:ec:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:13 2026 by rpki-client