Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File:                     v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier:          Yq+3yL+5udoqB/u8mGIvgBr9MJwLL+G2j1Gc6ZEWhk0=
Subject key identifier:   D6:F3:9E:A5:EC:98:C3:C5:0F:54:04:6E:41:47:A1:B7:65:56:16:18
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer:       /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial:       019D28844E5AA3E6755AFF58A589DDFC8300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number:          117E
Signing time:             Thu 26 Mar 2026 05:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:52 +0000
Files and hashes:         1: S6cfSB1H_ps_kH_S0XDtasvicvA.roa (hash: xt44QNEN7hPpzFoxnaD4gxZK8ZilzAgXn7bld09Oo6g=)
                          2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: JwcypchhyBteNB8GSywGyBnq1CS0tQSxGH3pEmoLz/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:4e:5a:a3:e6:75:5a:ff:58:a5:89:dd:fc:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
        Validity
            Not Before: Mar 26 05:00:52 2026 GMT
            Not After : Mar 27 05:00:52 2026 GMT
        Subject: CN=d6f39ea5ec98c3c50f54046e4147a1b765561618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:82:69:31:d3:90:cd:c9:99:7a:35:a8:88:
                    3f:f6:53:b3:77:22:cd:96:95:33:18:75:16:b7:42:
                    04:b7:5f:da:8c:52:f1:3e:8e:0a:ef:1b:5a:af:0a:
                    b8:f3:cf:78:82:33:9d:46:d1:51:07:8c:00:29:e1:
                    0c:8c:c4:4d:70:8e:a6:a0:ba:e4:db:39:62:2f:00:
                    fd:35:29:e1:f9:86:b2:31:24:55:f1:1a:82:38:99:
                    45:fd:d3:2e:59:31:24:2a:45:8a:59:b1:1c:61:09:
                    1b:f3:ee:49:0b:9d:43:25:21:ef:61:b5:eb:9f:99:
                    85:06:f1:e2:e2:41:49:75:08:94:29:e4:37:5d:f8:
                    2f:52:11:48:2f:f4:de:25:0b:1f:f3:29:7c:15:28:
                    19:9c:26:14:a2:61:dd:a8:59:f2:d3:c8:72:54:e2:
                    42:12:74:20:3c:18:bd:62:81:27:52:21:2b:a0:da:
                    ac:47:57:fc:13:0b:42:8c:a9:5a:cf:82:23:c6:e0:
                    bd:66:2f:c9:38:f3:ed:dc:ae:76:3a:ae:71:0e:0a:
                    81:7f:d6:b5:12:c9:fd:af:45:70:7e:3a:0a:b8:8f:
                    7f:7a:f2:44:91:e4:2e:9d:4d:da:1a:01:a5:9e:40:
                    23:43:16:29:65:0c:e8:91:5f:0c:e6:5a:aa:e6:63:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F3:9E:A5:EC:98:C3:C5:0F:54:04:6E:41:47:A1:B7:65:56:16:18
            X509v3 Authority Key Identifier:
                keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ca:bb:e6:87:b0:c4:e4:23:0f:e7:4b:8f:d2:9a:c4:ed:8d:
         40:c2:6e:df:2d:b8:4e:79:9c:ea:b6:3f:c1:a9:4b:4c:bd:6b:
         e5:ab:87:fe:22:a3:2c:b8:cc:a6:13:8e:7d:3f:2e:37:02:30:
         61:41:c6:28:bb:d2:d3:fb:85:f5:0e:93:49:98:48:d0:00:b4:
         dc:45:89:9f:c2:0c:05:4e:b1:7e:0a:3d:99:ba:61:c2:8f:52:
         eb:ae:dd:97:3f:8e:80:8b:23:2e:0b:08:31:1d:0d:9a:43:1c:
         56:2c:d3:6d:30:02:0f:9d:32:3f:69:51:4d:93:44:bf:fd:ab:
         5a:a5:8d:99:24:86:b7:3d:9e:f2:5b:ec:c4:49:21:b7:69:fc:
         2a:5f:92:78:7f:71:5b:f0:a5:45:81:a9:97:79:ab:94:43:05:
         ed:12:5d:2b:b0:28:ef:42:7b:73:e9:d3:0a:88:c1:19:67:27:
         35:93:85:b3:b1:fb:33:5b:86:c8:45:2b:f1:51:57:e5:55:10:
         87:13:fc:4d:0b:10:7e:fc:6e:88:87:e6:d5:31:d8:8e:61:b7:
         96:d1:83:40:88:3c:60:af:47:5b:31:45:df:6a:78:1d:a8:e9:
         cf:bf:1c:63:22:9b:fe:ba:41:fb:66:91:ff:5e:bf:5b:33:8d:
         c9:75:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:10 2026 by rpki-client