Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          XVT3nnYUeyNZkTBeAP/IVx8lfA758xJaIxgkib9zaQU=
Subject key identifier:   5D:48:F4:1B:41:2D:C4:09:04:6C:20:9B:F4:FA:E5:C3:62:15:6F:A5
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       019D27720E4F74970A6AC2A33D794FE116D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          0757
Signing time:             Thu 26 Mar 2026 00:01:19 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:19 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:19 +0000
Files and hashes:         1: E0bPvqxVf13qVW0K3FOh43rFeAA.roa (hash: L83gXrZ7ml1x6pbEKqasf9zLxkSub+uRzDvUjH/MeVU=)
                          2: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: H6z4l4sUYMUZGUouhplnXLSFKdgmnahS6oOpIjNrkTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:0e:4f:74:97:0a:6a:c2:a3:3d:79:4f:e1:16:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Mar 26 00:01:19 2026 GMT
            Not After : Mar 27 00:01:19 2026 GMT
        Subject: CN=5d48f41b412dc409046c209bf4fae5c362156fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:a3:fc:22:d1:78:9b:3c:a2:54:93:db:c8:
                    34:b5:23:47:ee:eb:8e:04:77:cd:a5:07:12:23:4e:
                    37:ce:1a:d0:bb:ef:f2:6e:13:90:6d:9a:08:08:fc:
                    29:0f:e9:05:8f:3f:35:7f:63:ad:d5:0d:d7:c7:6b:
                    b5:80:88:7a:4d:14:95:d3:cd:67:36:ba:03:e8:73:
                    db:23:9a:f9:58:d2:1f:f8:7a:17:c3:35:61:e5:81:
                    66:38:28:e6:bb:d6:5d:13:05:ed:56:f3:ac:b0:3a:
                    24:30:36:45:e5:dc:a2:9d:88:2a:87:96:df:6b:ce:
                    72:51:40:2b:75:fa:de:8c:b1:5c:74:b7:17:e0:83:
                    6f:68:61:68:51:fb:38:ff:a0:85:b8:a3:d5:4f:d7:
                    8d:af:bb:c0:81:e5:b2:01:93:89:18:5c:ed:39:82:
                    2b:a0:60:62:e7:88:d2:16:9f:36:34:ce:d7:3f:9e:
                    f1:1a:29:3d:b1:3b:79:c0:8e:4c:88:28:17:7e:13:
                    67:c6:4c:e7:60:11:c7:b3:29:4d:58:d9:e0:db:84:
                    5f:99:09:ca:ef:54:9f:81:b3:67:28:b7:5c:01:a7:
                    51:c5:b0:78:af:94:6b:6e:33:29:12:0a:54:25:82:
                    b1:f1:bd:33:20:c1:29:f8:de:ea:2f:02:f9:92:f1:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:F4:1B:41:2D:C4:09:04:6C:20:9B:F4:FA:E5:C3:62:15:6F:A5
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:e1:6c:72:60:cf:24:06:8e:6c:11:d0:56:2f:40:97:af:
         3e:57:aa:27:d6:29:37:c8:37:53:42:8a:fd:b4:a5:64:2b:47:
         59:1d:ce:39:69:10:19:d8:e1:3f:b0:65:ee:1c:84:91:9f:96:
         fd:44:fe:29:1b:23:d9:f3:c4:ba:5b:60:3b:5d:49:3c:2a:cf:
         ac:3f:00:2a:fc:4b:ed:69:d1:3a:50:d6:62:35:90:5c:35:72:
         3f:52:82:92:72:a8:44:1a:87:4c:1c:2a:1e:50:a2:a6:03:6d:
         31:0a:bc:0e:07:45:4d:e5:ef:40:65:7e:18:44:af:9e:23:36:
         80:27:27:ec:1d:fb:99:2a:59:e9:53:a3:60:09:eb:7f:33:3e:
         00:6a:63:58:0a:85:06:4d:3e:25:d2:17:bd:6e:de:d0:f7:48:
         0f:7b:d8:48:c3:bf:e5:a7:b4:57:27:ab:8d:53:50:d3:7b:de:
         f9:1c:0c:f0:98:18:53:fb:a3:b6:a9:de:a1:3b:00:a8:c2:6b:
         9e:c6:e6:9d:2b:60:f0:36:d8:19:0e:64:aa:f9:81:25:01:b1:
         b9:76:94:20:bc:06:bb:f6:dd:01:ff:cd:04:00:98:90:59:84:
         40:7f:74:fb:8d:86:b1:e6:f5:db:ed:5f:43:eb:ef:b7:ea:57:
         0f:07:42:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:26 2026 by rpki-client