Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File:                     7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier:          fAQaYrolfAfi1PFcOeZedvpxY693d2FeMhDQ+kRGXTw=
Subject key identifier:   8E:59:DD:5B:EE:5E:00:1B:82:83:25:78:EF:73:6B:61:EB:5A:F3:93
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       019D2704896352617C4F80622456E5C9A1DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number:          17E0
Signing time:             Wed 25 Mar 2026 22:01:41 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:41 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:41 +0000
Files and hashes:         1: 5lUGS6oPTLGoWnxgew7D5MIxWOg.roa (hash: qhuiBd586lNm93JRE/rEDVYPTPi0gDSSOqw/SZXIEjw=)
                          2: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: 2L4vUOIScJCru2BiJzlIzclx933tQZOE5Ze/qtKJPXY=)
                          3: cnwLlloknS4NzO_cT5MY_Xg6hzg.roa (hash: jwOUCHm51TjA2Yun8ez24YjXUJl7V7kT6HkgsG1J4L0=)
                          4: inAZqVvbiAHgmsVOQao9R4JbZso.roa (hash: zU0uu0t4HLwKrI9w1yyx4XrHakdpeUbRFtc2CbGyHCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:89:63:52:61:7c:4f:80:62:24:56:e5:c9:a1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: Mar 25 22:01:41 2026 GMT
            Not After : Mar 26 22:01:41 2026 GMT
        Subject: CN=8e59dd5bee5e001b82832578ef736b61eb5af393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:5a:2b:7c:8d:08:c6:58:52:a3:3e:33:be:
                    fa:ee:5b:0c:9d:37:ec:f4:7f:99:78:ba:61:9f:9a:
                    9d:d6:5d:19:57:02:57:48:bd:6f:2a:a4:f5:76:4f:
                    f2:c9:96:1b:a8:dd:d4:7c:f3:40:29:96:28:92:75:
                    78:30:43:a7:c7:aa:47:6d:9c:3c:fc:e3:d4:03:af:
                    5d:e9:87:1a:e1:6c:7a:76:d7:45:55:36:91:3e:a9:
                    63:6a:52:41:52:d2:00:d6:54:ca:82:db:c7:d6:60:
                    24:50:75:b2:78:8e:93:87:27:5a:a1:40:a0:12:78:
                    8e:e0:0a:a1:23:e4:26:e4:54:c8:f4:a7:4e:e5:d6:
                    14:5d:4f:db:0e:7b:3b:64:b1:56:e6:46:ab:2e:9f:
                    88:01:9d:2c:fb:23:8b:7e:e7:29:cf:35:c1:b0:64:
                    dc:e8:ed:7f:ff:95:70:78:5c:39:be:73:7b:de:be:
                    6e:3c:fb:21:cf:e9:26:02:1b:76:4e:43:44:1f:a2:
                    f1:36:6a:37:c5:be:5b:86:a1:cf:3b:cc:21:19:83:
                    9a:a0:4c:1b:2e:57:b7:d9:65:d4:72:30:40:0e:cd:
                    cf:70:c0:ff:7c:94:f0:8a:d3:1e:e0:ec:18:59:17:
                    c5:02:63:74:f8:41:ec:e4:8a:bf:d9:9e:02:a0:d1:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:DD:5B:EE:5E:00:1B:82:83:25:78:EF:73:6B:61:EB:5A:F3:93
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:32:70:3a:37:5a:35:83:a5:bb:70:30:b9:da:5c:e0:65:76:
         90:81:85:05:72:7c:14:f0:8d:11:56:d1:d8:cb:92:dd:fa:8a:
         24:b5:d4:13:5a:cb:2c:15:e0:8b:df:7b:c1:1f:5d:c6:5d:c0:
         2f:38:6a:e1:7e:a6:8d:c7:15:46:0e:f9:fa:96:2a:ac:66:90:
         c5:67:5d:98:3a:68:3f:c3:4a:b2:4e:8c:c9:e8:de:fc:db:1e:
         b7:7a:72:94:ed:2c:d6:06:7c:88:c2:31:9d:70:58:d3:4e:46:
         78:c7:39:26:7e:fe:1d:64:dd:3e:57:f4:16:d1:54:59:2d:ba:
         c0:5d:9c:60:4f:36:f3:8b:d8:99:3d:35:e1:c4:29:58:08:8b:
         eb:0c:cc:d4:df:f9:9b:8e:f4:5d:ec:0f:59:86:d3:c7:a5:51:
         26:7c:6e:67:79:68:a3:78:b7:54:7e:43:e0:5d:bf:1b:92:65:
         2d:71:90:1a:cd:dd:06:98:3e:d4:de:d2:c3:13:c4:72:a3:25:
         db:50:c7:1f:47:fb:19:ba:c0:12:99:b4:db:5f:e4:bc:73:0e:
         37:72:af:05:e3:cc:33:18:57:b4:68:f9:80:a3:16:ef:a1:47:
         ab:4e:b5:7f:b5:db:95:e1:51:de:47:fa:10:bd:e3:bc:51:ed:
         d2:37:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:13 2026 by rpki-client