Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          5M8aPGVC0tSK5uzXYrQZTdC0Hhjp/zMJD+y8ApUGDO4=
Subject key identifier:   07:7C:CC:74:BA:D3:71:35:9C:F9:56:25:01:2E:73:D4:65:C3:8D:6B
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019D26284B5EB933EEDB11C4A1BA1DE85354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 18:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:07 +0000
Files and hashes:         1: Qs5aQVIRmNwQTTAz2KPYUQwI290.roa (hash: HTCONoxkAHOIEm4u3dHI3SAMwZlvU666BuYb+Y9SBcQ=)
                          2: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          3: oWZr4E334Nl5dhHXKUDjCqLCGyM.roa (hash: nZfWnD1u4woMdciLaCwLWuHO0I+/98sheC0fCywH+V8=)
                          4: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: RQiScsIKsIZMdXdBBq6oI69qplWETULTDNkcs1zp0qg=)
                          5: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:4b:5e:b9:33:ee:db:11:c4:a1:ba:1d:e8:53:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Mar 25 18:01:07 2026 GMT
            Not After : Mar 26 18:01:07 2026 GMT
        Subject: CN=077ccc74bad371359cf95625012e73d465c38d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:c6:df:f3:58:c0:3c:85:6a:9f:72:1a:c2:
                    21:b7:3c:d8:d4:5b:3e:87:0e:58:a0:35:a0:20:68:
                    09:65:1c:bb:b5:a6:82:eb:6d:ae:77:ac:8f:55:0d:
                    af:ef:1a:d2:fa:a4:84:dd:ed:d4:f5:de:5c:e0:32:
                    fa:50:6e:f3:25:a3:3a:0c:dc:ac:4b:2d:b7:5c:23:
                    4b:8c:70:7e:67:cc:69:d1:c8:f9:de:df:82:1d:81:
                    5a:df:1a:03:32:11:66:6a:24:57:be:d6:43:d9:dc:
                    47:b0:36:17:30:0c:e3:3a:3d:ba:7d:9e:a0:02:2e:
                    4c:0f:ee:8c:e4:78:64:1b:7f:ed:c0:69:fd:c7:68:
                    53:7a:43:30:4b:02:d3:9a:31:cb:95:cd:c2:50:0e:
                    9f:b4:58:c6:c2:19:35:e1:65:3c:55:11:a6:7d:7a:
                    82:1b:45:f2:76:a3:5e:80:ba:4c:1a:43:ec:ff:b2:
                    5a:3f:8e:5d:3e:7d:1a:63:ab:0c:98:a7:a9:ba:f9:
                    3f:a9:80:14:75:52:bc:f9:3c:e7:d5:b4:d3:3f:d3:
                    46:67:6c:2e:f3:51:7d:64:e4:65:76:d7:bf:cd:80:
                    a2:45:0a:b7:48:9e:9a:e5:0d:01:ff:bf:e3:9b:e9:
                    d5:56:a4:a5:d9:8d:df:b2:57:67:32:28:c2:14:63:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:CC:74:BA:D3:71:35:9C:F9:56:25:01:2E:73:D4:65:C3:8D:6B
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:3c:6b:72:6e:e2:7d:9e:d8:be:fa:1a:1f:c3:7f:e0:53:
         1b:a0:bd:8c:e4:1b:10:6e:ff:66:7c:e9:85:e3:0b:92:c3:23:
         0c:66:ec:99:74:6c:df:cf:d4:80:f0:35:19:e2:82:77:05:aa:
         6f:3a:0b:51:67:07:87:a7:6e:77:b9:8a:f9:c3:02:6f:1c:62:
         a9:4b:fc:b4:71:5f:57:3c:5a:fc:85:07:96:64:b8:72:32:62:
         1f:bc:ff:e2:78:d1:50:47:64:8d:56:48:97:e6:45:81:d1:89:
         3f:54:30:9a:87:3c:f8:33:6c:dd:9c:bb:02:31:19:b8:6c:fd:
         64:43:38:05:12:3c:27:cb:cd:a4:a8:86:92:46:1a:72:5a:e2:
         3f:4a:88:c0:ab:da:46:cb:72:45:84:0e:b1:f9:2e:85:af:9f:
         3c:97:f0:3d:81:0f:b7:67:ad:19:38:d0:ae:4c:7a:9a:c7:d8:
         d9:cd:6b:18:81:a1:f6:d3:66:bf:a7:cb:fd:c7:df:be:96:63:
         31:4f:8d:19:a6:5e:44:96:83:82:af:32:99:bc:4b:32:f7:f3:
         c8:92:55:29:5a:7f:3f:75:48:bb:61:08:ff:eb:3d:1a:53:47:
         cb:5c:c2:d6:ba:fa:f1:33:1e:c4:0d:ca:06:62:73:6c:d8:68:
         c0:61:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client