Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          c1zHNoKVi4f8mqO/U7w2jkvUeGNBaDnAgLCiEtc+dnw=
Subject key identifier:   FC:93:9C:5F:68:67:F4:4B:AE:83:E6:5B:B7:B3:3C:77:48:60:CE:3D
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       019D29973E84E1B0477B4D286ABB842C979C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          121F
Signing time:             Thu 26 Mar 2026 10:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:10 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: 9LwgWYLJbLjYUOK+g2sDI8u9bn/40ifo/zXDSqbGqNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:3e:84:e1:b0:47:7b:4d:28:6a:bb:84:2c:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Mar 26 10:01:10 2026 GMT
            Not After : Mar 27 10:01:10 2026 GMT
        Subject: CN=fc939c5f6867f44bae83e65bb7b33c774860ce3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:fb:0f:88:39:6c:11:72:5e:40:fc:83:0f:
                    d5:da:8b:41:e0:f1:b7:30:6d:9d:0a:ef:67:ed:b8:
                    0a:6c:79:6a:69:62:dc:64:23:e2:06:a1:eb:df:19:
                    15:7b:65:5c:78:e1:6c:0e:3d:3c:c4:37:e8:17:88:
                    9f:a4:b7:1d:78:0f:03:12:ae:10:8f:21:4f:2f:2b:
                    65:33:e6:06:c9:23:15:80:cc:d0:b9:4c:9b:52:88:
                    4d:75:36:5d:4b:5a:87:29:0a:04:3d:0b:23:d3:33:
                    42:b4:ca:72:c6:3b:62:dc:06:5a:72:63:cf:52:b3:
                    92:98:12:55:39:d4:88:bd:94:ff:66:f8:a5:72:a2:
                    cb:69:4f:58:39:56:88:5c:43:c5:43:69:a4:21:19:
                    50:f2:e4:f2:e0:11:b7:e4:e1:ef:31:eb:a9:2a:94:
                    9d:e4:12:45:45:34:c5:25:30:62:59:69:a9:1f:ab:
                    bf:d5:59:27:40:c7:ab:34:73:e7:ba:f6:03:10:c2:
                    82:53:02:73:3f:00:54:37:8c:3b:29:fd:10:da:29:
                    5c:8b:1c:d0:82:d9:92:40:b2:32:1e:79:7f:01:da:
                    31:b2:54:ef:5c:63:e6:07:9f:8d:db:04:ca:88:8f:
                    c8:fa:d0:56:3a:2c:dc:fa:9d:48:2e:5f:f1:d0:aa:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:9C:5F:68:67:F4:4B:AE:83:E6:5B:B7:B3:3C:77:48:60:CE:3D
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:be:37:25:58:74:2b:b0:a6:9e:55:44:be:1d:fe:7b:2a:be:
         d8:49:53:a1:de:01:1f:9e:80:1c:23:44:be:43:09:52:93:8d:
         08:40:1e:fc:fd:e0:9f:0a:c1:8c:72:47:ad:39:34:e3:16:62:
         52:2f:6b:48:63:9e:2c:2a:9a:15:7b:b7:93:99:fc:17:92:ac:
         4e:d4:f5:16:e4:ac:13:85:83:02:c5:dd:f8:0a:8c:57:41:d2:
         f5:f0:a8:2c:9e:ba:14:19:0d:f0:fb:bb:86:dc:56:f0:79:43:
         52:ef:b4:22:1a:a4:6b:b7:69:2f:8e:a0:a1:94:d0:31:97:37:
         46:b6:47:04:21:e0:bd:86:95:75:a6:d7:c5:91:04:e9:ca:04:
         4a:08:4f:bc:fd:b1:b0:dc:b9:cf:1d:d5:15:d4:08:fe:46:23:
         98:6c:05:eb:21:80:f7:76:a9:8f:98:7f:11:ec:8c:33:1b:40:
         32:28:a2:2a:d0:dc:c7:84:f7:74:70:3b:c1:d6:8a:67:c8:14:
         86:fc:39:61:32:aa:92:98:4c:6f:11:bd:b2:cd:51:c2:7a:54:
         45:48:cd:c5:ee:da:6b:cf:c0:a6:15:f2:f7:57:14:7c:4f:ae:
         43:96:04:63:f4:b0:42:80:0a:0f:f9:ae:49:93:01:46:1e:bf:
         94:9e:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:46 2026 by rpki-client