Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          HEQDeuTuSyGSQ7AABwMbY14Lz0ZdyZPJ2EFKCC07rD0=
Subject key identifier:   F7:A9:0E:62:BF:2D:FB:A0:B1:98:7F:D9:BD:FE:C0:DC:3B:D4:D9:D4
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       019D258324854E6ECA93819B3000BF607FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 15:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:44 +0000
Files and hashes:         1: axLujUagH_dCn6TXOtWPBDE3Szo.roa (hash: jt/V9NWMIChAooozTeAvM5YQ3gDwItihIdrwd9f6W0g=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: WbXnfIGfofKguI5L5xMOwdEOOrgiq1xvjXbGIh604eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:24:85:4e:6e:ca:93:81:9b:30:00:bf:60:7f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Mar 25 15:00:44 2026 GMT
            Not After : Mar 26 15:00:44 2026 GMT
        Subject: CN=f7a90e62bf2dfba0b1987fd9bdfec0dc3bd4d9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:1e:d5:25:81:fb:42:34:86:c1:8b:6a:00:
                    32:4d:2b:c8:51:e1:0f:39:64:4c:ad:7e:d6:7c:78:
                    57:40:06:45:31:b7:77:b2:2f:59:db:86:99:a6:f8:
                    f5:d9:48:38:2d:ed:f9:cb:d2:04:c4:4c:aa:51:51:
                    bd:97:a6:1c:0c:b3:ab:45:8b:c2:8c:0e:dc:25:1e:
                    29:89:da:77:49:17:9b:eb:25:b2:ca:56:2c:8b:5b:
                    77:9e:14:e8:3d:71:06:b9:9c:d5:9f:99:ae:07:c3:
                    40:82:08:37:57:b3:73:95:1c:a1:4f:f8:a5:6e:d9:
                    f5:72:62:f4:e5:9f:b5:da:a7:20:5a:42:18:73:c1:
                    f8:45:15:d8:b9:6a:a1:84:9d:89:3f:0c:d4:f2:67:
                    96:18:02:1c:6d:e2:ec:db:4b:fd:68:84:1e:ca:f0:
                    0e:6c:fa:75:5b:6a:72:a6:1e:93:05:55:db:06:ce:
                    15:1a:93:0a:ae:d8:c9:a5:85:8b:4f:d8:33:2b:bc:
                    e8:24:d6:9a:83:e8:99:ed:e1:f9:bf:2f:d0:37:11:
                    7b:c5:13:54:8a:a0:cc:bc:17:fa:75:b5:55:8f:a7:
                    63:2d:ad:f8:c7:f3:a9:20:ae:32:36:c6:7d:27:62:
                    0c:ec:45:76:70:b1:c9:c3:38:18:e4:12:90:84:86:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:0E:62:BF:2D:FB:A0:B1:98:7F:D9:BD:FE:C0:DC:3B:D4:D9:D4
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:28:75:1f:6b:33:ef:0f:4f:a6:32:57:2e:76:ba:7e:75:d4:
         df:00:d2:9f:16:e7:ce:cb:07:71:35:63:fb:9d:0b:2f:f1:73:
         d1:1d:b2:cc:d3:4e:c2:96:b2:bc:a8:58:81:56:3c:40:cd:0f:
         ff:7a:b6:c0:1f:d8:8c:1c:61:62:d0:0a:54:f9:8b:e6:db:7b:
         cd:4f:73:8b:fc:6e:59:54:e9:41:80:90:fc:45:2f:89:f4:2c:
         7a:b2:38:92:68:3a:58:7f:77:2d:96:d1:96:6b:08:1b:7e:3a:
         fa:6f:85:91:b5:4d:c8:ca:f4:76:c1:68:10:42:85:0e:9c:2f:
         27:99:4d:2d:67:be:2f:6d:85:ae:c3:dc:55:8a:a8:13:4f:5c:
         4f:8b:46:5f:45:fe:93:61:94:79:3f:c9:4c:ad:a9:96:10:84:
         37:fd:88:f7:04:ad:7b:fe:2d:f6:37:e2:0a:16:00:ee:51:50:
         c9:ea:73:67:27:c2:eb:7c:40:bd:79:b6:4d:33:e7:33:4f:ac:
         a4:a4:9e:fa:1d:03:4e:19:91:68:44:ba:58:bc:9d:78:4d:95:
         8c:28:b8:6d:9d:d0:3e:21:5e:c2:3d:f1:55:3a:6b:74:48:b9:
         1a:97:52:ab:a7:01:19:e3:dd:18:3b:87:72:cb:a3:a0:9a:00:
         d1:a5:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:32 2026 by rpki-client