Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File:                     mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier:          GAjjycAnhzEk8EddFdOB3MbpchO7LSy+fY0LcHBkQ+M=
Subject key identifier:   64:55:E0:78:9A:30:AA:73:68:5D:7D:F8:87:D6:0C:AA:89:12:1A:4F
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer:       /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial:       019D2CCF25487AC8A91B3FA6B3A0F03165ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number:          07B7
Signing time:             Fri 27 Mar 2026 01:01:06 +0000
Manifest this update:     Fri 27 Mar 2026 01:01:06 +0000
Manifest next update:     Sat 28 Mar 2026 01:01:06 +0000
Files and hashes:         1: FrWPsdIanKr1Sodt-qzdiaAKot0.roa (hash: MgcORKrAyQmVC5QqwfE0RufXlOwwg9f/50Q+8d4fy2E=)
                          2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: fSXQDmuca0KE5LO6nYOBIDitNDxTQDa8l84pdjT66CU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:cf:25:48:7a:c8:a9:1b:3f:a6:b3:a0:f0:31:65:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
        Validity
            Not Before: Mar 27 01:01:06 2026 GMT
            Not After : Mar 28 01:01:06 2026 GMT
        Subject: CN=6455e0789a30aa73685d7df887d60caa89121a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:cc:b7:23:fb:dc:66:1f:57:33:8e:88:ca:
                    ff:55:58:e8:5b:1c:f2:9f:b0:38:5f:16:7d:66:06:
                    c6:6c:d0:5f:9c:cd:42:21:20:d8:8b:0a:b6:85:7f:
                    e3:58:55:a9:56:fd:f1:bc:ff:11:c4:b0:52:12:a7:
                    02:76:0d:f0:08:3c:38:93:29:c0:6d:3e:ba:d4:59:
                    62:7f:a9:fb:f1:b1:e6:fc:65:87:f6:56:2a:d4:a7:
                    3d:6f:2b:fa:06:c2:7b:78:c6:99:96:7e:de:6b:fe:
                    8c:ff:78:b5:08:cf:0d:fc:77:99:8e:74:41:3e:6a:
                    15:88:d0:ca:d8:6b:57:5f:46:30:66:b3:2f:be:02:
                    22:0b:8a:31:ac:65:2a:20:ca:67:38:1f:8c:04:f7:
                    e3:c0:1f:90:c9:bd:78:d8:2c:c1:07:4e:b3:7b:e9:
                    89:88:c0:e8:0a:65:6d:32:22:24:14:c5:dc:2d:1c:
                    1f:8a:77:8b:76:ec:c5:a2:b5:c1:e3:f4:79:1c:e7:
                    02:0a:c4:a9:d1:7c:a4:1e:98:0b:b4:0a:ab:a9:f5:
                    7e:79:9f:98:ed:39:33:53:56:d3:2d:28:1b:80:79:
                    df:88:78:9f:ce:ec:3a:f7:d1:ac:bb:ef:8d:ab:35:
                    65:35:41:2b:65:19:3d:3e:de:e9:9e:9b:75:59:32:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:55:E0:78:9A:30:AA:73:68:5D:7D:F8:87:D6:0C:AA:89:12:1A:4F
            X509v3 Authority Key Identifier:
                keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:79:61:fd:f0:81:80:05:6c:eb:91:dc:5e:de:cd:f2:82:
         f8:70:42:9e:cb:83:6a:3b:7b:d5:20:bf:13:4d:ce:dc:af:c8:
         ab:05:4a:56:7c:68:4a:08:ba:1f:f5:b9:44:8a:6b:0b:cd:44:
         00:75:69:a2:0a:35:f9:e5:15:f3:f8:a4:8e:01:a1:7b:35:db:
         cf:b4:1b:45:29:b0:7b:a9:b6:fe:1c:ac:fa:0d:7c:0f:0a:31:
         f5:5f:e5:fb:5c:f6:e4:46:e2:a4:2d:64:36:74:b5:82:cc:9c:
         8a:02:99:df:da:6c:d4:80:8e:09:44:b1:3f:59:1d:df:e0:02:
         71:1d:4b:0e:c3:23:f5:d1:05:a6:77:39:b2:c0:10:32:6e:f1:
         39:a4:99:47:12:61:f1:ef:b2:92:87:68:ee:40:ba:72:b4:d2:
         f0:7a:e8:c6:18:be:91:a8:25:37:7d:07:d2:a0:95:cb:33:0a:
         e6:a2:57:26:9e:37:5d:18:df:e8:2d:6d:dc:bb:48:00:c8:5d:
         2f:b3:b4:f1:e8:b8:8d:ae:41:26:33:c1:c7:d7:9e:fb:79:65:
         4c:bf:0c:32:11:7a:8b:b7:9e:95:e6:45:53:a5:de:44:66:1d:
         be:5a:90:39:a0:98:2c:24:40:61:c9:89:e7:5c:fd:93:31:c6:
         1e:c1:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:02 2026 by rpki-client