Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          Kw5BOLcp/s7zFGMFzcRQ8n38jb6jzQHQXXNRchY4SXo=
Subject key identifier:   7E:CF:07:5F:D1:85:25:08:C5:6D:05:20:AC:10:74:6F:A4:50:E5:3E
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019D2884BD914441855F8C25EE94BEE4B89E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0E75
Signing time:             Thu 26 Mar 2026 05:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:21 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: tl6VWnli2wbGygBxLbk/L2eAbJkth/Pe18a/bsMBT6M=)
                          2: qyHL6II4esJ4dc5VWl8lMms3EA0.roa (hash: XUNHvMm3tr618bDepCNFHXOwOdAqjvCOtPPWHwwDwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:bd:91:44:41:85:5f:8c:25:ee:94:be:e4:b8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Mar 26 05:01:21 2026 GMT
            Not After : Mar 27 05:01:21 2026 GMT
        Subject: CN=7ecf075fd1852508c56d0520ac10746fa450e53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:fb:58:7e:d3:20:cc:00:5a:3f:7d:ae:f4:
                    a3:2d:94:32:fa:3e:3e:3e:21:f6:ed:a7:47:3e:83:
                    68:c2:f0:34:c9:b9:3a:97:c0:aa:f5:69:8b:5a:aa:
                    af:92:ab:fa:ed:41:92:66:1d:73:34:83:e1:22:f3:
                    b7:46:5e:f7:48:93:69:78:8c:d6:4b:03:48:07:ec:
                    91:a6:29:5c:d0:f6:ab:30:a7:95:91:1c:cb:4b:fc:
                    83:fa:63:39:ef:d4:c6:c5:9f:93:91:31:44:0a:32:
                    ec:62:3e:61:d6:04:14:b1:32:bf:e5:55:9f:04:03:
                    92:d3:df:f5:e4:26:13:f8:f8:99:1e:89:b4:c0:67:
                    71:94:e0:27:54:2a:4f:0a:ee:94:ec:07:fe:c4:1b:
                    50:16:f3:b8:d8:22:d5:9e:11:83:bd:b8:94:d8:f5:
                    8b:b5:a8:56:25:6a:4a:1b:fb:d9:5c:d2:d7:88:29:
                    6c:15:7b:80:26:e4:94:fb:d0:91:c4:9b:9c:4d:90:
                    83:3a:dc:48:d0:2b:71:f8:7c:82:4e:94:82:fd:c9:
                    8c:a3:84:33:af:8d:b7:3c:0b:48:bf:38:38:f1:8d:
                    2b:fa:63:e1:ff:b1:48:ce:37:e1:d2:1e:95:59:52:
                    d3:b0:04:dd:9c:0b:36:07:c6:dc:e5:86:a7:48:09:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:07:5F:D1:85:25:08:C5:6D:05:20:AC:10:74:6F:A4:50:E5:3E
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:85:9f:f2:d3:81:dc:86:fe:3f:05:4f:05:6f:30:13:28:51:
         4d:ee:bb:21:b4:ea:11:dd:6a:52:d6:48:ba:ef:6a:45:ea:ca:
         dc:f6:50:f5:ad:a2:8b:a0:4e:3d:56:48:b8:c4:0b:12:de:54:
         e1:cf:31:3a:e9:58:49:1e:89:c7:5b:92:cb:df:9d:17:27:09:
         5c:e0:4c:c0:a7:a2:47:c5:70:3e:00:0f:08:da:7c:54:6e:aa:
         17:2f:23:4e:bf:26:c6:99:1e:f1:cb:eb:e8:54:4e:34:b5:63:
         e6:b8:1f:65:32:f8:9b:89:fa:4a:49:42:cd:f4:b8:1a:05:a9:
         83:6d:53:46:6b:37:47:8a:84:a9:f2:a5:ee:93:1c:43:4f:54:
         91:37:3c:dd:9b:fb:70:0e:79:7a:9a:42:ee:a5:b2:76:b6:04:
         43:59:f7:e4:d9:88:3f:1b:95:05:3f:a5:c0:5d:d9:8c:09:65:
         c4:fd:9c:3b:3d:87:54:a3:72:b5:99:b5:7f:c7:1e:07:ad:73:
         09:83:fa:6e:c4:f3:4d:85:4d:84:ec:3c:c9:9a:cd:d1:1b:a1:
         39:59:4b:21:b4:af:ef:3a:42:87:21:c8:a9:66:66:45:64:58:
         8b:59:a6:2e:e8:bd:18:b3:4e:d6:ae:ff:02:c6:78:4b:27:09:
         13:56:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:39 2026 by rpki-client