Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          RkEkLp2KjL5aRyDU0jBTeA1q6ErRQDRRCR9HF4tRBs0=
Subject key identifier:   80:74:4A:46:1D:C9:06:B8:33:2E:FF:F5:8D:9D:A0:1E:5A:CB:55:FD
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       019D269637D62D7FF77D89470C78BA60DF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0F17
Signing time:             Wed 25 Mar 2026 20:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:12 +0000
Files and hashes:         1: SKNgL9EtUSHtY6XWC1t8-mkwb8s.roa (hash: qbcYTlDoQlcLT8kuTCFoE2vVHnFviJrGXzlocQtB00Q=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: UMNImHcQXJj3tx5Vamvh8vhuGWSLhCRDOZcxgGXLUKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:37:d6:2d:7f:f7:7d:89:47:0c:78:ba:60:df:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Mar 25 20:01:12 2026 GMT
            Not After : Mar 26 20:01:12 2026 GMT
        Subject: CN=80744a461dc906b8332efff58d9da01e5acb55fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:92:49:ff:28:e0:b9:16:10:14:b3:9a:69:
                    97:48:27:31:2c:21:73:e7:9b:60:12:b6:e5:3c:40:
                    5f:2c:21:4e:a0:38:40:3d:a8:7a:08:dd:ed:32:64:
                    03:59:ad:08:1d:55:4f:5a:55:7b:d8:b7:9d:30:ef:
                    7f:20:6a:0f:2c:c4:73:06:44:bc:8b:ea:b6:f5:ac:
                    62:6c:89:67:d5:bd:3d:bb:f2:bd:31:c2:b7:6e:46:
                    95:e4:11:79:8c:8e:21:02:ba:af:c2:8e:bd:ed:52:
                    65:03:34:70:5f:c6:a9:0f:55:6f:09:2a:c5:de:c5:
                    0c:66:85:f5:42:32:ca:27:85:38:c2:7f:56:aa:ae:
                    fd:1c:80:2d:38:bb:47:ad:e0:6d:58:14:e8:26:ac:
                    46:1b:f0:e2:8d:60:a1:6f:83:8c:9b:ba:91:64:2c:
                    b8:20:83:31:03:ba:65:b8:e5:66:1a:f5:1e:df:d0:
                    83:77:6d:68:c7:80:5c:7e:19:b1:55:7e:a5:b1:d9:
                    35:77:39:0c:b2:93:f1:ab:e5:09:2e:be:7c:5e:08:
                    9e:07:78:c5:75:02:3a:6e:c5:f3:d1:8a:28:e1:fe:
                    b7:0d:7a:61:e7:d0:ca:6d:8c:8a:59:d1:6d:a5:8f:
                    ff:72:44:d6:37:8c:26:2f:9e:b6:90:7f:ea:18:47:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:4A:46:1D:C9:06:B8:33:2E:FF:F5:8D:9D:A0:1E:5A:CB:55:FD
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:35:d9:5b:02:f6:6f:ed:21:ed:5e:ab:eb:95:38:be:aa:
         c8:f9:40:5d:d8:e1:9e:2f:64:1c:1c:17:a7:6d:8a:45:00:19:
         0c:00:ea:1f:3b:53:a7:87:eb:b7:30:00:3b:9b:3c:34:9b:83:
         ea:ed:8a:0a:45:00:77:f4:1a:d1:81:4b:4a:ac:ae:f6:34:36:
         9d:60:74:ec:79:80:58:3e:a5:e0:af:47:f6:58:1f:88:53:8b:
         68:82:1f:bb:73:b7:13:66:38:1b:03:3c:c4:2c:1f:35:c9:dd:
         c7:82:a4:c1:7b:68:dd:19:15:96:3f:ee:40:6e:0b:c5:8a:00:
         81:bf:0d:f1:a9:e9:a8:e3:78:76:e8:5f:4a:2b:8e:eb:3a:b9:
         44:4d:22:4d:7e:84:bf:9b:ea:e5:c1:50:0d:d1:42:c7:53:9d:
         ae:81:5d:54:17:cc:0f:b7:69:a5:20:54:ee:5a:70:38:2f:77:
         fa:db:4f:89:c3:87:7c:5b:e5:28:15:2f:ed:f2:37:fb:bd:88:
         50:6b:ea:ae:cd:e3:c2:f2:38:3e:7b:9c:3d:4a:85:99:e8:c6:
         8f:20:5a:db:f9:e9:11:bd:76:0c:b1:86:f8:55:3e:de:b1:a0:
         f3:9b:c1:00:00:45:4f:c0:50:67:df:86:21:8d:98:48:dc:ec:
         d1:27:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:12 2026 by rpki-client