Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File:                     7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier:          09mxXY8Jqr5ahEZy+on+Ic3Y8wTk3nQybgoMEwtywtk=
Subject key identifier:   4E:26:81:3A:15:BC:3C:17:DF:D9:18:62:C7:20:98:20:11:73:0F:F2
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer:       /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial:       019D273AD3CB1D9612F3D937C7A454AD8889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number:          0CDA
Signing time:             Wed 25 Mar 2026 23:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:59 +0000
Files and hashes:         1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: LRI79SowMqoiE8gmpukO4/lr8tdMbIIDTsp9v66eYME=)
                          2: Q9-NRTuMMnqARHq49_Cuxnzrpl4.roa (hash: NRZTfCUYWGj35ekHkCYEsq0YVn/edvt5CYrvQlwekLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d3:cb:1d:96:12:f3:d9:37:c7:a4:54:ad:88:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
        Validity
            Not Before: Mar 25 23:00:59 2026 GMT
            Not After : Mar 26 23:00:59 2026 GMT
        Subject: CN=4e26813a15bc3c17dfd91862c720982011730ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:1f:91:06:95:52:14:16:ca:ed:38:a0:67:
                    a9:51:48:2b:ee:4d:ee:19:f5:fa:4f:07:42:ee:3b:
                    f3:a8:80:2d:6c:21:7a:13:ff:b0:5d:fc:95:c7:9a:
                    a1:73:65:7a:cb:96:e5:50:e1:6d:1c:f9:e0:f0:fd:
                    c9:54:4a:2f:b4:d0:df:a6:f7:8b:68:0c:3d:66:b7:
                    5c:3b:07:bb:80:13:07:0d:1a:84:5c:1a:91:90:83:
                    ae:a6:9b:85:e4:1a:65:eb:7e:b7:c3:a1:35:50:a9:
                    92:eb:c6:f2:ce:db:b7:81:ea:12:e5:b1:91:f5:c3:
                    c1:eb:04:1a:41:e7:53:65:bc:ff:8b:cd:71:ae:bd:
                    bf:bd:3c:1c:ba:c7:23:54:45:5a:f3:5a:96:c9:11:
                    eb:c4:7c:64:83:6d:bf:d3:86:78:ac:e8:c4:9f:04:
                    43:ed:c4:ba:f1:cd:13:d9:eb:5b:ae:19:97:8c:f3:
                    d6:49:95:d5:6a:ca:65:d1:cf:7c:9e:72:15:8c:e9:
                    fa:9c:01:01:73:10:3b:f0:ca:7b:0f:97:ea:b0:49:
                    17:93:33:da:25:42:a1:0a:c2:29:b7:6c:68:fc:fa:
                    62:51:a5:8d:8f:ac:ce:74:3e:44:43:1c:3a:9c:0e:
                    f9:96:15:df:c8:b1:60:6e:69:16:43:d9:0c:5e:b2:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:26:81:3A:15:BC:3C:17:DF:D9:18:62:C7:20:98:20:11:73:0F:F2
            X509v3 Authority Key Identifier:
                keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:d7:63:93:cc:09:71:b0:fd:ab:e1:95:6c:44:fa:22:70:
         6b:8f:2d:e2:4c:c8:da:64:99:02:c0:da:c2:1d:17:b7:6c:48:
         4b:0f:92:03:b5:0d:bb:b5:63:71:44:06:18:75:46:da:11:c1:
         42:f7:e1:6a:e2:87:68:3e:80:c8:14:05:a0:57:e0:b2:06:03:
         3d:5d:2a:f6:66:d5:1d:b9:ba:83:2d:a7:0e:09:85:d0:2b:41:
         72:c1:b4:da:5d:35:bc:72:1e:2a:d3:1c:33:74:54:29:50:d4:
         98:ce:7a:d3:5f:ea:c0:3d:d4:b8:22:08:1e:34:c3:28:e3:da:
         bb:61:8e:94:27:e8:60:3f:ad:f7:ee:44:c5:b5:cc:05:b1:66:
         a4:c0:2b:6b:e5:a2:3f:8b:66:5e:fe:42:87:05:d5:bf:c4:8f:
         f3:83:fc:1c:3f:28:bd:ef:c4:67:fb:54:0e:33:68:7b:4b:f3:
         7a:ee:85:76:b1:94:2e:96:94:55:16:59:e1:32:55:d4:60:ad:
         31:43:3d:28:54:48:a0:20:cf:9c:39:14:eb:f2:10:1c:e4:69:
         d5:8e:3c:f8:b3:70:2e:da:fa:1e:9e:5f:a7:fa:b8:75:7c:a1:
         a1:94:3d:bd:e8:1d:49:d7:ae:66:52:bd:1d:1b:ac:08:b3:48:
         80:64:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:13 2026 by rpki-client