Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          2NqMUe7wB79s9arcxvs/oX88B0QdaudxrVRR7qmqWYA=
Subject key identifier:   64:7F:4D:74:8D:F3:7D:24:E3:FE:3E:CD:85:14:E4:CF:85:92:75:FE
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       019D273A99E4F761E4E03900F2DAD83C7D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          05C7
Signing time:             Wed 25 Mar 2026 23:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:44 +0000
Files and hashes:         1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
                          2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: p9d85yKa0NaN8yX3eyIjsJaacdG+v8YSigrQHf9H4s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:99:e4:f7:61:e4:e0:39:00:f2:da:d8:3c:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Mar 25 23:00:44 2026 GMT
            Not After : Mar 26 23:00:44 2026 GMT
        Subject: CN=647f4d748df37d24e3fe3ecd8514e4cf859275fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:ba:4b:69:34:ac:c9:30:a2:bb:cd:09:91:
                    77:c3:69:a9:3c:38:96:8e:16:f8:76:75:43:d6:a4:
                    89:59:e8:65:17:e5:4a:6e:50:69:9c:73:6c:45:c4:
                    0f:98:c6:1b:1e:eb:35:d1:b8:eb:6f:d7:f9:71:81:
                    fe:f5:cd:a9:20:ee:67:7e:89:bc:a7:b3:f0:5b:2f:
                    2b:a9:32:17:92:3a:7e:da:02:2e:1c:fa:35:bc:69:
                    c7:bb:a8:1c:d7:a5:83:b5:48:3e:92:16:38:60:13:
                    fe:ea:eb:2e:a6:9e:6d:80:f4:59:0e:99:df:34:44:
                    bb:30:27:f5:0e:21:d4:3f:61:64:cc:b1:e5:9a:4f:
                    55:53:f5:fa:ca:9d:ac:e5:b2:46:c9:23:56:44:22:
                    39:ba:ce:5c:08:96:b3:fc:fe:29:7a:c7:c6:3b:43:
                    aa:f9:fc:d0:a5:e8:a5:2a:b5:c8:96:f8:ef:56:1b:
                    71:6a:c2:b8:dd:7b:59:2b:49:29:da:12:b9:3d:b3:
                    ed:82:1c:a0:11:03:c3:fc:97:f9:83:52:bd:25:f3:
                    fa:b1:2c:c6:75:bf:44:58:9a:c6:ad:57:a3:da:e7:
                    ee:c3:c5:82:67:e7:45:f3:75:84:2a:7d:3b:ae:a0:
                    16:96:f0:2b:28:0a:c3:9b:96:a0:c3:1d:e8:95:e5:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:4D:74:8D:F3:7D:24:E3:FE:3E:CD:85:14:E4:CF:85:92:75:FE
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:07:e8:13:69:93:52:6b:fb:fd:a1:d0:ad:93:ac:7a:b7:
         d1:af:cd:c0:c8:25:e1:d1:bf:a9:0c:9b:a5:bc:9e:7b:0d:f2:
         78:8e:e9:86:01:f2:db:38:f9:53:fc:f3:bb:42:5f:30:ae:af:
         cc:85:78:52:26:51:c2:e4:57:19:47:71:58:25:cc:45:87:d5:
         0b:18:89:3a:25:29:4e:93:55:23:c9:82:51:31:31:30:a5:2d:
         d8:70:a7:57:82:10:1b:bf:3a:e0:1b:fa:4b:44:40:f3:fb:7e:
         ad:7d:e5:bd:a9:b6:11:c5:82:bb:77:f5:96:00:24:3c:c2:4e:
         48:e3:1f:2a:c4:4f:2b:bc:8a:c6:3d:98:35:36:51:5c:79:7d:
         1d:fd:41:79:b5:78:2c:32:5a:3f:f6:a3:41:d4:5c:85:8c:bf:
         51:1a:d8:06:79:40:b5:da:9b:e8:48:57:9c:1b:72:68:a1:fa:
         4d:cb:14:d8:9e:27:df:c4:ae:bc:5f:76:58:be:42:0f:46:77:
         20:27:ac:45:a9:af:b1:bd:fe:fa:c5:51:89:e6:01:d5:2c:19:
         7d:6c:b1:8e:4c:c0:db:8f:3e:d5:95:b1:b0:d7:a4:6b:bd:61:
         27:08:3d:9a:67:51:ed:82:52:e8:de:82:b8:7e:e8:e2:3b:f0:
         1c:48:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:20 2026 by rpki-client