Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File:                     rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier:          7YlmKPLd2SwmInv/OQgCPSblCMbXneEtrgCIxMz8H5k=
Subject key identifier:   88:05:0E:AA:C1:FF:25:DA:67:05:E7:A7:32:7C:DC:80:9F:E9:44:34
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer:       /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial:       019D2AA9FC6C22B9B7247F730BBCDCB02B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number:          0B6E
Signing time:             Thu 26 Mar 2026 15:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:16 +0000
Files and hashes:         1: 6iAprnV5kqIXyXcpRUbGQgO9SaM.roa (hash: pdyKwoYg0ynw9WDHpbBigS85Bj0l6yeKu12lhKM9YfA=)
                          2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: bdLXKBKFrpqD4S+o31rUWd4kv6v6QLTlSpnSgeUzROQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:fc:6c:22:b9:b7:24:7f:73:0b:bc:dc:b0:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
        Validity
            Not Before: Mar 26 15:01:16 2026 GMT
            Not After : Mar 27 15:01:16 2026 GMT
        Subject: CN=88050eaac1ff25da6705e7a7327cdc809fe94434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:2a:a1:ea:80:44:2a:e8:b5:2a:08:65:70:
                    bb:55:50:24:ac:25:cf:9c:f9:56:ce:e3:49:28:0d:
                    45:92:47:07:ac:bc:6b:44:60:12:55:5f:5e:63:1f:
                    80:c5:e1:29:3a:c2:76:12:ce:fc:36:d8:9d:96:48:
                    fb:d1:9d:d1:ca:31:4a:b0:51:64:2b:7b:56:93:bd:
                    ce:55:96:90:23:4e:de:f2:ba:4e:60:7f:f6:5f:70:
                    5d:f5:e6:04:0a:31:14:5a:c0:2a:48:03:9f:8b:e4:
                    67:22:9d:e5:44:99:07:fe:6a:97:49:33:12:5e:09:
                    ba:4f:20:8b:0c:37:db:ab:0d:c1:d5:95:df:b2:b9:
                    7d:72:42:34:77:03:08:3b:26:bb:c2:df:7b:27:17:
                    ea:d3:2f:9f:b6:38:37:c5:3f:15:b3:04:a7:9e:de:
                    7a:6c:6f:26:47:5d:ee:a1:44:be:9d:a7:1e:30:c6:
                    34:b1:37:73:cb:25:41:82:20:b8:dd:01:62:9b:e0:
                    d0:ce:d1:05:66:d6:45:32:9a:aa:57:32:f7:62:91:
                    05:09:58:12:45:7c:11:6f:8a:26:d7:2e:b6:49:fa:
                    00:6b:2a:24:6b:f6:c5:a2:8d:59:07:e6:f5:35:45:
                    ef:e4:50:73:fb:a1:37:01:f6:4e:c6:6b:53:6d:dd:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:0E:AA:C1:FF:25:DA:67:05:E7:A7:32:7C:DC:80:9F:E9:44:34
            X509v3 Authority Key Identifier:
                keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:35:f9:49:c3:3c:92:c0:da:ce:6f:7c:07:22:9b:10:2b:
         4d:22:49:ae:c6:61:ce:bf:3e:f8:30:26:db:7c:8a:24:c7:6e:
         70:69:d6:ce:85:22:63:9b:72:1f:55:c1:83:17:4e:c0:2e:ce:
         55:17:32:e3:9e:cb:78:4b:14:cd:e8:68:c7:7c:cb:ea:ba:b0:
         1a:7d:1d:c7:04:c5:68:df:d0:32:c0:3d:7e:1a:ca:72:d7:33:
         64:fb:60:e0:e4:ce:1e:67:89:8b:8e:5f:2c:36:34:c4:3f:ec:
         d0:a6:ee:29:9c:f0:09:c9:6f:68:e9:5f:88:70:91:55:5a:70:
         ea:d2:6f:10:c5:f5:3c:8e:48:53:e0:5e:63:54:b1:88:a2:58:
         1c:89:61:2e:4a:34:1c:7d:ec:c4:8f:3d:50:37:61:b1:f2:51:
         83:83:00:f0:0b:67:a0:34:fa:f6:13:cb:ed:f9:78:18:25:91:
         64:bc:a6:4c:bb:f7:b0:a3:20:b3:ae:df:b7:f2:f4:6a:68:3c:
         38:c2:47:c5:95:c0:07:a5:cd:76:70:dc:06:7c:cc:9f:3a:87:
         2f:97:d2:a2:e6:9b:f7:58:66:5f:f4:09:6e:bc:12:6a:dc:f9:
         1b:ca:06:e7:41:95:98:9f:09:11:4a:36:e6:63:f6:3f:60:88:
         ed:84:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:28 2026 by rpki-client