Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          lnTER+lGHD3K7UcMl1oUkM6Z0dZO8H6XkRX+ytPRGpo=
Subject key identifier:   0E:7B:61:02:E0:9B:22:99:A5:99:6B:28:EC:F7:4F:26:C3:54:6B:95
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       019D26CD33ED396A210805FD8930652B3946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          0EF1
Signing time:             Wed 25 Mar 2026 21:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:15 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: RcS2oNurgYzGC9mhubJAPVf91sfILSdZXnMCpu6NuY0=)
                          2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
                          3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:33:ed:39:6a:21:08:05:fd:89:30:65:2b:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: Mar 25 21:01:15 2026 GMT
            Not After : Mar 26 21:01:15 2026 GMT
        Subject: CN=0e7b6102e09b2299a5996b28ecf74f26c3546b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:9d:cc:ba:61:17:dc:f6:e8:7d:c6:a4:4e:
                    51:73:b2:9a:04:81:22:01:7f:24:01:d1:18:03:96:
                    2b:0b:26:e4:e8:e1:a2:29:c2:d3:3b:87:da:66:ff:
                    74:0c:72:ad:db:ae:3d:66:91:a1:d8:1b:28:ef:0a:
                    4f:ad:d0:0d:b9:6c:8e:69:c4:64:fb:09:b3:68:81:
                    76:3a:f8:33:08:80:85:93:bc:e6:db:c4:e5:8a:cd:
                    e4:01:a6:e9:12:83:95:ca:1f:4d:13:60:a6:ec:72:
                    69:44:0e:66:2d:da:d3:cd:f3:b4:90:79:09:62:96:
                    37:f5:e0:7e:c2:47:cf:d7:8c:d0:30:be:63:aa:31:
                    40:f0:23:da:c0:78:2b:db:ff:f2:fd:45:57:66:16:
                    cc:61:e1:af:31:65:ec:55:e7:26:58:21:be:5c:68:
                    99:3f:38:69:a8:9d:bd:7f:59:b1:1e:29:5a:7f:32:
                    ca:ea:2c:c2:73:14:6c:73:2d:c5:bc:ad:80:55:51:
                    c8:51:e0:83:80:d2:31:3a:1d:24:e2:a4:6a:87:b7:
                    10:96:7f:de:fa:d5:53:98:0a:b2:58:70:e5:68:95:
                    cb:bd:3e:3a:a7:e7:e1:38:46:8b:38:3d:ff:fd:6c:
                    33:d9:7f:a9:be:04:66:d1:5f:6e:d9:85:22:eb:9d:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7B:61:02:E0:9B:22:99:A5:99:6B:28:EC:F7:4F:26:C3:54:6B:95
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:40:43:34:44:2f:ef:49:ca:04:ef:86:55:91:b3:dc:36:31:
         5c:91:9f:e0:d9:36:62:12:84:0f:fd:a4:21:77:a5:88:0f:ac:
         e7:01:6d:b3:1b:f8:1c:68:1a:f8:ff:64:ee:99:d2:c2:3e:54:
         35:77:0d:91:e1:f0:16:e9:d7:2a:0e:97:06:a5:01:c2:ef:9a:
         c2:68:89:07:24:6f:1b:8f:b5:12:95:53:10:fb:33:3b:4f:d7:
         d7:a7:3c:f8:99:e0:83:66:55:15:9f:80:26:59:12:65:d6:10:
         8b:8a:24:6b:c4:60:d6:56:10:1c:ef:13:09:38:5a:48:8b:13:
         71:cb:e1:60:d7:39:ba:88:a0:8a:56:3e:a5:8e:11:0b:fc:dd:
         d0:7b:10:1d:f8:ad:29:00:ed:c8:4b:7d:f0:e7:14:b3:4b:2b:
         97:c7:2f:e5:0c:9e:e8:79:a6:bb:ca:a9:a1:90:aa:eb:ec:0a:
         1e:5c:e6:b6:9c:ac:93:18:53:a0:63:ed:8c:90:53:60:bc:fb:
         ef:c7:47:48:9b:39:51:75:54:bb:11:69:bd:a0:b0:69:80:97:
         9e:45:74:16:81:9a:c5:c1:3e:a7:2e:f6:88:51:21:4a:44:eb:
         1a:55:28:15:be:04:5c:d5:95:15:c8:6a:ed:e2:a8:2a:e1:d2:
         ca:10:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:34 2026 by rpki-client