Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File:                     0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier:          KeaN2E3C13T67vHG82xN4hnCAbOYLi8Y2G3ZgTHQxH8=
Subject key identifier:   FA:10:BE:5C:F5:BD:8D:6C:A0:8B:58:1C:29:39:37:B4:B0:B1:DE:37
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019CDF901F54CE0EA82AE18186F887903880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number:          BB
Signing time:             Thu 12 Mar 2026 01:01:30 +0000
Manifest this update:     Thu 12 Mar 2026 01:01:30 +0000
Manifest next update:     Fri 13 Mar 2026 01:01:30 +0000
Files and hashes:         1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: QMJUfQpqpWmSrj78K9k3E/95ZrAiJZGcdFSTURC7SlE=)
                          2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
                          3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
                          4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
                          5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
                          6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
                          7: xYx_vOW7vkTjvjtpiy67I2LnOhE.roa (hash: N7u6humGzKYT/H6+9vAbd+SuhUaYJnp74HRkR2a2nH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:df:90:1f:54:ce:0e:a8:2a:e1:81:86:f8:87:90:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Mar 12 01:01:30 2026 GMT
            Not After : Mar 13 01:01:30 2026 GMT
        Subject: CN=fa10be5cf5bd8d6ca08b581c293937b4b0b1de37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:0a:28:45:eb:e8:46:18:5b:61:70:04:d0:
                    57:55:02:44:d9:2f:b6:b5:9c:40:a6:78:06:68:cb:
                    a7:1c:23:06:d7:7f:8c:22:4e:8d:50:68:98:7d:4c:
                    27:ba:77:11:1d:4f:80:3c:ba:ac:54:84:e1:87:2d:
                    ac:bc:68:01:eb:53:94:ac:d3:34:dd:5d:fd:45:4d:
                    12:87:80:65:ec:7a:f3:8e:4a:aa:8f:28:5a:e0:fb:
                    c4:e3:7e:6b:69:94:5e:5e:fe:27:a3:9a:d6:3f:de:
                    5d:cc:9d:67:cf:6c:4d:9d:c7:49:c7:6c:64:81:55:
                    77:d9:7a:5c:a3:d1:25:80:45:e6:b8:18:fd:97:47:
                    a7:7d:ed:49:f5:18:89:e8:cb:18:01:7f:e8:d9:11:
                    53:60:7e:c1:6e:e1:35:21:10:c1:7f:e6:ec:c6:91:
                    49:07:5b:09:29:a9:5e:f7:e1:71:1b:77:70:3f:1d:
                    2d:d1:25:a7:87:0e:d4:ac:11:0d:08:c6:25:08:55:
                    4c:31:e3:1f:5a:81:88:46:58:c9:c4:22:5d:8b:09:
                    c1:c3:eb:d5:36:5d:b2:c5:28:13:7c:ad:0a:46:92:
                    e5:6a:e5:41:43:b6:26:1b:62:64:05:95:01:04:9b:
                    32:ee:6c:37:09:a4:74:c8:1d:4b:0c:b1:35:3f:05:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:BE:5C:F5:BD:8D:6C:A0:8B:58:1C:29:39:37:B4:B0:B1:DE:37
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:76:96:aa:b0:a3:db:7a:e7:89:96:b3:b4:e6:01:f9:d8:56:
         4f:51:0b:b7:b5:55:d0:ed:2c:d0:2c:53:6b:b5:b3:a5:4d:bd:
         b4:b2:56:af:e2:7d:6a:84:ad:8b:a0:24:83:59:ac:bf:d1:16:
         2f:c6:a7:b5:d7:0a:f6:0a:c2:bf:c7:15:f8:23:d0:3a:8b:4c:
         0d:ec:75:45:62:d7:6c:16:42:ac:21:01:22:1b:51:2e:5d:07:
         a0:e8:32:0f:b5:b6:c6:ca:9d:ca:5c:cb:3a:6e:a6:ed:5d:16:
         1e:57:b2:89:7e:28:53:bb:ea:4f:74:c8:e0:95:b1:37:2c:ea:
         f0:0a:35:60:ed:fc:05:92:bd:a2:d3:55:c4:af:b0:31:b5:54:
         17:61:a4:7d:d2:7f:b4:0e:3a:40:b5:e2:b5:21:cf:b6:cc:49:
         64:98:d3:71:f0:33:54:e8:64:4a:6c:f0:24:00:94:bc:02:9b:
         b1:2f:ef:02:56:de:77:88:bc:84:90:0a:81:cf:99:bc:83:32:
         84:d2:1f:d3:6a:9b:b3:3f:1b:5a:8a:eb:ad:ec:0c:00:39:dc:
         a2:d0:78:ac:d1:a2:dd:aa:3d:21:e3:f5:cb:89:0a:4c:70:1a:
         00:d0:ea:fd:76:36:ae:12:fe:37:23:dc:a4:23:4d:76:85:7a:
         c2:6b:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:53:08 2026 by rpki-client