Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File:                     7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier:          JGXLR92+dIo0hGvw71xNWAShnpvv+EQjPbpOtEjHq60=
Subject key identifier:   B9:AA:AA:67:4C:79:7A:A9:43:82:F2:81:FA:DA:01:34:B2:C4:6B:6C
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       019D37C0581A0F0559B41A99684FBC9833B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number:          08AA
Signing time:             Sun 29 Mar 2026 04:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:45 +0000
Files and hashes:         1: 24sHVGnpfFS3J526yE1P1lITRII.roa (hash: vWLBLF+MRaa0Y8jYeqPW6zy1hOvO6Sz2lrVc5dhkcss=)
                          2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: exY1vtuj61FCL2RuV+X9oKm8dqxC7J23wj55Y91xSxc=)
                          3: LUMm3KJ9jrucAwBkA9m77rrSEdo.roa (hash: 4Aa+6eJWayt69d6T35V+izmgz8oph51HxBJxpwGYcp0=)
                          4: Nny-oPN8lkxf_o2Phps_o1xoCA4.roa (hash: pZa8P6G8GTp4PD90W+odTD3OQV2ZissGgovTag01MLI=)
                          5: OU7xNguf2Aqvt0faWKfrpXgmLoE.roa (hash: bqE2JnPzGJ59xTyKX6EjSJ0pCQSrCs0P8ekQdurx/EM=)
                          6: tMR1t93phtdgfyoXDUK4UjJ3mDY.roa (hash: nRohpq/RZtKLeM9ZLaQ2z+rfMzrqIrZpqSFmYiTkb00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:58:1a:0f:05:59:b4:1a:99:68:4f:bc:98:33:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Mar 29 04:00:45 2026 GMT
            Not After : Mar 30 04:00:45 2026 GMT
        Subject: CN=b9aaaa674c797aa94382f281fada0134b2c46b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:ea:76:e4:b0:28:50:ae:41:bb:62:0a:b3:
                    16:36:a2:18:ad:65:df:57:d4:3c:f4:b0:01:75:b4:
                    0d:4f:e1:21:ef:ae:b4:66:e3:d0:42:90:ee:73:93:
                    03:16:77:16:3d:9a:28:19:6e:17:89:8a:98:b8:d7:
                    3e:ea:73:b7:ef:11:18:a5:e5:55:7f:8f:0d:83:49:
                    39:d4:3d:50:8f:62:cf:d2:7d:d1:d4:d0:94:7c:94:
                    47:92:27:7e:b1:3d:ec:85:d6:7e:26:e8:66:10:bf:
                    17:90:e6:1a:fc:4c:93:a8:24:41:0f:ad:62:04:8d:
                    39:fd:7a:74:89:c1:6c:8f:c6:6b:0c:d7:b5:52:dd:
                    06:46:62:24:82:eb:4b:be:d0:94:1b:e0:a6:93:55:
                    52:74:4f:30:cb:64:80:b2:54:eb:95:f1:1c:ef:12:
                    8b:33:db:00:ea:a9:6f:4d:f5:3b:a8:95:b8:3d:77:
                    87:77:ce:40:c3:c9:5b:bb:6b:29:0d:a5:67:91:0e:
                    98:2d:56:ed:b5:b9:71:4d:c3:c5:1c:0e:04:04:07:
                    4a:2e:a4:29:e5:6e:21:b6:64:d6:88:57:23:00:8d:
                    d2:73:e3:57:7d:63:71:2a:56:1b:3a:21:eb:02:66:
                    11:84:10:fc:7b:c6:39:38:ce:8f:99:03:3f:91:f2:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:AA:67:4C:79:7A:A9:43:82:F2:81:FA:DA:01:34:B2:C4:6B:6C
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:68:5a:9d:27:3c:83:d6:ce:6e:1b:8c:0c:28:bc:70:fb:
         a0:02:a2:5f:58:6b:29:71:cd:06:89:a3:b6:f1:b9:ff:c0:df:
         5b:d5:94:63:52:6f:21:ec:23:45:a5:a4:c0:5b:56:c4:31:eb:
         a1:a1:a6:65:a4:0d:d5:75:ed:8f:b1:0f:dc:8c:67:44:12:6a:
         89:b5:ca:ae:24:c5:2f:4c:8a:96:e5:58:77:8e:11:24:19:ec:
         26:9f:4a:71:0d:a8:1f:8f:53:f9:de:6c:3c:5b:5c:53:7e:fe:
         cf:a0:41:34:d3:48:e7:a0:7b:71:e5:28:0f:87:ca:e9:8b:2d:
         75:c2:eb:01:9a:65:0f:46:50:43:95:82:f1:f3:bf:37:38:58:
         73:1d:30:89:0e:9e:50:86:12:23:59:13:b5:df:6c:a7:5a:03:
         3a:70:02:74:4d:0a:48:4b:48:79:3e:88:40:f6:3b:f3:35:23:
         14:41:76:22:1b:95:a6:44:f3:55:c9:b2:58:fb:bd:da:29:ca:
         cc:b6:1d:b1:f3:21:a3:2e:ad:f1:21:6e:db:55:09:35:56:5b:
         4e:c9:02:9b:d5:69:5c:3f:13:86:b1:dd:3e:cc:41:a8:44:ed:
         54:3e:9b:20:ef:0f:1b:91:cb:30:1b:d8:03:b0:ec:38:07:ad:
         76:90:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:20 2026 by rpki-client