Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File:                     AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier:          9TAPdNuo0szF8FFmW0HRDT/Qy/ebZyzwnjmxkoqkqPI=
Subject key identifier:   8F:01:3B:48:96:8A:D3:AC:98:6C:48:53:D9:CF:A7:41:6F:B5:8A:9E
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       019CE25996A4310A6EFFE024BDCBEE5673F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number:          0BC7
Signing time:             Thu 12 Mar 2026 14:00:47 +0000
Manifest this update:     Thu 12 Mar 2026 14:00:47 +0000
Manifest next update:     Fri 13 Mar 2026 14:00:47 +0000
Files and hashes:         1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
                          2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
                          3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: XrZdRfkk37mNl2ekHcSLL0R72lRF/F9ReJYGw6GFph8=)
                          4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
                          5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
                          6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
                          7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
                          8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
                          9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:59:96:a4:31:0a:6e:ff:e0:24:bd:cb:ee:56:73:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Mar 12 14:00:47 2026 GMT
            Not After : Mar 13 14:00:47 2026 GMT
        Subject: CN=8f013b48968ad3ac986c4853d9cfa7416fb58a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:d9:0a:a4:dd:ce:99:11:6a:8d:90:b0:5e:
                    00:84:76:a1:41:06:b6:37:74:0e:2e:13:b4:12:db:
                    8b:d5:e6:43:2e:19:15:21:79:b3:e0:a3:35:fe:3d:
                    ea:60:fe:12:32:dd:0a:b1:34:d0:2e:60:47:9c:91:
                    8e:68:55:e1:94:f4:ef:a4:12:a0:ad:26:74:e8:75:
                    27:f6:c6:0e:c4:1c:08:2a:2e:46:ad:a2:cb:1b:0c:
                    88:3a:60:51:63:8e:9a:5e:82:fd:9c:9a:c1:d0:7d:
                    5a:13:05:5a:13:71:1d:e9:4f:6d:3f:ea:a1:66:b3:
                    2f:59:98:2d:9e:03:d6:0d:d6:80:9d:57:5f:a2:7b:
                    11:37:52:48:e3:da:52:00:ca:5b:88:d2:fd:58:a6:
                    b5:ad:bb:5f:91:e3:74:c7:17:c6:26:d7:77:c4:c7:
                    b7:ec:61:63:2d:c1:d6:e3:96:9a:17:ca:b4:72:b6:
                    46:bd:cf:62:8e:fe:87:92:07:4c:6e:11:66:d0:a1:
                    10:14:fd:94:a9:1c:31:33:f0:17:3c:13:db:1f:3b:
                    77:27:85:87:5b:58:89:73:da:1e:e8:e7:e0:c3:3c:
                    11:9c:87:a6:6f:b2:fe:42:33:26:65:df:1c:aa:24:
                    fb:49:c3:f0:72:dd:f1:41:ec:41:c5:5b:5b:e3:a6:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:3B:48:96:8A:D3:AC:98:6C:48:53:D9:CF:A7:41:6F:B5:8A:9E
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:de:f3:9a:31:f8:d6:84:93:ee:1d:47:fe:ac:c8:da:54:
         11:7d:0a:9e:66:e6:fb:99:9a:e1:5b:37:51:79:8b:3b:b7:36:
         ab:73:60:bf:46:59:04:f5:e8:e2:6c:cd:b6:bc:ca:7e:17:d6:
         bc:4e:8d:53:64:12:12:0b:84:1b:9c:5f:90:b1:b9:a6:52:58:
         01:55:73:5e:84:f1:f5:9a:1c:90:fb:ca:24:30:1d:64:49:1c:
         0e:69:15:95:7c:a0:35:1a:0b:ed:d1:8a:40:81:61:5c:20:b1:
         7a:92:0d:a5:b8:77:c8:d1:61:c7:07:e5:9d:9e:a0:63:ce:01:
         b2:aa:76:1a:fa:30:47:89:14:e7:4e:50:ed:a1:e5:de:2b:4e:
         9f:f9:b3:a4:ee:d5:d8:3d:36:b6:22:4d:92:3b:eb:a9:e7:f4:
         b9:52:0f:72:52:c3:3c:9e:f7:25:f2:6c:16:a6:28:e6:f8:8b:
         57:b9:8f:b1:96:6c:81:98:13:a9:5f:83:62:82:e9:eb:fc:f5:
         c8:2d:35:0e:bf:33:be:da:f7:d2:71:cd:90:0f:50:25:9e:86:
         e9:61:77:b7:03:30:a8:6e:bf:1e:a0:91:b4:36:fc:80:4e:cc:
         32:a9:c9:47:f0:e3:0c:13:52:69:78:66:cd:d7:2f:f5:72:02:
         78:7d:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:27:26 2026 by rpki-client