Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          Ngsuf9hNCDRRka0MTP3yU+JI2jl1C0aF58nBARBvwn8=
Subject key identifier:   EE:01:D3:7B:7E:97:B5:90:CF:CD:24:94:81:BC:A5:0C:10:66:DC:B1
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       019CEF39955CB965C3800E57CF1F36C805F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          0FB0
Signing time:             Sun 15 Mar 2026 02:00:53 +0000
Manifest this update:     Sun 15 Mar 2026 02:00:53 +0000
Manifest next update:     Mon 16 Mar 2026 02:00:53 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: zMIhvlqjBjj81EiAPGoDKqTQQqEkcbrIKCHPFz6ttX0=)
                          2: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (hash: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:39:95:5c:b9:65:c3:80:0e:57:cf:1f:36:c8:05:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Mar 15 02:00:53 2026 GMT
            Not After : Mar 16 02:00:53 2026 GMT
        Subject: CN=ee01d37b7e97b590cfcd249481bca50c1066dcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:51:52:18:48:97:81:da:d4:24:e8:94:00:
                    d6:2e:b2:ae:19:bb:31:74:c4:25:d0:1b:f7:8b:79:
                    c4:55:77:d3:11:e7:34:8d:32:6e:ae:3b:78:21:24:
                    2d:c5:20:e4:15:85:1a:83:f1:8d:a5:62:af:07:40:
                    b9:55:a2:de:c0:35:4e:11:86:4d:12:3d:c7:60:fb:
                    3a:6f:da:1a:f3:42:ea:d8:da:7e:45:a1:5a:37:e3:
                    10:da:cf:0a:4a:7d:3d:64:65:7d:1c:af:b4:e1:8d:
                    0b:a9:d6:76:ca:84:64:1c:c4:67:60:91:26:01:30:
                    36:93:c2:19:58:61:27:2d:e9:1b:85:fb:ff:de:3b:
                    e0:c8:26:fb:e7:2a:f0:12:35:11:18:4a:d2:71:41:
                    3e:3f:3b:72:d0:2d:48:bf:da:7a:f5:59:1d:19:f0:
                    cc:37:3e:61:d5:83:09:ad:25:72:04:92:c1:fb:d8:
                    54:72:ce:96:dd:4f:4c:23:81:23:6b:e1:1f:6c:45:
                    11:bf:dd:da:9c:7a:e3:6d:aa:84:df:b8:17:9d:b0:
                    27:84:e5:a4:9f:ca:ec:70:55:ff:3d:dd:f7:84:c9:
                    67:47:22:e3:91:5b:e3:28:93:7e:36:d2:c3:53:7b:
                    c7:85:9d:42:84:09:38:07:fa:a2:c4:00:b1:43:5a:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:01:D3:7B:7E:97:B5:90:CF:CD:24:94:81:BC:A5:0C:10:66:DC:B1
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:ad:53:6a:64:ca:e2:11:72:0f:92:c5:44:14:64:45:13:
         d7:8d:a4:9d:89:79:64:85:43:9a:5e:29:ee:11:56:65:fc:e7:
         66:a9:ce:c8:a2:03:ae:69:46:1b:0f:77:13:c2:4e:4b:f1:73:
         48:01:d4:bb:f4:c2:8e:21:84:8e:c6:2a:a5:c4:7e:1b:e6:25:
         b2:15:97:88:09:c0:e6:87:02:f4:3f:bd:88:c6:f5:f8:b9:e2:
         e5:e5:35:b7:d0:01:4a:83:b2:62:21:2a:99:7e:b4:95:80:7c:
         90:5b:52:b0:03:f1:91:d7:d6:f6:3c:5b:ae:97:2a:14:51:6d:
         17:c1:2c:09:3c:b8:d7:63:d0:e7:75:e2:a0:ca:5e:b1:64:07:
         70:19:c2:b9:f3:ef:41:c9:cc:e4:40:96:7d:ee:c2:81:09:a5:
         08:9b:10:d7:64:49:32:b0:07:7f:43:1e:0d:56:91:9a:94:7b:
         fd:d4:85:9e:9d:39:57:02:e4:7c:2d:dd:b8:fe:20:c5:0b:c7:
         4a:ef:c3:e8:21:e0:9b:41:71:5d:c2:50:fd:2a:9a:28:42:ba:
         99:04:6b:09:4a:ea:9a:6e:68:cf:99:8b:79:26:bb:ee:18:8a:
         13:8d:4f:5a:5e:7f:bd:e3:ca:1a:b2:0a:7d:67:56:3a:91:27:
         6c:6e:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 11:49:32 2026 by rpki-client