Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File:                     B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier:          Aryf6ytbgiwIKMzazeHFO9GKxsKX64KyuwtoLXsBKhA=
Subject key identifier:   33:5A:40:CD:B0:C9:38:4E:79:8E:FF:EB:D5:B3:18:82:4C:61:B1:3D
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       019D375211F1C7A91D6719F7CB0474D3F172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 02:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:18 +0000
Files and hashes:         1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: EXJ/FjO6OTfJiE/3+7icFmbSstH1ALtHmih15VrkTmQ=)
                          2: OtKLPaAsu0TSKxVTheZYE45uIv4.roa (hash: sV369+wKHa03W+MYhzuJvYumzEqh+GOUryRtR9pnkWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:11:f1:c7:a9:1d:67:19:f7:cb:04:74:d3:f1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Mar 29 02:00:18 2026 GMT
            Not After : Mar 30 02:00:18 2026 GMT
        Subject: CN=335a40cdb0c9384e798effebd5b318824c61b13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:06:28:26:bb:c9:71:3f:0c:d8:54:ff:60:
                    60:d5:84:79:79:a9:3f:08:e6:c4:76:03:11:e6:9f:
                    1f:ae:f7:4b:75:04:85:51:52:48:2f:70:25:92:60:
                    f5:c0:19:84:a8:ca:ef:d2:8c:73:10:f5:c3:04:e4:
                    4b:9c:91:4c:d4:95:92:e7:06:8d:b0:18:f9:8b:8d:
                    d0:a1:d8:b1:bb:25:54:fe:12:de:4c:2b:87:1d:c5:
                    47:9b:62:41:93:f4:5a:46:be:d2:b0:a9:0e:23:36:
                    cf:82:c0:2f:0d:75:f3:71:71:eb:3b:c9:b0:d3:e1:
                    d4:7a:e5:41:16:75:e3:a7:c5:c0:a0:5c:1c:95:01:
                    79:64:15:4f:63:8c:e0:ba:ab:53:6c:38:3b:17:0d:
                    23:92:03:7a:5f:b8:e4:2c:18:6b:83:e3:f7:b0:06:
                    84:b8:9e:e8:cc:5f:1d:31:c2:ae:89:97:96:08:f3:
                    74:62:68:0c:a4:1b:15:de:63:98:de:cc:8e:80:1e:
                    30:5c:82:23:56:a9:d3:f2:4e:a5:da:ec:a5:bc:e7:
                    ed:9f:1c:9a:1b:b7:11:35:c4:3a:db:13:58:32:cf:
                    0e:e2:d4:84:f4:3e:30:b3:e2:2e:e8:12:a1:e6:1c:
                    4a:c3:bd:ab:89:74:82:29:dc:c1:32:b0:a9:fa:ba:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:40:CD:B0:C9:38:4E:79:8E:FF:EB:D5:B3:18:82:4C:61:B1:3D
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:b6:b1:14:eb:fe:b7:f7:d0:0a:de:c4:f4:c6:b4:90:33:
         35:ce:8e:60:d9:50:ec:a7:76:ee:25:d3:02:81:49:c2:e5:02:
         1f:b2:bd:0c:94:6f:e8:2c:0c:55:2c:6e:24:40:3a:ab:e6:f7:
         1e:b9:26:7d:37:4f:a8:d2:16:af:ba:78:e7:95:45:e5:56:22:
         ce:7b:3c:76:2c:be:a0:12:29:dd:e5:50:c4:e3:55:8d:8e:d7:
         13:19:e7:54:72:68:70:c3:16:d2:0f:1f:c5:ed:82:70:a5:2d:
         43:40:ce:98:31:86:29:5e:56:b4:c6:a9:78:f8:6c:b2:71:b8:
         bc:83:9c:31:33:29:e2:8a:5c:b2:1b:15:5c:40:86:9a:aa:88:
         61:8a:2f:fb:9b:f3:ca:45:69:e9:c8:34:f2:d3:47:ed:9a:04:
         7c:3a:af:1c:9b:d4:b2:b8:00:d5:2c:62:dd:f9:71:0e:b3:74:
         8e:12:c6:a8:07:96:0d:b1:83:08:e2:a6:f1:1f:e8:c4:c0:49:
         ce:d5:bd:de:61:d0:73:a0:97:de:0d:e7:6c:54:e4:86:03:db:
         48:ad:fb:1c:c4:79:18:cf:46:4c:84:2e:99:4f:e6:f2:14:3d:
         75:62:3a:74:93:e3:02:c3:c4:96:86:71:1d:24:23:36:70:5c:
         12:ef:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:05 2026 by rpki-client