Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          OsN5FF2y6ZT34neuz+yM4qSSSTFBhi84hW0wIeTdy4c=
Subject key identifier:   65:F7:F3:27:D6:9D:28:03:55:0D:E3:2A:0F:5E:BB:52:1B:4D:CA:C2
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       019D3677DAE1397B69330AE591C19393C4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          077C
Signing time:             Sat 28 Mar 2026 22:01:57 +0000
Manifest this update:     Sat 28 Mar 2026 22:01:57 +0000
Manifest next update:     Sun 29 Mar 2026 22:01:57 +0000
Files and hashes:         1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: nFT41H+LLTJcbLAS9hOFaFWGsLrMMGRdaNbWayvcfbs=)
                          2: l3jaT1bSWorYPTAH0tIKpX9ObJ0.roa (hash: Xv2kbEZdjMxUOGqN/7wXLuOx7RktMUlXqMhlKu4Yx9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:77:da:e1:39:7b:69:33:0a:e5:91:c1:93:93:c4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: Mar 28 22:01:57 2026 GMT
            Not After : Mar 29 22:01:57 2026 GMT
        Subject: CN=65f7f327d69d2803550de32a0f5ebb521b4dcac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:50:7f:12:0c:7f:b6:9e:49:e8:16:1a:77:
                    98:bf:1f:c0:b0:85:fd:b3:0f:58:75:d9:05:b8:08:
                    b1:d1:b4:43:69:8e:3a:e9:9f:17:b4:d4:c7:ee:0a:
                    ca:7d:f5:d5:24:8f:c9:ab:fa:ee:dd:f8:26:2d:64:
                    52:a5:30:a8:86:00:a7:6c:b9:ab:1f:93:17:9a:45:
                    8f:99:27:9f:0b:f8:cb:ab:a4:8a:de:16:5c:88:fa:
                    c3:07:37:89:90:7a:81:fb:4b:3b:95:e1:dc:23:ff:
                    ff:de:15:37:52:c0:84:ec:b0:47:80:7f:82:30:6c:
                    31:01:08:00:59:8c:db:af:77:32:a0:c2:50:11:f7:
                    72:69:3f:82:f7:17:35:5d:33:9a:33:ac:39:09:80:
                    2e:af:f9:8f:7f:16:cd:bf:d0:e6:a1:4b:4d:1c:17:
                    f5:e3:3f:bb:4b:c5:af:b3:4c:c8:dd:a8:9d:1a:d4:
                    8a:c4:e9:28:84:f3:db:1a:14:24:0e:35:b2:13:99:
                    66:5e:be:b0:63:ee:83:9d:5f:3b:dd:4f:fb:ab:e9:
                    6c:86:90:0f:b4:90:34:23:47:50:54:5b:4b:5b:ab:
                    98:83:70:b0:bf:d3:ad:e4:1c:c2:46:63:00:af:c4:
                    8c:0d:40:16:a8:26:23:37:0c:49:7c:ae:59:bb:1f:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F7:F3:27:D6:9D:28:03:55:0D:E3:2A:0F:5E:BB:52:1B:4D:CA:C2
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:83:b6:fe:3c:49:54:8f:ce:2f:25:9e:27:f9:40:4c:12:
         09:8a:ac:0d:5f:9f:a3:6b:88:87:77:50:af:dd:44:af:dd:88:
         f4:1e:29:45:91:c7:08:6f:a3:2e:b5:2e:a7:14:d7:eb:38:5c:
         2e:7c:e4:4f:dd:cf:67:2d:de:3d:e9:1e:ff:03:3f:66:c4:43:
         39:12:b9:65:40:93:37:fc:df:dc:ad:ec:4d:57:ce:8d:e5:2c:
         57:63:41:da:57:35:c3:85:31:1e:82:a4:0d:d7:ce:0d:91:3c:
         b8:62:8b:41:3d:84:90:c0:78:3f:cb:c8:7b:44:2d:e6:0a:fe:
         55:a9:98:14:2b:37:f5:2a:19:3c:b8:f3:82:c6:4d:91:0d:02:
         b5:8b:80:96:44:3b:78:a1:a3:f3:78:d7:fb:b8:e1:a9:9f:f5:
         57:6a:0e:43:af:c7:f8:e5:8b:28:35:08:eb:ac:d0:5d:ea:cb:
         5f:65:f9:8d:a7:da:29:e3:c3:a8:b6:c1:12:1d:ec:6e:d6:b7:
         70:c5:2c:bb:93:b6:8f:89:a3:f8:f1:61:4f:8d:43:e9:8f:e1:
         cc:11:33:57:8b:fe:4f:ab:67:7f:37:f5:8a:6b:b5:90:6e:04:
         93:79:5a:cd:d7:fe:84:08:6d:75:e6:96:7b:eb:03:59:a2:54:
         86:b7:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:09:32 2026 by rpki-client