Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
File:                     p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft (raw, json)
Hash identifier:          2wRbfsL9YmJIX6td8TSIFyZarAkSM8araOl34kW+J9k=
Subject key identifier:   AE:84:09:38:20:A5:4A:79:B6:54:7B:73:6D:0E:AC:59:8C:55:65:83
Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4
Certificate issuer:       /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4
Certificate serial:       019D38D350F0A7FA144877E843EB709C0864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
Manifest number:          0112
Signing time:             Sun 29 Mar 2026 09:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:06 +0000
Files and hashes:         1: CrOqxRcW75o4aRdWm0p9XWdbx98.roa (hash: IrzNxLHpjCPUfunvuk128Mos98JNYP40+XMrBYBSSM4=)
                          2: Fb3olNFabx3E1XAvVtesXUZBCV4.roa (hash: ezk1XNuD5gDuGAhkZULFvXspa5WbFw4VI1h7QP1S62k=)
                          3: SiFSfPzw5ybCSlARqgm1OIsBFRg.roa (hash: GsDEUKb/AwB9xCnavcaQiiPNHkkXEoojiw+fKuWtDoM=)
                          4: p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl (hash: OrLuV1l9YEhQFORvBNhZP4soDIBQYp6KuZ7NvKftqoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:50:f0:a7:fa:14:48:77:e8:43:eb:70:9c:08:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4
        Validity
            Not Before: Mar 29 09:01:06 2026 GMT
            Not After : Mar 30 09:01:06 2026 GMT
        Subject: CN=ae84093820a54a79b6547b736d0eac598c556583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:1a:3c:f6:14:71:a3:e5:67:9f:9c:88:ca:
                    b3:2a:65:6a:11:10:5b:97:fa:42:e2:8d:28:09:29:
                    2f:07:6b:99:b6:99:ff:8d:94:d4:6a:f6:4c:46:d0:
                    46:4a:84:8c:0f:5c:c9:23:4f:e0:32:dd:1b:09:f6:
                    3a:41:e4:d0:63:7d:31:78:e6:44:04:24:ac:96:5d:
                    c2:03:fc:48:78:a3:74:e8:11:d8:bb:27:d9:f2:7c:
                    26:ee:03:9f:66:d3:91:cf:4e:31:55:1d:67:cd:5c:
                    9c:d4:01:89:1d:af:45:6f:4a:dd:4a:cd:da:b6:1e:
                    a7:a5:0f:e3:18:37:c7:82:98:73:a4:de:c1:4f:31:
                    80:63:3d:7a:8a:a7:f0:c9:30:75:12:ea:28:db:24:
                    74:4a:15:dd:0a:9f:05:2c:b3:8e:f8:62:96:48:76:
                    d5:ea:08:ca:75:c7:b7:7f:19:35:3b:01:3d:22:02:
                    89:79:c3:c7:05:16:37:90:96:05:23:45:09:b0:f0:
                    6f:0b:28:5b:de:95:84:9d:77:37:89:95:75:73:86:
                    e8:70:8b:fc:1b:09:37:b6:ca:40:38:58:13:ce:23:
                    1e:5c:46:9b:17:e6:89:bd:65:47:90:02:13:6f:b3:
                    7c:5e:40:c8:43:ba:aa:56:d3:32:77:4c:1e:52:d8:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:09:38:20:A5:4A:79:B6:54:7B:73:6D:0E:AC:59:8C:55:65:83
            X509v3 Authority Key Identifier:
                keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:bd:64:ad:0d:db:ae:06:01:87:55:45:ea:18:90:5d:e5:
         58:fa:bc:56:7a:7d:52:51:1a:78:1a:3e:5c:d4:6e:59:ef:1b:
         ea:70:03:8e:ea:8e:1a:c6:f3:42:a0:bc:4a:e6:ec:77:f5:e1:
         97:df:80:f8:99:bc:83:e7:e4:2f:11:fe:3f:de:89:6d:78:98:
         d2:0b:fb:fc:eb:75:b5:20:c3:1c:b5:ff:af:02:15:06:8e:ef:
         a4:15:4b:28:53:3a:50:58:2c:a5:92:ac:6e:3b:87:70:58:32:
         e0:5b:b7:2d:f2:3a:2e:f4:4f:99:fb:56:61:c6:b3:d5:b3:73:
         ec:e2:04:20:bf:56:9c:b1:32:c5:89:62:be:b9:c8:d3:03:09:
         fe:46:df:d9:d6:59:6e:9b:04:21:5b:cf:19:69:75:bb:7d:96:
         02:25:ea:37:ee:f3:bc:20:40:7d:fc:10:db:de:7e:45:20:20:
         d6:26:a8:28:d7:00:b2:09:ac:53:e7:fd:8c:bc:76:ad:83:da:
         3d:77:3e:09:57:90:cb:ea:25:5b:9c:b0:bf:2b:83:63:15:38:
         c7:e7:12:cf:5a:b7:8e:ef:83:59:e1:76:65:27:76:bb:b4:71:
         3f:23:db:c5:62:9a:4b:cc:86:72:f3:ba:0c:1c:12:43:b4:be:
         2b:7e:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:53 2026 by rpki-client