Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          tXGwnlMObwakSnZhRbQ+uSoTMQc2Nc6/EZz34o4REU8=
Subject key identifier:   B4:57:88:41:B3:A3:36:13:F5:FF:7E:66:50:06:7D:2D:4F:3A:BF:E9
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       019CE47F150020BF03B2C25B40074555C0C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          15A7
Signing time:             Fri 13 Mar 2026 00:00:59 +0000
Manifest this update:     Fri 13 Mar 2026 00:00:59 +0000
Manifest next update:     Sat 14 Mar 2026 00:00:59 +0000
Files and hashes:         1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
                          2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
                          3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: j/TVtqelCupWj6a4Xd2Zc6LhjIpUO230EAeV9lFlVeo=)
                          5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:15:00:20:bf:03:b2:c2:5b:40:07:45:55:c0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Mar 13 00:00:59 2026 GMT
            Not After : Mar 14 00:00:59 2026 GMT
        Subject: CN=b4578841b3a33613f5ff7e6650067d2d4f3abfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:1d:7c:26:66:38:6f:b2:3e:bd:23:0e:c6:
                    f6:60:d2:81:f9:a4:e1:a8:29:fe:7c:ed:d0:ae:7f:
                    aa:ad:aa:d9:18:15:18:7b:62:c6:91:51:d7:80:66:
                    77:31:57:e1:55:f0:5e:95:74:eb:e5:c2:fd:58:7d:
                    8d:ca:6c:c6:ee:e9:a5:70:a8:16:35:42:db:68:ea:
                    c2:bf:3d:2b:4e:ec:1b:c9:0d:14:f8:38:ca:d7:59:
                    02:1e:2b:22:62:6e:4f:2c:a7:66:87:9d:93:d0:98:
                    17:65:9d:b0:81:80:11:a4:ca:3c:37:a2:7c:51:6b:
                    bd:0c:b1:7c:05:44:0d:2a:16:dd:a3:7c:16:06:de:
                    51:ca:2e:45:7b:42:50:f2:27:73:0e:66:cb:25:05:
                    33:a4:cb:53:d4:a7:4e:a6:a0:f2:82:1c:2d:b6:5e:
                    a0:cd:3b:96:40:78:ce:16:98:47:76:a8:84:62:e8:
                    9e:5a:46:3c:ca:d8:1c:a2:e0:72:a6:18:45:5a:28:
                    36:0f:a7:10:cf:5a:03:90:3e:1c:a6:44:bb:b7:25:
                    31:b3:90:31:5c:8b:3c:27:9c:17:f7:ec:c1:2e:9f:
                    2e:99:ba:69:7f:cd:77:8a:d7:f6:49:8e:b0:1f:da:
                    38:ad:cc:c3:b0:4e:4c:28:20:0b:fa:19:a4:a4:be:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:57:88:41:B3:A3:36:13:F5:FF:7E:66:50:06:7D:2D:4F:3A:BF:E9
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:8c:df:b7:1a:6e:ec:b3:ea:19:af:c6:ab:12:45:1d:92:
         b8:cb:0b:ba:cd:b7:61:1c:05:50:12:3b:80:f0:34:7f:f5:48:
         05:00:01:fb:dd:d9:94:e9:42:b6:63:75:ec:61:b3:3a:7e:13:
         8f:c3:d0:0e:fa:e6:e3:dd:fd:50:16:c7:62:6c:18:25:53:32:
         14:ea:0f:cd:a5:71:0a:c4:57:62:c1:41:26:91:6e:36:5a:03:
         3a:c9:5f:e0:fe:8b:31:3f:5d:d3:58:83:6a:58:26:77:8b:84:
         15:46:08:2d:cb:ca:da:92:f7:e2:b0:fa:5e:2b:e6:e2:63:a7:
         3c:33:ed:a9:3f:f3:38:73:fa:f0:e4:d3:23:1d:82:36:1d:0b:
         9a:f9:b8:ec:bb:1c:c6:7d:9a:40:87:2b:2d:8c:a2:d0:bf:6b:
         2b:a0:1a:97:81:81:ba:4f:3e:d2:f1:4c:68:4c:c6:59:36:61:
         fc:f9:28:aa:db:3b:07:6e:02:3f:fb:d3:81:31:32:99:fc:74:
         53:97:78:36:e4:2c:37:e6:29:52:c7:1d:1b:82:a3:b0:d4:64:
         96:49:be:96:d4:fe:58:f3:85:65:3b:d8:51:91:f5:f2:e6:eb:
         83:75:68:09:9f:b4:46:37:81:34:e3:c3:e2:8b:8d:d6:fc:3d:
         77:c8:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:31:17 2026 by rpki-client