Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File:                     Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier:          V26t1OlZC+vLoc9NIqixHEobETbCQcrTUEDcT4jTWMU=
Subject key identifier:   52:AB:E9:BA:F4:D6:7E:C7:AE:E5:36:88:96:A7:E9:67:54:62:32:76
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer:       /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial:       019CE36C473F5BC118B77825ABE00213EE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number:          7B
Signing time:             Thu 12 Mar 2026 19:00:49 +0000
Manifest this update:     Thu 12 Mar 2026 19:00:49 +0000
Manifest next update:     Fri 13 Mar 2026 19:00:49 +0000
Files and hashes:         1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
                          2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: FCrxiuLm87sV4kPmdR6ZP/EcNJir2vKaNAjsUGeaw08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:6c:47:3f:5b:c1:18:b7:78:25:ab:e0:02:13:ee:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
        Validity
            Not Before: Mar 12 19:00:49 2026 GMT
            Not After : Mar 13 19:00:49 2026 GMT
        Subject: CN=52abe9baf4d67ec7aee5368896a7e96754623276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:30:c7:bb:b1:ab:93:ab:7e:ec:78:83:cb:aa:
                    f0:83:4b:07:2f:9f:a8:1d:ad:8a:5e:46:b6:6c:3d:
                    59:35:8b:cb:7c:e1:19:52:d4:a7:2c:5d:5f:ca:b0:
                    b0:ae:46:d0:79:5f:94:e4:29:da:3c:e2:1a:2f:2b:
                    02:b4:ff:0f:1b:29:e2:91:3e:62:d4:c1:13:fa:76:
                    6d:de:bd:e6:28:1b:d3:aa:e2:de:4d:9c:24:a0:bb:
                    1f:72:88:53:5e:41:c3:20:fc:e5:f2:a7:09:d6:2a:
                    72:a9:51:b0:cf:b6:9e:35:fb:54:5b:b6:79:ad:df:
                    27:e3:d0:8f:22:48:19:58:4f:50:cf:2b:cb:c6:f6:
                    80:77:53:e1:ff:51:c0:b2:b7:6e:28:e2:90:4a:10:
                    1a:28:e3:85:ab:05:d5:63:fd:38:f8:79:2f:3a:93:
                    1a:7a:08:95:d3:62:a9:30:16:1b:53:96:ea:f9:6b:
                    d3:18:83:e1:d3:92:40:0d:73:51:7a:95:26:e1:d4:
                    ba:7f:a9:df:36:8d:f5:67:09:11:04:cb:a8:6e:0a:
                    a3:a5:67:af:13:59:4c:5a:50:64:54:5d:d8:f0:46:
                    c4:ca:7c:6a:50:c3:ff:e8:39:28:b3:11:c5:ec:0e:
                    84:9d:bd:cc:33:a7:f5:d6:d8:66:21:cf:03:0e:55:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:E9:BA:F4:D6:7E:C7:AE:E5:36:88:96:A7:E9:67:54:62:32:76
            X509v3 Authority Key Identifier:
                keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:9c:a3:63:03:6f:61:3c:2e:dc:26:64:4d:72:b0:c6:4d:
         fa:65:65:e4:0c:c1:aa:91:a1:83:94:45:3b:11:8e:1e:44:9b:
         7e:c1:b4:9e:1f:34:c6:73:aa:bb:6c:96:5b:05:9c:07:64:43:
         d7:bc:9e:6b:40:5b:53:62:14:a8:19:3f:7b:c3:f7:fa:17:e6:
         39:5f:0f:13:68:01:8c:3c:cd:7d:9d:9b:92:86:2b:81:a9:fc:
         ff:eb:b3:cc:b4:9d:b9:41:0c:48:19:fa:82:d0:a9:98:3d:06:
         c7:6a:df:39:b3:d0:b8:28:02:ee:2a:59:2a:f3:77:56:3f:a8:
         f7:d7:3e:bc:7b:d0:08:22:f1:f1:fe:28:f4:f8:e9:3a:c3:36:
         8c:35:19:da:ed:79:4b:f1:5c:c5:be:42:82:79:39:39:7a:e0:
         0b:e4:71:60:d9:e1:e2:35:f8:a7:a0:ae:8d:68:cf:c3:67:96:
         ac:6d:37:e1:6f:c4:ed:65:90:80:dc:38:06:90:83:a6:39:2d:
         cc:ef:dc:7f:9a:e9:75:2a:2e:ac:9e:b7:55:dd:15:01:48:c6:
         43:d5:6a:e5:92:16:64:96:d4:09:25:80:d5:cc:98:72:f6:8e:
         46:9e:37:c5:e4:3d:73:47:da:51:9f:14:dd:21:fa:fe:b3:d4:
         80:98:20:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:01 2026 by rpki-client