Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
File:                     fHwxHo7uu82iiQYtY6wOLtYdsd8.mft (raw, json)
Hash identifier:          L9SKtQSAtWXS3W9A0YFJivdt+5wEPWpfnD7ODvRQlL4=
Subject key identifier:   A0:29:68:30:F0:E4:F4:3D:BA:42:7E:67:45:CC:C5:E8:FD:A4:B2:E8
Authority key identifier: 7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF
Certificate issuer:       /CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
Certificate serial:       019D38664382BE6C44232643C7AA9A423AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
Manifest number:          0135
Signing time:             Sun 29 Mar 2026 07:01:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:59 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:59 +0000
Files and hashes:         1: fHwxHo7uu82iiQYtY6wOLtYdsd8.crl (hash: RVzXvfJvEHkTmBzxeix2QObWT5VkMtudwyYeu/TF/ZI=)
                          2: pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa (hash: nBOAy5CPDcItDwXemTNgV+jnGvA8HHTlGKSlk/4UJ2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:43:82:be:6c:44:23:26:43:c7:aa:9a:42:3a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
        Validity
            Not Before: Mar 29 07:01:59 2026 GMT
            Not After : Mar 30 07:01:59 2026 GMT
        Subject: CN=a0296830f0e4f43dba427e6745ccc5e8fda4b2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:18:0e:51:55:b1:fb:3a:28:17:5b:37:c8:df:
                    2f:8e:13:53:a7:9d:2e:47:70:82:4f:e8:ff:bd:ef:
                    0b:cf:e8:66:86:37:1c:bc:b0:ce:7c:66:3f:d4:38:
                    46:87:06:17:74:f9:2b:29:9d:a6:4c:f4:32:3d:16:
                    bf:ba:61:b1:f6:af:7f:f9:0e:34:45:31:fe:bf:6f:
                    dd:87:11:6c:45:29:f9:fb:bd:25:15:b7:cf:05:2b:
                    ad:4e:68:68:d8:22:38:c1:33:6c:1a:77:65:85:3c:
                    21:12:19:d1:4e:18:a5:83:ef:96:74:7a:91:19:7d:
                    25:c2:a6:1d:5c:68:79:b4:d4:ab:4d:20:23:b6:e2:
                    a7:9d:41:38:4b:1f:d8:8c:c6:ab:a6:ab:8e:05:c7:
                    26:ac:e9:98:90:1a:71:1e:0e:6a:78:95:0e:a6:e4:
                    0c:9d:f9:00:f8:40:c3:bf:38:74:14:87:84:14:6d:
                    1c:4c:54:5d:96:20:1a:6c:04:db:53:8f:19:41:6b:
                    e0:93:e0:06:d4:21:eb:9a:3b:a5:8e:5c:64:26:cf:
                    db:4a:75:40:c3:dd:12:c9:f0:ba:d3:ba:79:f0:f2:
                    bb:16:a3:97:a6:b0:91:75:22:02:36:21:6e:df:6e:
                    74:ee:95:af:c2:da:2a:88:2c:40:69:2f:05:76:05:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:68:30:F0:E4:F4:3D:BA:42:7E:67:45:CC:C5:E8:FD:A4:B2:E8
            X509v3 Authority Key Identifier:
                keyid:7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:12:73:36:3c:13:06:6f:74:20:73:ee:6d:78:ba:ef:73:
         10:aa:4b:00:14:c8:82:91:e7:72:d3:d1:ae:41:ff:70:e2:54:
         7e:66:88:1c:ce:c5:c0:e2:9d:0f:7e:9a:b6:40:b2:e7:9f:44:
         fd:94:a5:c3:14:24:19:37:ac:97:5a:2c:ac:03:68:11:28:eb:
         f1:f8:a7:07:22:62:81:c4:96:0f:bf:78:22:4a:03:ed:df:1b:
         be:cb:e3:dd:f5:e7:aa:df:f9:25:7c:41:5a:ff:27:f0:40:43:
         38:b6:d1:70:4c:7d:80:28:3f:1b:eb:3c:ce:8b:9a:bf:e6:fb:
         56:df:f3:d4:d0:13:34:a1:28:a7:47:38:16:83:d4:0b:99:92:
         a0:55:32:f6:7c:46:3b:c9:a7:a3:d8:c8:5d:1e:6e:6c:fa:76:
         f5:3c:71:f9:25:92:df:78:26:ef:80:9c:d1:e8:0f:8d:ee:03:
         78:eb:19:6d:6a:08:ca:62:c1:fe:52:ac:4d:9b:e3:ea:79:cc:
         e9:18:01:09:ec:b7:29:cb:c0:cc:55:49:38:75:d6:e8:f6:09:
         0c:e0:dc:aa:43:6a:de:d9:80:d4:f9:4a:21:c5:3c:22:0b:b5:
         62:7a:35:8d:64:94:b3:f6:dc:a1:3e:c8:22:b0:60:d5:75:63:
         fc:30:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:14 2026 by rpki-client