Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          3GfDSOVl069koWsrz9wWcEjAHWn3CvOEgnxlwyGL7/Y=
Subject key identifier:   CF:67:3F:D6:D8:12:06:15:CA:64:A4:E4:E6:2F:D8:68:87:3A:CF:0D
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019D3789C125F7AB24819182B6815FEBE3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          07EF
Signing time:             Sun 29 Mar 2026 03:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:07 +0000
Files and hashes:         1: 4yAos7CZgWKf3gn3IrsDl-srEto.roa (hash: APm7pBB8tOvmNKA+K6EEmrpwAa/2uNe5vUUzyTIaj0k=)
                          2: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
                          3: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: B7tYpCVfxEpnNzGuhqf7J0IyhzILjBrfigbtE40bSNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:c1:25:f7:ab:24:81:91:82:b6:81:5f:eb:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Mar 29 03:01:07 2026 GMT
            Not After : Mar 30 03:01:07 2026 GMT
        Subject: CN=cf673fd6d8120615ca64a4e4e62fd868873acf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:11:d2:7c:2d:d5:0e:cf:7f:37:ce:9f:41:
                    6b:f9:07:97:67:0a:d0:34:23:f4:d2:aa:05:11:d6:
                    92:e2:e2:04:d3:b8:8b:09:39:3d:4a:45:5d:bf:89:
                    9d:07:8e:f8:6c:95:53:74:88:37:3e:a2:df:23:7f:
                    26:bf:d5:9d:d6:79:41:7a:db:b8:be:ff:df:6b:7a:
                    a3:9f:2b:4c:93:32:31:ad:52:2a:14:fa:d1:9c:4f:
                    1a:c7:58:c1:7f:1e:29:2c:bb:c5:67:ae:82:1c:15:
                    ba:cb:1a:55:10:52:e3:0d:72:b5:40:c2:85:bf:96:
                    c9:8f:1a:55:ab:2c:11:f8:95:b6:4f:23:95:d1:ff:
                    4b:2a:59:e5:58:7a:79:27:c1:60:8f:8c:08:68:95:
                    66:7b:59:b0:23:4f:ca:a5:42:3e:e9:9b:c1:8b:5b:
                    41:a4:54:72:24:df:d4:d5:19:6a:f2:4e:b6:78:59:
                    ed:14:15:47:69:d2:07:be:41:df:f4:55:85:5f:0f:
                    49:69:ad:37:c1:66:65:18:dc:4c:85:15:e7:bb:a5:
                    3d:d4:c7:a1:97:a0:e3:9b:7d:40:83:db:9f:d9:b3:
                    1f:16:8a:d9:63:e7:1a:83:ab:8a:df:5b:40:16:ed:
                    a9:ce:31:3d:9a:e0:60:e5:5b:d7:37:4a:04:57:e2:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:3F:D6:D8:12:06:15:CA:64:A4:E4:E6:2F:D8:68:87:3A:CF:0D
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:01:91:65:79:db:40:4f:94:93:4c:a0:4a:ca:b6:27:05:
         b0:51:d6:c3:b6:34:c1:3d:03:dd:5c:c5:8e:40:e7:c4:82:82:
         4a:5f:39:c1:29:82:e9:5e:3e:47:73:60:45:d5:3e:91:a1:b7:
         d4:21:89:0e:d2:75:c3:d4:dc:95:f3:bf:0a:d1:7e:91:75:02:
         7f:e1:f2:fc:93:d0:6d:7f:d4:2d:60:ed:84:86:ba:c3:54:a2:
         78:31:e6:b3:f3:1c:a2:f6:39:ca:0f:ed:c0:05:2f:30:d5:8b:
         74:50:a9:2e:ac:5e:f9:f3:64:1e:f0:ef:51:e9:ed:4b:5d:ad:
         96:00:50:1e:e7:fd:41:1f:31:28:e7:ae:0f:be:74:ee:20:c4:
         ea:ac:a7:9a:c4:de:c1:c7:5e:f1:93:c2:ca:05:7b:78:9b:ef:
         9c:ca:f6:b9:10:d3:13:0b:1f:12:ac:28:3d:ee:34:db:8e:b0:
         2b:93:e0:f1:81:5a:4e:7e:8d:45:4a:8b:e7:74:b0:f7:c1:f6:
         da:dc:29:c9:12:14:39:31:26:5a:02:6e:56:fb:aa:e9:54:fd:
         c8:7d:e8:9f:60:bb:ac:6c:3a:8a:9b:e1:13:7a:ff:55:82:54:
         60:5f:ef:a2:63:91:9b:f1:27:f5:2e:88:43:ad:75:8e:ea:78:
         87:65:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:30 2026 by rpki-client