Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          Sai3bfYt0MpGE4O6JOlvY50P/ZiyLwQGV9JIoVbD3D8=
Subject key identifier:   53:82:A1:37:A6:26:19:8F:A4:24:9C:03:9F:21:82:95:03:B2:44:AD
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       019CE9A61E99C994427A93399BAE55E8A7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          15A7
Signing time:             Sat 14 Mar 2026 00:01:43 +0000
Manifest this update:     Sat 14 Mar 2026 00:01:43 +0000
Manifest next update:     Sun 15 Mar 2026 00:01:43 +0000
Files and hashes:         1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
                          2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
                          3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: F+ZqrIDhNhMnFJbL4+Q85q7+I9YlmSCWuWM90C5jay8=)
                          4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:a6:1e:99:c9:94:42:7a:93:39:9b:ae:55:e8:a7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Mar 14 00:01:43 2026 GMT
            Not After : Mar 15 00:01:43 2026 GMT
        Subject: CN=5382a137a626198fa4249c039f21829503b244ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:c9:65:18:14:10:93:56:07:30:2d:70:25:
                    dd:0a:bc:c2:f3:5b:22:59:d1:c1:7d:17:1d:65:21:
                    d3:f3:a4:27:42:1e:0d:b0:4d:39:23:66:97:cc:0e:
                    a5:83:12:20:e5:31:a4:17:e4:74:8d:03:74:29:a6:
                    db:36:b1:4b:ea:d7:b5:52:e6:57:91:ca:a4:bd:72:
                    9c:df:7e:7c:5f:5b:6d:51:80:bd:ac:27:ce:60:7c:
                    af:91:23:e6:0c:22:91:97:ef:81:a6:21:7f:e1:bf:
                    e1:f1:b8:8c:e4:f6:cd:af:57:cc:8a:49:90:95:32:
                    ea:df:9e:54:0d:c2:56:24:4b:19:16:b0:bc:8f:c9:
                    8d:ed:08:65:61:7f:6a:40:4b:2e:a8:a7:a6:1c:cc:
                    cd:df:43:08:22:d4:21:8a:e0:6d:b3:fb:e1:c6:73:
                    e8:8a:01:02:75:c2:50:45:83:b7:aa:87:d0:50:2b:
                    1e:84:0d:1d:e7:61:fe:d6:15:6c:cc:1f:4c:7b:2a:
                    46:b2:04:c1:3d:27:53:80:71:80:68:73:6b:15:f0:
                    91:45:b9:ed:0d:54:64:4d:0c:76:20:0c:0f:02:7b:
                    1c:c4:a8:0c:cb:d3:5d:2c:26:e1:f2:1b:26:f7:24:
                    ae:39:12:24:53:4b:0f:1c:90:2b:51:84:dd:53:81:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:82:A1:37:A6:26:19:8F:A4:24:9C:03:9F:21:82:95:03:B2:44:AD
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:54:0f:11:20:68:2d:ee:64:2e:09:bf:95:47:7f:a1:d2:99:
         3a:ef:e0:30:c5:40:31:fe:03:cb:28:e5:ef:e3:55:e0:bd:74:
         ef:50:bc:7c:c5:f9:48:7f:73:b1:72:6c:b8:fb:d8:ba:d4:35:
         a0:26:e4:62:77:4b:31:a7:39:5d:f3:bb:68:8d:eb:37:97:41:
         b6:be:75:3e:a0:c3:b4:a6:2c:b8:63:d0:d5:5b:45:7d:ca:cd:
         42:62:04:98:01:df:94:da:2d:1e:fa:b8:58:f9:3e:ed:3e:36:
         dc:ef:42:59:b1:75:ed:0f:2b:bc:67:e4:d7:11:47:c1:c9:22:
         a1:4a:d6:37:30:e8:0c:ca:04:40:12:e3:aa:d5:23:f8:81:17:
         76:e1:c9:3f:a5:42:fe:ce:96:59:da:51:b7:f1:ee:17:3e:2b:
         24:f2:5d:d4:f3:4e:06:bd:dd:d1:af:b2:3c:03:f2:92:47:94:
         66:0d:ac:4c:54:b1:43:75:f7:0a:d2:12:d4:4a:a8:6a:0f:08:
         65:4b:99:ac:37:12:c6:a0:4f:8f:b9:8e:bf:d5:d1:08:06:da:
         fc:96:62:a4:22:c2:e8:ba:39:68:e6:99:30:f5:8a:85:e0:d1:
         63:37:01:56:45:94:23:3f:e3:b6:52:7a:b2:ff:46:72:31:c0:
         16:f9:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:04:25 2026 by rpki-client