Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
File:                     fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json)
Hash identifier:          IABUql2wmSPNNVnV5/8bnqJzPTXet7uDxhbo3iR4CIo=
Subject key identifier:   AA:C7:6D:87:7D:4D:F5:7C:08:06:66:5A:58:5E:36:00:49:F7:D0:2A
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Certificate issuer:       /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial:       019CE55B03D09E4F30C6EBB13FC5AF78AD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
Manifest number:          12A1
Signing time:             Fri 13 Mar 2026 04:01:12 +0000
Manifest this update:     Fri 13 Mar 2026 04:01:12 +0000
Manifest next update:     Sat 14 Mar 2026 04:01:12 +0000
Files and hashes:         1: MpwIY7Ebi8bx833CV_5moln-CB0.roa (hash: IcPeEwSEZRPBHIQ02cGM6FjSpHotFVeRsIkfWF3fy2s=)
                          2: dwAqRvLPaFJvT81jjmY8z6OAffc.roa (hash: U+GbR8Ko/UO/PdAN8+pRGxNFE5XM37ujAKQFqPLbxQ4=)
                          3: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: wVjG5a2Swx9315h1mVYtdQKTHk+GfSPfohUpqEDiNlc=)
                          4: mstzb26BC_IbEF1cblkahySAWUo.roa (hash: ovsvskCBj0pzy7ZuC+YBMlAXo2c5eeshaQejsMGZzOU=)
                          5: y8Dvt69ipHk19Pv-nfYfzC1AAtk.roa (hash: hK90cOpXZcr7Ami6NbNqe49Tz8xd4CBkB2ANlYx8mv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5b:03:d0:9e:4f:30:c6:eb:b1:3f:c5:af:78:ad:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
        Validity
            Not Before: Mar 13 04:01:12 2026 GMT
            Not After : Mar 14 04:01:12 2026 GMT
        Subject: CN=aac76d877d4df57c0806665a585e360049f7d02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:a0:03:54:30:40:10:39:2c:80:98:18:14:
                    c8:79:4f:dd:72:2d:43:2c:da:58:b0:ef:33:aa:01:
                    3f:49:15:f4:86:d5:cb:1d:81:22:7a:ab:d9:31:ca:
                    73:fc:74:c3:6d:72:61:ba:97:57:a3:bc:fc:62:18:
                    39:c0:cd:6f:29:db:22:e7:0e:c2:d4:d4:95:05:4c:
                    23:9a:6e:25:f5:53:9e:f9:2d:85:a5:8f:77:28:01:
                    66:84:60:9b:9d:36:c8:20:15:4a:7b:ae:f1:22:ee:
                    fc:61:95:89:cd:d6:5e:26:73:d6:e0:62:43:1b:e5:
                    0f:88:02:96:22:c9:82:2d:1e:65:4a:93:38:45:c4:
                    fe:ed:7f:c8:3d:8a:13:c7:40:fb:5d:94:a9:bf:2f:
                    d6:25:4e:5a:ce:fc:64:66:56:a1:f8:56:cd:18:3c:
                    f7:d9:0d:ce:8a:57:bb:29:99:65:7c:58:2e:2f:b2:
                    a1:32:0c:20:aa:68:51:d8:c7:75:fe:90:9a:1a:1e:
                    6d:c6:e9:57:ab:7c:57:ef:3d:1a:65:d0:d4:b0:e7:
                    04:ec:6a:13:a9:fa:78:6c:81:a5:2e:a9:7a:02:08:
                    e8:ca:d3:40:b5:50:44:c2:fd:06:5e:80:15:48:1c:
                    4a:b8:9a:30:4f:40:a5:ad:bb:83:aa:c5:ad:2a:e4:
                    64:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C7:6D:87:7D:4D:F5:7C:08:06:66:5A:58:5E:36:00:49:F7:D0:2A
            X509v3 Authority Key Identifier:
                keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:5d:09:04:51:cf:99:86:92:06:45:5a:c3:0e:09:33:84:
         10:14:ad:ef:a4:0c:e7:36:fc:d1:8e:12:5e:fa:10:72:82:92:
         da:20:7e:37:7d:f7:d2:9e:53:1d:75:b3:e9:28:4c:63:66:67:
         e1:68:f1:bc:bd:26:0d:b4:ea:7d:b9:a9:40:4f:b1:4e:93:64:
         4f:af:fb:4a:8f:46:f0:49:74:af:2b:33:40:d5:00:a3:7e:ad:
         66:15:9a:49:4f:5a:fe:81:9f:00:7e:a4:6f:ed:b0:69:1a:d1:
         a4:b8:af:48:3f:b4:3f:ae:b7:3c:78:82:42:65:4c:5b:9d:8b:
         6b:63:01:26:9a:e9:ed:8a:35:a6:c7:cc:88:f9:17:11:68:20:
         fb:c7:5a:a9:d9:a5:4d:d8:9f:cc:dc:0f:8e:74:ea:ec:14:c7:
         17:bd:fb:e6:fd:ad:06:ab:09:ef:65:98:f3:95:a0:cb:cf:ea:
         ed:47:eb:ee:f4:28:d1:4d:96:e9:b9:2f:0e:af:66:3c:49:cc:
         cd:2b:e2:6a:90:98:92:85:ad:3c:cf:b1:90:7c:b0:05:83:67:
         ab:90:6c:55:d4:68:d6:7f:50:3f:09:72:a7:64:d3:3b:bb:25:
         ff:4d:f5:fd:90:90:28:39:41:88:e5:ce:4e:db:d2:49:81:7e:
         57:a3:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:55 2026 by rpki-client