Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File:                     7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier:          tFNoCjgPLuj+WpIDkh5pA0CejO9Wrn4jpIigMJeV7Qw=
Subject key identifier:   6C:36:F5:0A:7A:E8:62:14:89:93:76:4D:12:D0:C0:B6:92:B6:B6:6C
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer:       /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial:       019D05F880D348262506728788DFDFA60879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number:          0155
Signing time:             Thu 19 Mar 2026 12:01:05 +0000
Manifest this update:     Thu 19 Mar 2026 12:01:05 +0000
Manifest next update:     Fri 20 Mar 2026 12:01:05 +0000
Files and hashes:         1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
                          2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: S1pgCqVfSJu30j6wdUeay0feM5uweoicw6riwmANeDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:f8:80:d3:48:26:25:06:72:87:88:df:df:a6:08:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
        Validity
            Not Before: Mar 19 12:01:05 2026 GMT
            Not After : Mar 20 12:01:05 2026 GMT
        Subject: CN=6c36f50a7ae862148993764d12d0c0b692b6b66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:6b:4e:44:35:e4:e4:ad:73:ff:bc:37:3b:
                    5c:ea:89:ea:62:f8:dc:65:e4:69:0a:61:15:8e:27:
                    da:42:ec:ca:da:33:d3:df:8b:f3:f5:75:91:f7:e3:
                    7f:e5:84:3b:b7:2e:a0:57:df:f0:21:fb:28:05:9d:
                    43:62:ab:f2:0a:78:36:96:f0:c9:f7:9c:2a:b5:19:
                    06:89:55:ba:e8:2c:b7:b7:ad:2f:5b:52:7b:b1:77:
                    92:e4:d8:4d:1b:e7:92:f5:f9:83:63:fd:11:af:48:
                    e9:98:b7:2c:c3:74:61:ce:74:57:9b:b1:ae:f0:13:
                    8e:8c:ef:bc:37:cd:f3:d8:b9:b6:3b:42:9f:ce:9c:
                    f7:18:c5:4c:6a:a8:39:cd:79:75:2f:55:69:1f:b0:
                    1b:1e:da:ef:2b:c1:26:70:37:b4:fd:8a:37:81:65:
                    99:ae:eb:dc:a7:0e:1d:71:26:c8:73:da:d3:14:cf:
                    7a:c5:56:ad:bc:2d:b5:9d:92:0b:65:4d:6b:08:c9:
                    79:c3:13:2d:d3:ec:3b:eb:a9:c0:d2:01:20:ce:ee:
                    9f:a8:6e:e7:41:17:d9:31:3c:54:e9:45:89:ba:73:
                    9a:f0:86:00:01:f5:85:1d:fd:fd:eb:b4:53:a8:d6:
                    ac:5d:35:f3:60:82:86:a4:a7:b6:64:45:20:d8:3e:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:F5:0A:7A:E8:62:14:89:93:76:4D:12:D0:C0:B6:92:B6:B6:6C
            X509v3 Authority Key Identifier:
                keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:39:6c:92:65:5f:85:d1:23:8a:d9:7a:57:f7:26:f6:10:21:
         82:ca:44:22:10:d5:1b:77:10:fd:eb:51:20:5f:1a:2d:1c:71:
         b8:02:25:07:43:2b:1e:94:9f:ba:ef:73:d6:8b:4f:12:79:ab:
         d9:1e:eb:df:7f:3c:c9:c0:df:94:a2:0c:62:08:08:49:f0:64:
         16:bb:d7:18:f0:8f:bd:66:95:e8:41:9d:fd:0a:f6:ae:7f:7b:
         a7:70:57:0d:c7:82:2d:85:85:39:48:50:b6:3f:ab:cb:17:ba:
         7b:bc:fd:b0:9c:29:21:62:6f:80:7c:ec:6d:b9:71:6f:30:95:
         4a:32:47:c4:bf:94:27:14:99:07:85:4f:90:ec:db:69:f9:14:
         5c:fc:66:bd:89:04:ae:42:8d:f5:6c:bf:75:4b:65:16:ee:da:
         a0:af:ea:5f:c2:be:56:45:65:c3:5a:37:04:9d:d9:89:02:9e:
         ae:e8:90:c5:83:35:f8:65:a1:83:21:9f:2d:ab:92:1d:59:c8:
         d3:3d:03:38:c3:1a:ce:d8:1a:6e:b0:7a:1e:81:f2:2a:86:48:
         59:09:c8:c3:27:38:0e:be:59:fc:93:7a:d8:c9:d7:99:05:03:
         e7:2a:8d:f1:1a:5e:1c:9d:b1:3b:03:16:fc:ff:40:03:2f:62:
         91:aa:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:22 2026 by rpki-client