Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File:                     MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier:          e0bWUtPhipkny4NdYywNQgWl9GNS420BimtNn7i7OcI=
Subject key identifier:   90:6C:B2:DF:7A:B4:61:CD:7D:DE:AD:F7:01:91:6A:D7:1C:E3:9C:76
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer:       /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial:       019CC7878976D7C5DB17ED20F7A03C5CF30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number:          070F
Signing time:             Sat 07 Mar 2026 09:01:14 +0000
Manifest this update:     Sat 07 Mar 2026 09:01:14 +0000
Manifest next update:     Sun 08 Mar 2026 09:01:14 +0000
Files and hashes:         1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: iGhDnObSdRpOJgNsFiok0qE3tlMpPxufCXtifhzSYps=)
                          2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=)
                          3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:87:89:76:d7:c5:db:17:ed:20:f7:a0:3c:5c:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
        Validity
            Not Before: Mar  7 09:01:14 2026 GMT
            Not After : Mar  8 09:01:14 2026 GMT
        Subject: CN=906cb2df7ab461cd7ddeadf701916ad71ce39c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:30:af:b9:ba:79:73:8f:0c:14:1e:6f:2e:44:
                    c5:b2:fa:08:69:7e:10:8c:cd:30:f2:1a:1f:1d:26:
                    63:d7:e6:c7:9f:d9:6c:3e:85:e2:ac:5a:b5:49:c2:
                    74:e5:1c:e0:45:d7:18:43:1a:98:9a:72:9a:1b:aa:
                    cd:23:37:70:b6:46:2b:bb:c3:0e:5a:e7:d8:a8:a5:
                    84:fc:7b:b3:9c:a4:26:32:12:73:69:ae:91:09:4a:
                    98:23:a3:9f:03:18:60:3c:9f:f6:6b:1a:97:bf:10:
                    94:62:1d:93:cd:5a:26:9a:b9:ad:78:b6:bc:5c:4a:
                    0f:16:ac:6b:04:23:a6:88:d3:bc:ba:db:92:63:90:
                    f7:e5:56:0e:10:fd:46:fb:4f:d5:72:1d:48:cb:68:
                    33:e8:b6:9b:f5:3d:52:27:f5:2b:d7:16:92:e7:48:
                    5f:31:89:de:0d:4a:42:28:a0:4f:4f:f7:5a:c9:51:
                    c8:fd:2e:c3:7b:ec:0d:3b:56:fe:97:bf:eb:5d:19:
                    68:3e:5d:10:5e:70:54:0a:99:39:d3:16:68:82:b4:
                    22:e4:6e:06:c2:e2:2e:75:05:9c:38:10:41:6e:70:
                    0e:b9:d6:21:df:52:e5:03:4a:ee:eb:6d:4c:6c:ce:
                    f0:43:e9:77:32:52:37:b1:e9:84:4c:c0:71:02:3e:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:B2:DF:7A:B4:61:CD:7D:DE:AD:F7:01:91:6A:D7:1C:E3:9C:76
            X509v3 Authority Key Identifier:
                keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:75:18:57:03:b2:41:d1:8f:5a:a3:0b:1f:1a:8a:28:4b:97:
         7d:2e:31:eb:37:16:9a:77:0b:44:3e:45:be:83:7b:4d:49:41:
         f7:ed:82:88:ec:e5:3b:8f:fc:0d:ae:49:40:f0:c0:9e:63:0a:
         81:fe:be:1c:8f:d9:14:51:82:64:ff:72:03:da:6d:98:49:4e:
         73:3f:8a:52:22:ba:57:7f:af:dc:74:07:6c:10:1a:fe:7a:c3:
         9c:1a:50:8e:f8:a5:bc:8b:38:73:22:f6:fe:01:c8:2e:37:36:
         09:60:c3:2e:aa:e5:00:e9:08:24:5f:7e:8b:5f:30:c9:79:cd:
         04:f2:80:a5:7c:9c:85:70:6f:19:26:9c:ba:3e:e6:53:7a:ed:
         20:f1:85:e2:78:9f:35:8d:b4:a2:61:b9:9a:0a:b9:10:1e:9e:
         a5:71:12:f5:a1:98:29:dd:d1:0e:8b:f4:04:cc:ab:bf:7c:cb:
         d2:55:13:9c:81:e5:e2:7e:8c:7e:16:26:7f:db:3f:8e:26:a2:
         b0:6f:08:16:ca:27:8c:fb:8a:97:83:2f:5b:d5:d1:77:a9:03:
         40:c4:55:61:23:63:d3:5f:9a:60:90:e4:d6:02:7b:cf:d4:52:
         c9:ab:97:83:0f:0b:86:ad:12:2c:af:1f:ad:82:81:ed:c8:03:
         e9:41:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:10 2026 by rpki-client