Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          dyDUmo3mT/0aieM0jhY5OCt+nV8Y7un8kY70HsO9/Cg=
Subject key identifier:   2D:5A:83:09:85:C6:B8:AB:43:BE:AC:A0:F6:DA:12:17:B3:A5:8A:1C
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       019D382E8E874F243563C0D29042AFDDD715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          078B
Signing time:             Sun 29 Mar 2026 06:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:08 +0000
Files and hashes:         1: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (hash: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: gFM09tWSgNhwrgA9o/L2+MrC4PVOIzizjxXxGJz9b0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:8e:87:4f:24:35:63:c0:d2:90:42:af:dd:d7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Mar 29 06:01:08 2026 GMT
            Not After : Mar 30 06:01:08 2026 GMT
        Subject: CN=2d5a830985c6b8ab43beaca0f6da1217b3a58a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:6b:ef:b6:3b:6c:fe:86:20:50:b3:41:4b:
                    5b:d2:6f:71:81:2a:d2:4e:df:cb:2b:a6:97:24:8e:
                    3c:a4:92:07:58:2a:48:c2:56:ae:5e:86:b7:d5:46:
                    42:a9:f3:26:8a:ba:72:c0:7f:8a:40:bc:c3:2a:ec:
                    2f:95:b6:2f:f5:6e:72:65:d3:db:12:4a:f0:c0:ac:
                    95:a4:89:48:3b:90:bf:b6:7c:cd:ce:e3:5d:c6:df:
                    38:df:99:5d:33:7a:80:47:c1:4a:5d:c6:79:37:db:
                    3a:5a:c0:3c:05:38:ee:04:0a:f1:65:1e:f7:35:f1:
                    a3:57:13:b0:e9:a4:cb:43:89:bc:7c:08:c4:5a:a0:
                    1b:1f:0d:c4:84:a4:3d:b9:96:0d:23:bd:79:e3:5e:
                    b6:dc:5e:90:f8:9d:14:31:9f:b6:47:54:7d:70:71:
                    86:68:62:02:cf:13:b1:8d:ef:08:07:f1:af:4d:44:
                    ef:44:70:8a:f2:2a:f1:32:e3:55:7e:4b:0f:f3:bc:
                    4b:8c:74:42:bb:d6:b7:30:59:0d:d9:79:91:b3:7c:
                    35:4e:50:5f:b0:89:b5:60:52:37:f1:f2:e2:e3:85:
                    cd:e1:90:1d:0d:35:7e:a1:6a:9a:3f:ae:cd:5c:df:
                    9e:bb:65:72:f2:d5:d6:79:d9:4c:c4:81:a5:49:84:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5A:83:09:85:C6:B8:AB:43:BE:AC:A0:F6:DA:12:17:B3:A5:8A:1C
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:1e:88:6b:ec:16:0b:f0:ab:37:0b:c3:77:57:f5:a2:e3:
         60:e6:11:bc:05:3b:ce:c9:cd:5d:eb:0b:1d:83:71:05:23:42:
         27:e0:50:db:12:12:bd:6c:f2:a6:1a:f5:a2:e8:52:90:3c:4e:
         e6:e5:f2:ab:b9:a2:e5:9c:39:52:ad:13:85:bc:2c:53:6f:0e:
         43:c5:83:03:bc:ea:83:b2:c3:c0:b6:10:04:f6:12:20:35:24:
         43:09:0b:6f:3e:7c:a7:72:a3:77:73:21:4f:db:74:f5:97:4d:
         99:f8:81:6a:88:6f:fc:31:fe:ea:0d:55:9b:33:02:65:51:9d:
         33:42:87:38:97:c2:22:29:0f:2c:5c:3f:be:3b:f9:db:09:ca:
         3b:55:fc:7f:ec:d8:ab:83:be:22:78:0e:31:ad:12:53:c3:13:
         66:b5:4c:74:96:3b:56:9b:7b:70:b2:78:f0:09:c4:d9:7b:f5:
         e6:15:55:8b:5b:2e:2b:e3:44:4e:6c:51:26:9b:5e:56:91:11:
         57:a1:33:c0:fd:31:c6:bb:20:ae:40:85:da:b9:53:1c:2f:f0:
         bd:da:06:f9:bd:4c:d8:47:9e:26:6f:88:ca:2c:d0:52:29:0f:
         08:6e:21:ab:e6:5b:f7:69:08:bc:fc:8b:95:75:fc:6e:32:85:
         e0:c1:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:47 2026 by rpki-client