Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File:                     BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier:          ZFgk+P6/Q50SItucKUlfrBrQqigDPBxYZKvOxIa3AFg=
Subject key identifier:   0D:6D:6D:B5:C5:A4:0F:A4:D3:7F:FE:6F:50:44:91:8F:C9:97:60:66
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer:       /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial:       019D37894D1CD756A5F78C80C5CBFE504F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number:          01E7
Signing time:             Sun 29 Mar 2026 03:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:38 +0000
Files and hashes:         1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=)
                          2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: mKwIcvR8aIvn7R356S8kalDHBkca5QjjL8FeEzlADLA=)
                          3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=)
                          4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:4d:1c:d7:56:a5:f7:8c:80:c5:cb:fe:50:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
        Validity
            Not Before: Mar 29 03:00:38 2026 GMT
            Not After : Mar 30 03:00:38 2026 GMT
        Subject: CN=0d6d6db5c5a40fa4d37ffe6f5044918fc9976066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:4d:e9:0b:fc:2e:8f:d5:40:c6:9a:fc:c0:
                    eb:a4:c5:af:25:82:c7:fb:0e:5a:4b:8b:95:6c:07:
                    18:3d:23:e2:c4:0b:d8:11:63:f0:ab:d1:18:42:08:
                    ed:70:67:b4:4d:e6:ec:44:b4:e4:69:c4:10:f7:80:
                    1f:1d:44:cf:6e:6d:cb:b5:84:01:e4:8b:7b:6a:8d:
                    e6:93:55:b4:6a:95:a0:f9:91:c0:52:e7:4d:81:22:
                    b6:62:96:0f:c8:1f:40:89:b6:ec:53:b0:30:90:f0:
                    ef:8c:2c:50:bd:2d:2a:19:e4:32:f1:0b:f0:86:dc:
                    25:d8:80:c8:b1:7c:35:81:8c:53:c4:9f:93:c4:d1:
                    7b:3b:c7:00:aa:3a:0b:cd:e7:fa:ee:03:15:df:6a:
                    91:5d:1c:3c:d0:09:fe:11:af:8b:6c:19:f2:47:a8:
                    e5:68:9b:06:85:d4:3b:7f:6b:c3:23:b7:6c:f3:62:
                    72:8a:56:dd:19:0d:d9:62:ec:e8:d1:fd:39:ed:65:
                    f0:f8:59:35:26:15:b2:87:7d:b9:3b:0c:5f:bf:25:
                    13:46:1a:76:fb:0a:f5:ec:9e:96:36:1a:05:f7:23:
                    a4:44:f4:aa:ec:b8:34:fd:c0:2b:be:0c:91:b9:19:
                    37:05:31:49:b5:f0:6c:e2:c4:54:60:20:c5:a1:f6:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:6D:B5:C5:A4:0F:A4:D3:7F:FE:6F:50:44:91:8F:C9:97:60:66
            X509v3 Authority Key Identifier:
                keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:d7:fa:bf:6d:7e:78:40:8f:df:22:d7:28:85:70:e2:3a:
         20:c5:de:5f:a9:d6:d0:66:cf:12:f0:42:10:2f:13:81:d9:00:
         b0:ef:86:ce:c3:b7:97:52:ad:77:8b:9a:ed:c1:ca:cc:ce:c4:
         8c:33:14:c8:f0:c7:89:26:a9:ce:44:9b:54:38:71:53:f0:84:
         a1:4d:dd:cb:d4:89:79:ab:99:bd:ed:53:6e:4b:20:75:bc:1f:
         38:91:ff:ea:86:7f:8e:d0:41:52:1a:c4:77:d5:75:ee:3b:1e:
         75:26:4a:71:ee:4e:b6:96:50:97:40:df:d5:ef:18:e2:60:52:
         66:c1:67:89:87:d3:fe:67:97:05:9c:87:33:b8:3b:d8:11:f6:
         bb:89:89:56:bf:58:50:21:27:df:31:52:6f:0f:9d:00:55:14:
         da:07:f9:47:a5:a7:5c:f2:33:39:de:f9:e1:17:a4:54:2d:ba:
         9b:c1:4d:57:d9:11:b4:e8:90:a9:5e:bb:82:1e:36:07:27:4f:
         71:4b:59:27:5e:a1:59:b6:ea:7e:9f:9d:04:e3:f9:67:ab:9f:
         84:3d:ce:31:1a:ba:9c:5e:a6:2b:09:b4:cf:12:5a:34:01:5d:
         ea:23:ba:2c:ea:de:23:ae:db:47:fb:f5:d8:ad:0a:49:ca:f5:
         31:b7:17:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:53 2026 by rpki-client