Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
File:                     7HRpxUKO75q3aNntbCyJRDprtL4.mft (raw, json)
Hash identifier:          EF2ha7U9/vdTVNle6q5Ggjc2bWu8BnmIzj9sYMu5V00=
Subject key identifier:   E1:C4:FE:1B:F7:68:31:66:72:45:3F:30:80:2A:1B:C5:2A:A0:F9:50
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Certificate issuer:       /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial:       019CE5C93DB809180569B2354FDA64CE7B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
Manifest number:          09BD
Signing time:             Fri 13 Mar 2026 06:01:36 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:36 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:36 +0000
Files and hashes:         1: 7HRpxUKO75q3aNntbCyJRDprtL4.crl (hash: V9QoymA9Ft3RbuUuMtiyRpRm+xVrGqFvi9qOtOV5SMM=)
                          2: JLAcQdrJwGVEWdvHyd1hPPx0cDw.roa (hash: vCqJpG/lxSxpjHNPVDDL/DRL6GU6s598QEGDhYfGSms=)
                          3: RekGs4q2kSG8UfpxTWCevGhqZz4.roa (hash: ILH2HzNROZxqP8GUSsLUmNGqOfm/LyrffvYqEpNZNPk=)
                          4: g_zg-zFG0YjcYdCq7B9NX8bqoSM.roa (hash: XNai44WiN46wXrrNfjnUMmIbT8tDeP8H+2bJlAFOYkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:3d:b8:09:18:05:69:b2:35:4f:da:64:ce:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
        Validity
            Not Before: Mar 13 06:01:36 2026 GMT
            Not After : Mar 14 06:01:36 2026 GMT
        Subject: CN=e1c4fe1bf768316672453f30802a1bc52aa0f950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:e7:5d:e7:67:a8:5e:9a:09:e3:5b:6c:e0:
                    b1:a2:d3:94:de:a0:7f:f1:7b:90:21:38:ba:3c:38:
                    93:b6:05:d2:50:ef:be:37:98:25:c1:ab:c5:5c:02:
                    9d:4a:5b:68:c4:fd:d0:41:63:7c:5e:51:c6:d1:a0:
                    10:d8:1f:59:27:36:1c:28:59:e8:23:3a:ac:28:76:
                    25:02:99:4c:e8:d5:99:cc:c0:29:bb:6f:74:79:5c:
                    82:d0:ab:b0:09:a6:9a:4e:4e:c8:62:a8:00:9e:7c:
                    9d:1c:9a:90:19:3d:5d:69:39:f1:4f:e4:fa:65:cc:
                    64:09:9d:0c:3f:f5:a2:eb:8f:70:fb:0d:ad:cc:9e:
                    7f:ac:fe:0b:db:a5:71:44:74:bd:ef:d1:fc:92:d4:
                    bb:fb:74:64:d0:0f:08:bf:7d:3a:80:ff:84:0c:04:
                    46:6a:46:de:93:21:9d:d7:fa:e2:a5:19:d4:de:cf:
                    08:4b:1e:f4:08:d1:61:4a:48:4f:06:35:7f:64:f0:
                    c5:86:fa:93:d7:a0:ec:23:78:a9:18:50:8a:f9:bc:
                    ba:bf:1c:57:1a:43:07:6f:3f:29:e4:7c:3c:29:75:
                    83:f5:f7:78:59:2c:ad:7c:a6:1a:56:76:e8:0e:ac:
                    b0:e9:c2:5b:b5:81:2f:19:5a:a5:ec:1b:78:b4:90:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:FE:1B:F7:68:31:66:72:45:3F:30:80:2A:1B:C5:2A:A0:F9:50
            X509v3 Authority Key Identifier:
                keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:69:00:d0:80:de:ec:14:80:a4:38:85:bf:2b:d6:46:ea:
         98:53:b3:44:fc:ac:1c:23:e0:bb:00:9f:26:5f:4d:18:94:5d:
         9b:33:1c:88:8c:01:f7:7e:1e:37:c2:4a:f1:a5:9b:0f:81:ab:
         bf:d4:df:9e:e3:1e:c6:b3:46:b1:6b:fe:16:a1:eb:62:d4:5d:
         a7:37:16:5c:75:c7:5b:7d:1b:50:6a:23:9d:81:d4:e1:52:90:
         31:0b:35:9a:5f:fb:01:c3:8f:2f:39:9f:84:23:1d:81:49:fa:
         f1:c4:79:16:99:4b:f1:04:bd:6c:13:9a:9e:3c:43:95:59:86:
         dd:87:dc:46:eb:b6:56:8a:d1:b7:80:40:c1:07:c3:8d:73:35:
         9e:e7:99:73:d4:f7:75:e2:2d:05:2c:f6:82:e9:98:33:09:a7:
         8d:31:14:26:4f:e4:8a:e4:21:f5:af:69:76:f0:4e:e4:08:a6:
         c6:76:6d:f3:25:7e:78:0f:37:39:05:ed:6e:dd:5f:90:fc:63:
         c0:73:80:c0:ec:4f:54:c8:45:41:a0:c4:bf:2e:10:38:ba:b6:
         1c:6c:3b:8b:ee:02:cd:ee:c0:80:9b:ab:0f:d5:51:9e:66:61:
         91:a5:6f:a5:dc:72:4f:30:2f:1b:c2:ff:06:d4:6c:cf:1f:c9:
         c7:49:2b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyT24CRgFabI1T9pkznsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzQ2OWM1NDI4ZWVmOWFiNzY4ZDllZDZjMmM4OTQ0M2E2
YmI0YmUwHhcNMjYwMzEzMDYwMTM2WhcNMjYwMzE0MDYwMTM2WjAzMTEwLwYDVQQD
EyhlMWM0ZmUxYmY3NjgzMTY2NzI0NTNmMzA4MDJhMWJjNTJhYTBmOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GrnXednqF6aCeNbbOCxotOU3qB/
8XuQITi6PDiTtgXSUO++N5glwavFXAKdSltoxP3QQWN8XlHG0aAQ2B9ZJzYcKFno
IzqsKHYlAplM6NWZzMApu290eVyC0KuwCaaaTk7IYqgAnnydHJqQGT1daTnxT+T6
ZcxkCZ0MP/Wi649w+w2tzJ5/rP4L26VxRHS979H8ktS7+3Rk0A8Iv306gP+EDARG
akbekyGd1/ripRnU3s8ISx70CNFhSkhPBjV/ZPDFhvqT16DsI3ipGFCK+by6vxxX
GkMHbz8p5Hw8KXWD9fd4WSytfKYaVnboDqyw6cJbtYEvGVql7Bt4tJCxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHE/hv3aDFmckU/MIAqG8UqoPlQMB8GA1UdIwQY
MBaAFOx0acVCju+at2jZ7WwsiUQ6a7S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQt
OGRlZTFkYTEwNzQxLzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQtOGRlZTFkYTEwNzQx
LzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGZpANCA
3uwUgKQ4hb8r1kbqmFOzRPysHCPguwCfJl9NGJRdmzMciIwB934eN8JK8aWbD4Gr
v9TfnuMexrNGsWv+FqHrYtRdpzcWXHXHW30bUGojnYHU4VKQMQs1ml/7AcOPLzmf
hCMdgUn68cR5FplL8QS9bBOanjxDlVmG3YfcRuu2VorRt4BAwQfDjXM1nueZc9T3
deItBSz2gumYMwmnjTEUJk/kiuQh9a9pdvBO5AimxnZt8yV+eA83OQXtbt1fkPxj
wHOAwOxPVMhFQaDEvy4QOLq2HGw7i+4Cze7AgJurD9VRnmZhkaVvpdxyTzAvG8L/
BtRszx/Jx0kriA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:31:29 2026 by rpki-client