Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File:                     V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier:          XZ+lJ4Ps9o9EIkZQeMPleiKOx+xiMq1T0EIhFbib3jE=
Subject key identifier:   B2:E4:65:84:6F:39:B2:7E:CA:2D:7D:97:30:70:49:E5:28:0C:CD:F4
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer:       /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial:       019D390A4D2B9C4633209C3AD03E3F11E672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number:          084E
Signing time:             Sun 29 Mar 2026 10:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:09 +0000
Files and hashes:         1: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: igT/D3K/g5lMfHUWdjq+l3wUo3I90ke3wo3nLYpHa8M=)
                          2: ZgQVnt2sCJCW5WJtm6rkh6ZTXa0.roa (hash: AZk9Jwr5toaqA9609l05vDG4SlK9prtZxrMQmnM4Ybs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:4d:2b:9c:46:33:20:9c:3a:d0:3e:3f:11:e6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
        Validity
            Not Before: Mar 29 10:01:09 2026 GMT
            Not After : Mar 30 10:01:09 2026 GMT
        Subject: CN=b2e465846f39b27eca2d7d97307049e5280ccdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:f2:1a:6b:d0:67:a7:20:d5:19:68:09:77:
                    6c:0d:28:f7:63:44:68:d7:12:fd:c1:70:8c:7a:7c:
                    2a:c5:57:4c:c0:18:a3:c5:02:0c:97:e6:06:ba:6c:
                    07:bd:3b:24:22:57:9a:e6:08:5b:bc:95:17:db:22:
                    4f:d9:1a:eb:e7:d7:9c:8a:83:3b:df:49:64:7d:a0:
                    fd:48:b0:53:80:2e:96:0f:fc:a0:4f:7d:7c:27:f1:
                    c4:4d:cb:88:01:ce:70:06:37:c4:57:6e:d8:c5:13:
                    ad:9d:9e:45:be:05:0f:41:45:1b:95:ea:6e:17:f0:
                    d8:8d:86:ea:fa:64:c5:80:88:51:0a:92:99:6b:2c:
                    9e:da:2f:26:1b:4d:4e:f0:02:92:4b:12:5a:10:f9:
                    97:4c:76:54:2c:b9:4b:cc:ef:4f:28:e9:ba:d4:a1:
                    fa:d6:0b:c2:9e:45:cc:81:28:39:50:fc:e4:f6:f3:
                    2e:59:a0:c5:f5:40:4d:a5:1d:24:a7:91:69:f5:e8:
                    5e:ab:70:42:50:1d:42:02:ea:61:66:2f:1b:5c:86:
                    c4:d8:b8:a5:46:3d:e0:c7:88:a5:e1:a6:41:02:b8:
                    39:56:90:c2:f5:3c:d2:9b:fe:cf:64:72:68:21:55:
                    ef:bb:b4:b5:6f:5c:da:20:4e:69:f8:57:ff:2c:46:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:65:84:6F:39:B2:7E:CA:2D:7D:97:30:70:49:E5:28:0C:CD:F4
            X509v3 Authority Key Identifier:
                keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:67:18:0d:ad:be:95:6d:5e:f6:bf:c3:04:23:74:ba:e8:
         cf:13:2f:9a:ae:92:0c:a0:02:ac:8a:f1:af:56:b6:af:40:c0:
         3d:78:93:3e:a4:e5:07:ef:66:5b:d7:dc:18:ac:ca:d6:6c:d3:
         86:6b:78:c9:c4:4f:76:6a:3a:3a:5b:ba:8b:6a:eb:ed:6d:e0:
         ac:6b:17:e7:fc:52:87:28:24:ef:6e:82:14:e0:47:67:fc:bf:
         ad:a9:79:cd:4a:d4:5f:4e:be:9c:41:e7:9f:cd:46:6e:05:73:
         ea:15:a1:ad:19:4e:4d:06:38:e9:59:54:8e:77:33:b9:79:20:
         8e:49:ed:9e:a6:b4:12:c7:90:62:e5:fb:63:5a:eb:c0:34:35:
         15:cf:41:fd:cb:08:73:9a:34:94:09:ba:59:3b:86:ed:7a:87:
         c5:14:46:18:b1:0a:46:87:12:63:7a:e8:04:e8:56:ce:69:8d:
         3e:3f:a2:6b:8b:bb:0d:d7:22:10:ca:23:e2:3c:3a:f1:b4:96:
         ec:76:06:d1:a1:ac:af:00:f1:21:c8:87:b6:99:3d:6e:cd:bd:
         ea:de:af:d1:64:dd:6a:8e:e3:af:08:4d:4a:60:54:3f:12:4e:
         c3:d1:ae:7f:d6:9b:56:e7:2d:79:91:3c:ea:b0:e0:c7:a1:de:
         d7:45:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:02 2026 by rpki-client