Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File:                     7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier:          vHUgHCaVdLYq5d83jmuvBzNOs3kLptGVBMqiAEo0KGc=
Subject key identifier:   03:0E:DC:0B:88:F3:1D:58:66:E4:15:E9:89:29:0D:10:35:9B:41:3B
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer:       /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial:       019D38D2D1C780E6434A561D915484DB0AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number:          0348
Signing time:             Sun 29 Mar 2026 09:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:32 +0000
Files and hashes:         1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: h+T8V1GzEvraiRwErC+seVusHHh7dfBkXaPdgvORa5E=)
                          2: rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa (hash: lLarn7yxxi9uME4ugayt7nYIZmjyTGZ3vzJyeQkWW7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:d1:c7:80:e6:43:4a:56:1d:91:54:84:db:0a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
        Validity
            Not Before: Mar 29 09:00:32 2026 GMT
            Not After : Mar 30 09:00:32 2026 GMT
        Subject: CN=030edc0b88f31d5866e415e989290d10359b413b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:86:df:51:de:0a:bc:a9:62:e0:d2:59:af:4c:
                    4d:d7:b9:33:db:a8:ca:b2:53:aa:9b:23:88:c6:a2:
                    c1:50:55:22:4c:f5:0c:9e:3c:cf:86:dd:02:69:b3:
                    7b:c4:cb:1a:05:4d:90:d9:5a:c2:94:28:94:0d:87:
                    2c:18:2c:a8:be:cf:e0:b5:a9:96:97:be:dd:4b:d0:
                    6f:74:5d:3d:07:f1:ac:4b:ba:79:8b:ef:0d:65:eb:
                    58:b4:26:db:81:25:ea:ba:b3:3a:7c:80:65:36:f1:
                    4f:17:a8:b1:82:49:a1:01:64:62:26:f2:52:c1:60:
                    ed:58:e1:a7:94:d0:4f:e0:84:6f:c7:55:63:cd:5b:
                    9d:eb:52:4a:98:7d:46:0b:1c:76:a9:55:df:32:8e:
                    d8:36:6e:98:ac:67:e3:14:da:88:55:76:26:9b:c9:
                    4c:d3:a9:a3:d2:e9:ce:d6:11:39:94:94:85:86:4f:
                    13:67:69:f8:6e:cb:5d:70:52:ec:9d:16:43:20:aa:
                    6e:a0:a3:72:87:1e:e0:47:db:2f:d9:e0:c3:70:51:
                    d8:0e:69:e7:a2:eb:44:65:95:0b:be:b6:91:46:18:
                    74:ea:7a:39:c8:de:91:d9:00:04:95:bd:d1:2c:72:
                    00:74:0e:68:95:f1:b2:c3:6f:6c:dc:10:e2:48:06:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0E:DC:0B:88:F3:1D:58:66:E4:15:E9:89:29:0D:10:35:9B:41:3B
            X509v3 Authority Key Identifier:
                keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:70:3e:c0:db:78:a3:82:49:dd:08:5a:1a:a3:e6:2a:9b:ea:
         b2:2c:2b:40:49:40:e7:7f:65:ff:15:9f:ab:94:e7:5c:93:bd:
         7a:34:2e:99:9d:21:b2:09:e1:87:40:43:46:6e:3a:ee:fa:ae:
         13:a3:18:c4:a5:f5:94:65:24:95:c2:0f:b4:22:ce:ab:1e:fb:
         a3:0a:18:ca:34:e4:58:47:7b:0e:88:51:10:08:bc:3f:17:f8:
         4f:f7:bb:ba:4b:4b:49:bb:4c:cd:a6:27:95:92:57:56:8b:38:
         05:c0:a9:0b:47:42:2b:da:0a:76:73:90:64:60:8a:f8:23:5a:
         db:a8:04:95:b8:d2:b3:71:7e:02:a0:fb:cc:72:5a:7d:34:d8:
         38:f2:92:22:b3:c6:db:e5:f4:7e:22:88:9e:03:c5:af:b9:2f:
         3b:e2:3b:c1:9a:8e:82:60:08:a9:11:f3:c1:44:4d:77:cf:fc:
         e4:f4:4e:83:52:4a:7c:98:f6:77:37:3e:41:e5:12:49:f9:59:
         36:f0:f2:f2:84:0d:f9:51:4a:b2:89:f0:6a:2c:a8:8b:2a:d3:
         fd:7e:b2:60:f7:00:ee:7b:f8:60:5f:10:84:62:a0:b8:44:f4:
         d5:9b:3c:7f:9d:84:e5:09:19:8c:e3:04:b7:5e:17:53:7d:3c:
         4c:52:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:21 2026 by rpki-client