Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          dEP2GQNUKpqIBHQv4IVMRhm/j6QNG8mYliYY/hA8zaI=
Subject key identifier:   D6:3C:78:F0:5E:98:C0:3D:75:82:0E:7A:86:7F:91:DB:51:26:1B:03
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       019D37C12DF7811BBD7FFAA719D91040EC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          0757
Signing time:             Sun 29 Mar 2026 04:01:40 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:40 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:40 +0000
Files and hashes:         1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
                          2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
                          3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 31gOMLPrDUAj44f2UGL8mCfeBL2jmfw6ZsMZjb0Gsvc=)
                          4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:2d:f7:81:1b:bd:7f:fa:a7:19:d9:10:40:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Mar 29 04:01:40 2026 GMT
            Not After : Mar 30 04:01:40 2026 GMT
        Subject: CN=d63c78f05e98c03d75820e7a867f91db51261b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:e7:27:49:4b:19:09:5e:e2:ce:b1:83:15:
                    ec:0c:c8:42:c5:1d:d4:42:0b:0c:77:61:be:c2:4a:
                    f8:ca:ab:a4:2c:b4:03:df:99:40:9d:94:6b:2a:cf:
                    c5:2c:02:b9:9e:e5:99:12:59:37:75:c9:a0:cd:fd:
                    58:89:c8:54:52:da:88:b1:64:08:de:3f:8f:69:8c:
                    64:8e:8e:e3:a3:c4:10:3c:54:e5:b9:cd:f3:cc:61:
                    8c:5b:af:f4:31:28:ba:81:bf:dc:24:69:90:7d:d4:
                    59:74:cb:47:40:94:ef:77:88:63:23:a3:d7:cd:cf:
                    0d:60:ba:7d:81:58:1e:44:1f:ff:f6:5b:09:43:46:
                    c8:dd:ac:b6:42:c9:f6:a6:7e:3e:48:4d:6b:17:ca:
                    5d:4d:5a:c3:3f:c3:81:e5:56:82:c1:6f:72:b0:82:
                    f7:36:5a:41:88:fb:f6:84:53:58:0b:c4:d8:32:bb:
                    36:36:ec:2e:43:3d:67:52:56:b5:b2:4d:23:8d:fd:
                    e6:e5:a8:7d:b7:a1:ca:82:92:5a:48:29:28:8a:bd:
                    cb:80:89:de:f4:00:60:a1:45:2d:9d:c5:7c:f7:9d:
                    5f:70:fc:0b:07:aa:f4:35:d4:c1:5e:34:ee:21:9c:
                    3a:ad:e1:fb:69:e2:3b:c5:38:ee:b6:26:4b:95:ba:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3C:78:F0:5E:98:C0:3D:75:82:0E:7A:86:7F:91:DB:51:26:1B:03
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:c8:9f:b6:99:89:ba:49:fc:dd:b3:b1:ec:78:d6:f0:37:
         a5:b6:76:8a:40:da:d5:6f:b0:d9:00:59:a8:2d:62:03:e2:9e:
         61:a1:4c:cd:cf:d2:55:bf:84:c7:47:ec:3d:f9:bd:fa:35:19:
         7c:01:c3:3a:d1:e0:78:36:03:42:be:1c:ad:20:36:eb:45:db:
         cf:ec:49:7d:00:c9:49:73:38:1f:a4:9d:b8:ff:9a:7d:98:18:
         2d:4a:8b:c4:6d:d9:6d:2e:d5:34:21:2d:6c:ea:78:c6:f5:04:
         19:b7:a6:2e:b8:c0:d4:6c:55:b1:41:62:53:16:1e:bd:2b:70:
         30:5d:a8:06:0c:79:0b:2a:9a:48:71:7f:3a:39:d5:b6:7e:e4:
         4a:36:8e:9f:dd:a2:ae:e5:ee:02:b3:0f:53:ac:cb:93:80:e6:
         8c:24:b7:13:e6:b4:1b:f3:4c:36:20:fd:81:12:6f:9d:cb:89:
         e0:d5:b3:64:8a:41:dd:ae:a4:9d:a6:89:e7:0a:8c:77:ef:3e:
         59:9b:02:7f:7f:1c:b8:b1:2c:e2:a6:e3:50:be:3b:96:a3:ff:
         00:14:08:c2:49:86:f1:c2:88:53:b9:60:85:02:ee:97:18:5b:
         d6:2d:a3:35:60:97:41:d5:76:8c:49:5e:e6:11:df:6a:39:35:
         58:e1:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:53 2026 by rpki-client