Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File:                     K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier:          NU9rBOieNA+xS+6UAnI5sruhnSw+15KA+1H7szprq6k=
Subject key identifier:   E7:D6:77:0B:AF:3A:41:4E:9D:8E:C5:F5:4B:73:60:71:35:26:B6:83
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer:       /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial:       019D0C3135BC3913D55EE9D6A157DBB597BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number:          076E
Signing time:             Fri 20 Mar 2026 17:00:44 +0000
Manifest this update:     Fri 20 Mar 2026 17:00:44 +0000
Manifest next update:     Sat 21 Mar 2026 17:00:44 +0000
Files and hashes:         1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
                          2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: tgBJEtt6w67vZ7zlGfSKFHzE6qy4YOeNyHH5si9YWVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0c:31:35:bc:39:13:d5:5e:e9:d6:a1:57:db:b5:97:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
        Validity
            Not Before: Mar 20 17:00:44 2026 GMT
            Not After : Mar 21 17:00:44 2026 GMT
        Subject: CN=e7d6770baf3a414e9d8ec5f54b7360713526b683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:e7:97:c4:b7:c8:fe:b3:5f:16:b5:cc:98:
                    02:a9:7c:5c:d8:e2:cf:4c:4c:e1:f1:d5:ef:27:a6:
                    90:bb:c5:0b:fa:40:c8:60:94:45:bf:ad:52:97:b2:
                    16:8a:22:9e:07:bf:16:50:39:92:4a:52:a3:35:b7:
                    a1:6e:e5:ca:86:c1:0f:d3:78:fd:a2:06:d9:bb:14:
                    6e:28:0a:03:99:10:3d:e5:31:92:6c:7d:5c:cb:df:
                    cd:ff:72:da:08:39:8f:a0:ad:d6:ad:18:e8:36:8d:
                    ba:b9:b8:5f:aa:df:82:c4:2b:13:c2:5a:20:05:b1:
                    07:93:a9:f7:ef:a7:fe:6c:86:d9:39:3b:ec:bf:f3:
                    30:ba:cd:ec:cf:5b:ca:fd:71:b0:75:58:3f:64:21:
                    e0:30:99:b2:09:be:a8:74:11:b9:f0:e1:bf:f2:3e:
                    9b:a5:19:06:67:ee:92:53:4a:5b:b0:ee:d8:ce:1c:
                    82:90:1d:9b:7a:54:9a:b8:e3:ec:4d:05:fc:75:f3:
                    be:43:35:54:dc:c4:65:c5:e8:d4:76:b0:55:3c:ab:
                    44:b7:80:be:e4:fc:d9:7a:3a:01:58:31:8f:ff:79:
                    86:df:62:b1:36:c5:f0:34:2a:8e:3f:54:59:d0:b0:
                    11:16:f8:08:4c:a9:de:f5:3c:3f:13:d8:f9:dd:d7:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:77:0B:AF:3A:41:4E:9D:8E:C5:F5:4B:73:60:71:35:26:B6:83
            X509v3 Authority Key Identifier:
                keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:63:49:ac:e0:61:6b:38:fa:26:6a:a8:41:f7:85:33:5e:
         ce:67:d0:a6:f8:60:2b:51:65:79:d4:66:25:36:74:85:a4:80:
         ac:bd:fc:29:fc:b3:76:62:34:b7:35:95:6b:25:76:fb:71:bf:
         5b:9f:77:13:34:f0:f6:36:52:95:a3:67:80:b6:13:bb:08:66:
         5d:3a:12:a1:ff:60:a1:43:02:84:30:97:d4:cc:83:4c:7f:71:
         72:3d:ae:d9:e9:92:97:71:4d:39:87:41:06:0c:9d:87:c5:18:
         e8:64:f3:95:71:0f:5e:a0:19:6e:60:32:a4:b4:f8:a3:bd:98:
         15:17:6b:d9:f4:0c:7e:d6:f2:02:61:f2:bf:14:f4:03:74:b7:
         9b:0c:fa:35:6c:ee:d6:fd:ea:8a:2d:e7:42:82:1d:e2:ed:b3:
         50:88:2d:5c:fd:65:b6:e6:15:93:54:a7:6a:58:c9:f0:3a:6d:
         8d:81:7e:b4:a0:81:84:a4:5d:2b:60:c3:80:63:d4:09:ad:35:
         b5:37:be:eb:56:27:b8:4b:a5:e8:79:12:e0:07:01:f5:ec:7a:
         f0:5e:84:a7:84:d7:97:a0:44:7d:d3:c4:90:5a:9f:61:96:1c:
         05:56:05:63:46:cd:d6:08:cb:e9:9b:33:4b:b2:5b:1f:6d:4f:
         5e:60:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 19:17:19 2026 by rpki-client