Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File:                     Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier:          PCmIzGLI+LoNRRp0W/il6t25t9DVfThe2wTDydABOEo=
Subject key identifier:   B4:FC:77:D3:2B:6F:A8:B4:9B:6A:BD:8C:EE:5D:CC:C0:9B:3A:61:B9
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer:       /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial:       019D390A1C344636DC1C814D05982125871A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number:          07BB
Signing time:             Sun 29 Mar 2026 10:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:56 +0000
Files and hashes:         1: 53lC0H3btLRtkl48pavEGuRV3es.roa (hash: MGSbnJd1vUZpt6uL4RTZOKaqC1aAoTugp6i9dh39DGs=)
                          2: Eu0i8M0_V6p9VckPVnggFrs-yL4.roa (hash: BboyrqZNZfIosj60BishiP+RH7BU4uq0hpH6SfCA1DM=)
                          3: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: aB+C7rbJjUTh32mxPdtJ1hjiHLk0M2faoOrtfrf2B8c=)
                          4: bTs69bYVB-nOMaTSLibF1SO4Eto.roa (hash: WJimykzOdhEHHfw42LRu7rdMqeixLnYLozEu448aBRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:1c:34:46:36:dc:1c:81:4d:05:98:21:25:87:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
        Validity
            Not Before: Mar 29 10:00:56 2026 GMT
            Not After : Mar 30 10:00:56 2026 GMT
        Subject: CN=b4fc77d32b6fa8b49b6abd8cee5dccc09b3a61b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:08:9f:85:f8:8c:1d:95:5f:33:d8:c0:6e:3f:
                    9c:91:04:8c:fa:b1:14:8a:0c:1f:70:da:6c:cf:1e:
                    2d:a5:91:0b:0d:1d:68:b2:b9:f2:86:46:07:0c:c4:
                    17:41:c8:b8:3f:1b:29:da:98:d3:d1:b7:d2:5b:7d:
                    10:61:81:ac:31:b2:fa:a0:6b:c8:e2:bd:2c:0e:3c:
                    c7:e1:99:65:7c:7a:91:e1:d1:59:57:77:5b:43:98:
                    d8:22:cf:12:3f:1b:56:a9:1b:61:0e:16:0a:df:32:
                    f0:12:7b:d7:3b:6e:54:1d:1f:5d:a5:d2:da:ce:67:
                    88:3a:d1:7f:1c:38:31:a7:10:fc:d3:46:04:7e:b3:
                    e1:b9:6a:ab:79:09:c7:20:28:32:a8:d3:d6:e7:62:
                    5c:89:80:4a:ac:90:fd:c6:10:78:03:8b:1a:43:12:
                    14:2a:c2:42:5c:a6:1b:62:a7:2b:5a:57:0c:c8:f7:
                    93:24:6c:32:6b:74:71:1c:6e:58:96:89:74:2c:ca:
                    f8:4d:5e:d1:14:2d:6d:69:45:dc:a1:50:1c:5f:57:
                    08:db:12:e0:09:57:36:e2:fd:9a:49:f4:78:d7:0c:
                    4a:b2:ff:7b:be:25:f9:a8:db:68:d5:81:75:26:5e:
                    31:dc:1e:17:72:6d:2d:01:10:ec:4d:d5:2d:58:64:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:77:D3:2B:6F:A8:B4:9B:6A:BD:8C:EE:5D:CC:C0:9B:3A:61:B9
            X509v3 Authority Key Identifier:
                keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:1d:f7:e2:f5:3d:9b:c0:43:49:71:bc:eb:96:39:6f:ac:
         17:d6:56:14:8f:a1:e0:e9:d5:56:51:92:fd:35:9e:7f:5b:65:
         b4:c9:81:0c:e0:cf:90:48:8d:a4:03:4f:34:ec:49:8e:db:e9:
         9d:0b:71:af:66:36:6a:3b:f7:21:9b:47:81:ab:c4:e7:ab:eb:
         30:af:20:aa:06:bd:fe:df:53:db:31:99:7e:be:5e:99:f5:f1:
         59:ee:4e:83:70:47:29:cb:0a:91:88:18:8f:e4:77:4f:73:3e:
         95:43:d8:62:25:a9:90:ee:56:0d:0b:cd:41:34:6f:d1:b8:b2:
         3a:fe:d2:c0:bc:c0:32:ba:ee:cc:00:7a:c4:7e:47:d9:e3:5d:
         f5:ee:85:8b:d4:c8:09:a3:cb:31:5e:5c:bb:fa:36:3a:ff:1a:
         a2:b3:1a:c9:d2:11:b1:82:8d:9d:65:de:09:04:fb:4c:06:10:
         8d:33:52:e2:a6:1d:b4:f4:10:9a:b2:bd:ab:2a:12:f1:23:0e:
         40:df:85:8c:07:b2:52:ee:55:33:12:5b:e5:d6:b0:23:3a:27:
         36:10:b5:e9:75:5d:d4:bf:20:eb:6c:ff:14:a1:cf:77:bd:20:
         85:df:72:90:2d:87:f8:15:60:ac:d6:31:16:83:2e:1e:ce:0d:
         8e:4f:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:59 2026 by rpki-client