Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          8+JUdKECmK3rIiX1zgLAXWdt5/lGfqCvjneCk2un7F4=
Subject key identifier:   E2:EB:57:25:B9:03:A9:C1:54:6B:B1:05:AB:BF:9E:00:15:A0:C2:9B
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       019CE6DB127F3BB27BB33CBA479E786AA480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          071D
Signing time:             Fri 13 Mar 2026 11:00:42 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:42 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:42 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: 4tujOi1nIGGteIrnP5IAMMn9pW6fuDTP5TATGnivNRA=)
                          2: Owvlv8hWBTHcz2euf127oUQRekA.roa (hash: fn0HdByXArdl+3YOgps4Nupdy6FY/Lip+b5OMSzQ6L4=)
                          3: wBNaW5KI2bk7rKftygUeDW0sZPw.roa (hash: 92vTX700phahUrU+qTurYQRSfJQb0PnxRKVm95D4uhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:db:12:7f:3b:b2:7b:b3:3c:ba:47:9e:78:6a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Mar 13 11:00:42 2026 GMT
            Not After : Mar 14 11:00:42 2026 GMT
        Subject: CN=e2eb5725b903a9c1546bb105abbf9e0015a0c29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:4c:6f:42:09:a9:97:94:f7:67:16:de:3e:
                    25:5d:8b:66:54:e9:6f:46:e6:1e:ea:51:ff:aa:87:
                    0c:53:e6:6f:5b:31:83:72:b2:00:e7:96:4e:8f:e8:
                    df:66:57:c4:9b:83:0c:88:52:25:50:1e:e4:c5:af:
                    27:9a:cd:37:d9:ec:e8:2f:ab:fb:dc:49:05:5c:1a:
                    4a:58:9d:c1:a6:94:55:64:af:89:5a:ef:ce:7f:09:
                    a3:83:cb:a1:52:16:a1:a9:25:e0:5f:51:1e:31:f7:
                    9d:14:db:9a:ed:32:3a:ee:bd:8a:ba:3e:65:ff:3d:
                    b1:8c:8a:83:2e:c1:78:45:b0:2e:4d:b8:df:4d:85:
                    85:d6:48:9a:51:3d:f8:91:4c:1c:e8:2c:80:32:8b:
                    40:44:d0:10:50:0f:27:17:68:fd:88:b6:e8:f6:90:
                    f5:8d:da:c1:4f:eb:47:4d:5e:86:a2:4b:6c:69:40:
                    6f:fd:2f:5c:08:0a:b1:d4:79:c6:d2:82:54:13:8b:
                    02:b5:6f:94:97:a4:13:67:d5:b1:43:84:83:4f:5c:
                    3c:67:bc:cc:ff:cd:11:ee:3d:63:ce:33:b0:da:4d:
                    03:7e:8c:ee:1d:e5:2b:55:01:52:25:b4:96:c4:fc:
                    2b:3c:c2:be:c3:c8:57:d6:6c:ca:f3:61:49:49:e0:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EB:57:25:B9:03:A9:C1:54:6B:B1:05:AB:BF:9E:00:15:A0:C2:9B
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:a3:0b:2e:08:0c:27:04:fb:ed:55:91:b5:10:28:be:fd:
         2a:4f:42:76:55:ae:66:8f:dd:da:c5:3f:aa:30:ae:c6:bb:92:
         3d:35:21:ca:f9:c0:85:71:82:61:cd:2b:0b:04:a7:7a:c9:31:
         49:46:03:f3:b3:a8:26:99:a3:3a:91:31:f5:0e:ea:1e:04:7d:
         44:d0:40:53:d1:d1:fc:d9:31:ab:59:c6:8a:82:62:27:36:24:
         39:92:f3:6b:d8:1f:a8:e3:9f:41:ef:16:35:e3:04:8a:43:8b:
         b6:32:72:67:ce:9b:f3:12:58:f3:4e:90:a0:d1:f2:82:3b:65:
         bd:a2:e4:93:98:d6:51:8f:61:28:bd:44:01:65:e7:61:50:69:
         41:3b:2a:a7:ab:76:a0:f2:05:c4:06:0c:64:54:4e:d4:c6:eb:
         e8:76:3e:d3:af:57:31:8c:7a:4e:15:8b:51:b2:e3:28:ef:1f:
         62:62:86:70:19:6f:0f:c1:af:df:43:43:5e:47:29:a2:1e:57:
         1d:7f:d4:42:b0:83:bf:1f:4a:06:c9:8d:7f:16:31:86:76:dd:
         31:f4:0f:d1:f6:7f:6f:ab:54:ce:8d:2f:fd:43:b2:09:75:8f:
         a9:c2:c7:76:15:a6:5d:6a:6a:71:44:46:5b:d1:9c:ae:0d:18:
         12:07:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:08:15 2026 by rpki-client