Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File:                     7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier:          ATsWfNMLjx489OKvxg8e20aVzBu0TN020/b7GAnTm9o=
Subject key identifier:   06:AD:A2:CD:C6:52:28:E0:C1:32:9A:95:03:5E:EB:DB:53:8A:1D:B0
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer:       /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial:       019CBF28EAC7EE286CF8EAFBE09C768067C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number:          159B
Signing time:             Thu 05 Mar 2026 18:00:55 +0000
Manifest this update:     Thu 05 Mar 2026 18:00:55 +0000
Manifest next update:     Fri 06 Mar 2026 18:00:55 +0000
Files and hashes:         1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: PIvynkGgsGGVgJa2IniULwEl+m9HSn1T1hPb45OBmVY=)
                          2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
                          3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bf:28:ea:c7:ee:28:6c:f8:ea:fb:e0:9c:76:80:67:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
        Validity
            Not Before: Mar  5 18:00:55 2026 GMT
            Not After : Mar  6 18:00:55 2026 GMT
        Subject: CN=06ada2cdc65228e0c1329a95035eebdb538a1db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:c9:18:18:80:cd:1c:b2:77:e3:49:74:cf:
                    52:70:f3:92:5d:10:68:65:d3:33:6b:d1:19:9a:d6:
                    97:22:9c:cf:46:36:57:45:aa:cd:23:91:bc:a4:14:
                    b3:0a:62:a7:cf:56:9a:46:01:2a:ab:17:b5:0f:2c:
                    56:91:21:23:ae:80:8f:1f:dc:96:8d:86:3a:0f:49:
                    f3:b5:ae:15:c1:81:e5:b3:9a:58:fd:d8:84:89:70:
                    bf:66:e1:bc:af:2f:29:9a:03:12:f4:a9:05:48:d0:
                    60:6d:02:a9:bf:d5:53:2d:3d:79:74:16:64:c8:5b:
                    3c:81:d6:83:de:0b:a0:ff:89:6c:63:4e:f4:23:f5:
                    9a:d1:25:50:82:c6:9f:ac:f2:cd:f0:14:26:54:13:
                    4a:22:a9:6b:7c:f7:1f:1c:b2:d3:83:85:76:23:74:
                    d5:df:e6:a9:a8:19:65:17:7b:96:f6:1d:a9:10:72:
                    79:1a:11:4a:77:dd:06:b0:8e:6f:9a:54:da:d5:57:
                    63:75:40:db:37:dc:c5:9b:90:0c:a6:5e:63:7e:68:
                    32:bd:97:6a:f9:62:2f:bb:e6:7c:3e:fe:80:ab:de:
                    65:bb:06:80:42:32:c8:61:f8:6a:0b:c9:2d:69:48:
                    7a:e7:a0:08:98:ca:c7:ec:ca:66:d6:3a:0d:51:41:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:A2:CD:C6:52:28:E0:C1:32:9A:95:03:5E:EB:DB:53:8A:1D:B0
            X509v3 Authority Key Identifier:
                keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:a0:0f:61:1e:f7:7b:98:0b:6d:bc:4e:8b:a5:00:49:87:
         81:92:e5:92:46:e1:89:fe:8b:96:89:07:b8:f4:bf:b1:40:84:
         cf:cc:cc:f5:88:86:99:18:c1:d2:bb:eb:c2:f9:6f:82:4e:9a:
         22:9f:0c:f1:6d:7c:d6:50:6b:1f:ec:2b:ee:bc:1c:d9:7e:fc:
         ad:1c:58:f4:db:7d:bd:39:cb:74:13:ab:40:02:82:82:3e:89:
         ed:4d:40:c6:31:d0:2c:7b:71:93:3f:27:f6:50:9f:ad:99:30:
         0f:d6:38:70:d5:20:c5:01:97:bb:2d:86:b5:ce:0b:ca:ce:07:
         8c:32:3d:88:ec:13:f2:c6:d8:4e:71:37:3b:6b:92:cd:ed:8d:
         d8:1e:f9:7a:57:e2:9a:b9:b7:e3:f4:f6:6f:ec:91:60:8b:fb:
         53:84:d8:73:0d:e3:7c:39:b7:9e:1d:e5:b9:d2:fd:58:e1:c0:
         1c:6d:df:36:8d:4b:d9:4f:61:43:0f:cc:ec:e7:c0:6f:26:a1:
         15:be:2f:3b:11:82:03:16:c3:d3:58:86:e5:59:48:be:84:1f:
         b5:e0:d4:c6:5c:b4:bf:fc:fa:a2:9f:ee:b5:06:33:3e:20:af:
         e2:93:23:4f:0a:5e:b5:3a:c5:1f:8b:5e:43:41:dc:fa:1b:3f:
         9b:02:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:47:52 2026 by rpki-client