Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          Hr/Szifrkjt3ySy4oGmaCUY7GRkyBTSBgkkrT0Lp47E=
Subject key identifier:   F1:7E:C5:E3:25:19:54:45:A9:65:5C:5D:43:8D:D3:0C:E5:62:1C:73
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       019D389C36344FC52E03F41CB785FFDB8BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          09C3
Signing time:             Sun 29 Mar 2026 08:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:54 +0000
Files and hashes:         1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: m5fSUFBQuDaCiSH6BYo3LKN9Db+gY90qJ8EYMm9ezQA=)
                          2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:36:34:4f:c5:2e:03:f4:1c:b7:85:ff:db:8b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: Mar 29 08:00:54 2026 GMT
            Not After : Mar 30 08:00:54 2026 GMT
        Subject: CN=f17ec5e325195445a9655c5d438dd30ce5621c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:cb:95:c2:48:0b:cf:f9:3e:56:3d:e7:6f:
                    fd:93:27:10:8c:55:5e:eb:32:02:bd:da:40:ff:47:
                    2e:a6:9a:e2:54:a5:17:8d:a7:c7:87:ec:02:b4:c3:
                    43:9c:74:b8:cd:90:5d:c5:23:1b:3f:c6:0d:0b:b0:
                    46:c3:63:8d:c8:b6:5e:b1:fc:b1:00:9b:8d:ee:5e:
                    ba:80:bd:91:b6:ea:2f:59:85:e3:9e:fa:8a:61:95:
                    e7:54:a1:7f:00:20:a3:c7:92:41:21:83:30:d3:fd:
                    9b:74:c0:f4:a8:d9:53:06:ed:f7:4e:b9:35:c7:8a:
                    c4:fd:8f:5e:13:0d:70:92:cb:50:3c:4a:2d:3c:e7:
                    18:a0:5a:ae:1d:e4:1a:2a:2d:d8:03:a0:10:ab:13:
                    d1:07:3a:09:e9:0d:9c:e1:02:49:cb:86:01:35:ea:
                    c1:bd:00:54:e9:b5:77:9e:6b:61:ed:5c:b9:4e:00:
                    be:e5:a1:cb:68:6b:62:42:2f:e3:cc:34:71:a2:ef:
                    97:01:82:35:97:60:74:d9:b7:44:d3:61:dc:5c:cb:
                    58:9e:fb:7a:2f:de:41:86:9c:e9:3f:31:bb:02:8f:
                    bf:77:0d:f4:66:f6:04:cd:d8:29:ce:9e:94:f3:ef:
                    3e:ba:ca:08:31:e7:60:88:10:92:7f:cb:63:e9:a7:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:C5:E3:25:19:54:45:A9:65:5C:5D:43:8D:D3:0C:E5:62:1C:73
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f9:a6:e0:5f:c8:c2:19:08:1f:ca:d7:9c:6d:6c:db:30:a3:
         93:1e:a8:4d:3d:b5:93:ad:b6:40:37:00:32:0b:74:5a:a5:ca:
         bc:8d:5f:ab:50:ae:7e:d5:e5:89:b9:58:9b:06:4d:34:2d:55:
         7a:14:e5:ac:be:cc:05:78:3f:a9:a7:74:7a:1d:6f:1e:24:ab:
         24:1a:5d:eb:eb:39:17:d6:bd:d9:80:3a:de:8d:f3:d6:12:c8:
         a2:c4:ad:11:b0:1d:a4:0b:8a:cb:9b:5d:c9:91:96:47:31:aa:
         e8:ac:f9:f3:4c:47:3d:7e:52:59:30:52:50:db:97:3a:fa:93:
         77:96:83:c5:26:cf:a2:e0:9b:2a:40:5a:35:c6:23:d1:8b:9c:
         ae:be:06:6a:43:4b:37:4f:b9:46:50:02:1e:fb:5e:a3:cb:6d:
         e3:a2:34:02:bd:06:57:37:c6:5d:fd:e1:56:33:82:25:d9:9d:
         a1:18:e9:04:48:7e:f9:79:dd:ef:0d:db:97:ea:6a:f5:39:f7:
         70:f6:30:8c:0b:60:7b:a4:d3:6e:c9:bd:30:5c:89:f6:69:7b:
         3e:85:ba:66:82:21:a6:24:62:0e:0f:4e:22:6e:3b:72:d8:8f:
         8b:be:fd:ef:85:ca:8b:f8:73:9b:c8:4d:ba:49:e8:c2:9e:6f:
         53:dd:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:11 2026 by rpki-client