Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
File:                     xC-Eb32rEnhmuie_qWS6fS3iBEw.mft (raw, json)
Hash identifier:          rAauz5ZA0lHB7FHQgeNIcHjIXSphbCw2c0BnKC93Nw4=
Subject key identifier:   F7:68:09:BE:A1:8A:A1:06:9B:16:59:BF:C2:D5:81:A1:0F:A9:C4:93
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Certificate issuer:       /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial:       019D37F763984C56F05295EB448FB7312337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
Manifest number:          0D07
Signing time:             Sun 29 Mar 2026 05:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:52 +0000
Files and hashes:         1: 1oD3DQlb2sSHs0JF22_x35kNpTk.roa (hash: eBI8fUe/pu8PSfFnAUNY0T6g3tEzgKxX4TEnw9lT2XU=)
                          2: xC-Eb32rEnhmuie_qWS6fS3iBEw.crl (hash: ZPbWos6AFFOx/RYM7qm+jRSxEgzG18w0VLzrEIDnJPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:63:98:4c:56:f0:52:95:eb:44:8f:b7:31:23:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
        Validity
            Not Before: Mar 29 05:00:52 2026 GMT
            Not After : Mar 30 05:00:52 2026 GMT
        Subject: CN=f76809bea18aa1069b1659bfc2d581a10fa9c493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a3:dd:c2:3d:3b:dd:2d:27:3b:66:d1:a4:6b:
                    08:00:86:21:ab:35:f3:1e:79:9d:41:2f:03:a2:16:
                    e0:61:03:2d:a7:e0:f7:2d:60:32:df:7e:f6:24:88:
                    b0:a2:3e:61:c8:57:bb:1c:18:2a:68:7c:24:c0:65:
                    cd:5f:a7:31:e2:20:41:0e:f9:fc:61:b4:7f:cf:55:
                    c4:3d:9d:b1:8b:17:69:0a:2e:8a:02:ac:01:85:66:
                    19:fc:49:b8:34:02:1c:6b:db:67:ef:9c:70:2e:67:
                    8f:25:7e:8e:01:a8:79:64:7f:16:dc:68:22:48:c0:
                    ea:1b:b2:ee:4a:9c:c2:8c:ed:66:69:4e:0a:9a:a8:
                    12:51:13:c9:a3:63:21:07:4d:fc:48:2d:b6:49:5c:
                    53:44:3c:8c:85:58:46:48:fb:59:c3:31:57:af:cb:
                    3e:cf:b0:a6:53:d4:9a:ad:48:b3:40:ed:9d:17:95:
                    a3:63:6a:e3:49:d3:00:b2:a6:d9:3f:5f:35:b9:d5:
                    56:6f:f0:4a:d8:93:16:95:9e:62:3b:8d:c3:d7:df:
                    f5:9b:16:62:99:dc:21:3b:c9:d5:90:a5:4d:e0:fd:
                    23:33:fd:35:db:a4:4c:5c:9b:c7:d2:11:38:82:7f:
                    79:9f:7a:a3:ff:af:14:76:42:51:51:e3:90:e6:f4:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:09:BE:A1:8A:A1:06:9B:16:59:BF:C2:D5:81:A1:0F:A9:C4:93
            X509v3 Authority Key Identifier:
                keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:06:51:6e:32:a3:39:cb:92:48:c3:e9:8e:16:8d:d2:61:61:
         87:09:b3:ba:43:f1:8d:cb:02:96:6d:cb:70:6f:9f:7b:00:92:
         dd:80:15:11:36:df:2c:82:bc:a6:03:d4:e9:06:b0:50:ae:9e:
         bf:05:2f:55:c8:d9:5c:57:5f:75:6d:bc:14:16:91:84:29:b6:
         15:5f:ef:e8:c7:cb:de:c1:7a:e7:f3:c5:f1:f1:cf:b6:09:b3:
         ba:36:07:5e:ee:70:15:2b:bc:88:6b:6c:b0:44:dd:b2:f1:89:
         01:55:c4:5f:22:92:6d:50:78:1b:f7:16:6d:da:d8:08:1a:c5:
         e5:b7:01:f7:51:be:ed:9b:25:b3:29:03:a0:d1:a4:b5:04:bb:
         b4:50:e7:60:38:19:bf:0e:52:1e:e5:3e:45:22:3c:06:8b:3b:
         05:a1:9a:95:63:37:fb:59:5f:62:68:a7:46:b5:bd:a3:8e:6d:
         d8:4d:50:48:f4:23:41:e8:94:a3:d5:76:9d:93:42:4b:12:2d:
         5d:9a:19:23:0a:68:ca:61:5d:58:32:56:98:7a:13:c1:c4:6b:
         db:f5:87:83:25:36:9c:2f:62:cf:8e:84:5e:01:07:48:45:b4:
         37:7e:84:4e:bf:a5:4c:ad:ce:d0:ea:1e:d8:fb:b3:00:3d:a3:
         2f:a3:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:28 2026 by rpki-client