Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          L762ewpLx1q5hgioq/HMZz+0Yzfi3JV0dSUbrZnyNiw=
Subject key identifier:   95:F7:98:BA:D8:F2:15:42:E9:FA:E8:40:C8:25:46:6F:B0:FA:64:46
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019CC82BA8D1C7BFD03C95EB293F6E7D2CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          14C5
Signing time:             Sat 07 Mar 2026 12:00:30 +0000
Manifest this update:     Sat 07 Mar 2026 12:00:30 +0000
Manifest next update:     Sun 08 Mar 2026 12:00:30 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: V7lXqVWBek2v/t53xf4GXxwnU2fuBGV38icTvgiZMNM=)
                          2: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (hash: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI=)
                          3: ryiFWbpMuqXbHhTaiUR9Bmksn3I.roa (hash: 4enRDEIE99ZnVUOrH1uVQZLMyVdi+VhTW5RGUgkPXEs=)
                          4: szJDTDjk11lPCTowxUuTkr1LOjA.roa (hash: tZ3E5yp9ifwL77hdiUkOobqFo6CYXkARUapRpbadEZc=)
                          5: tVIvfnxeNd5Q4fCCoef2VPaercM.roa (hash: UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=)
                          6: wRtbNPKwzn29lLHL-XgfTc7v1-E.roa (hash: HKr7T3FnocuYvThL/hQV2CDARcO253MaFTxSFktB4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:2b:a8:d1:c7:bf:d0:3c:95:eb:29:3f:6e:7d:2c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Mar  7 12:00:30 2026 GMT
            Not After : Mar  8 12:00:30 2026 GMT
        Subject: CN=95f798bad8f21542e9fae840c825466fb0fa6446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:3f:29:77:90:b4:cb:5c:20:07:de:b7:80:
                    ab:0f:56:92:3f:ce:97:b3:1e:06:e4:60:1a:44:ac:
                    82:6a:3b:86:e2:e5:48:e8:0c:a4:c9:c7:58:02:09:
                    d2:bf:bc:37:f1:35:fb:66:14:10:ff:86:53:e7:88:
                    b3:a7:c0:ce:ce:1a:58:87:3f:85:b2:80:4e:d2:06:
                    9d:4b:d8:e0:0e:4e:34:63:ee:3e:fe:3c:04:b2:2f:
                    ae:76:5a:44:ea:f7:fa:8e:54:22:44:74:1a:84:70:
                    a0:24:f8:e5:2c:0f:36:9a:81:bf:0c:74:3e:74:39:
                    2e:8c:27:52:48:03:5e:02:09:79:b2:00:07:c1:6f:
                    72:a5:00:bf:b4:7c:13:d4:f6:75:f7:ff:e2:2c:d9:
                    7f:cb:c9:47:92:94:75:27:25:05:34:19:b8:b5:97:
                    05:cc:85:d7:5e:1d:9f:c8:8c:d1:c5:e9:e0:33:3e:
                    4d:ad:1e:34:4c:2e:78:db:96:78:b8:12:04:ef:bf:
                    ed:54:66:2e:ee:06:80:05:2f:3b:5a:15:05:23:bb:
                    c3:57:92:01:04:ea:fb:c2:9e:78:cb:5d:c7:c8:10:
                    24:1f:2a:67:f1:4a:26:91:16:9f:bc:a3:53:e6:f8:
                    bf:4f:88:fe:8e:ab:15:0f:97:68:98:cf:c6:30:19:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F7:98:BA:D8:F2:15:42:E9:FA:E8:40:C8:25:46:6F:B0:FA:64:46
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:be:15:5f:59:04:13:e8:98:b3:87:5b:00:9e:b2:a1:f4:63:
         cb:93:3e:7f:3c:a8:f0:65:16:5c:62:8f:6c:67:da:1d:aa:85:
         b6:ae:d7:3a:38:b9:f4:cf:f6:84:c6:01:6a:27:bb:1f:4d:4b:
         11:df:76:19:77:54:5c:7e:ce:45:f3:52:1a:5e:75:26:24:58:
         8e:bf:dc:b6:4c:e3:fd:cd:f0:6f:f8:c0:51:b9:41:ff:78:cc:
         48:f3:28:34:fe:a8:aa:45:2b:50:d1:82:da:93:5d:d9:34:eb:
         ee:79:db:ec:46:0f:81:84:5f:8c:37:4e:18:d4:d5:95:4a:50:
         50:7d:3a:ec:c0:10:b3:a3:c7:0d:54:1e:4e:5c:b4:2a:77:c8:
         1a:e8:c3:fb:d6:3c:08:f8:aa:90:39:33:85:c9:c1:54:85:74:
         63:1c:58:92:50:ff:5a:45:7a:fb:79:7b:6c:76:ac:bc:4d:d8:
         e7:f3:36:01:d1:bd:d3:83:eb:2e:e9:a9:ea:8f:e9:8d:b6:64:
         bb:f3:2e:06:2f:e5:2d:41:e9:eb:aa:ac:73:3c:c4:13:e0:1c:
         09:30:fd:72:b6:e6:13:98:8c:15:c6:6c:c6:b9:c8:16:c0:b1:
         3b:b7:65:a7:a4:cf:0e:4a:5f:ae:47:49:0e:a7:4a:ac:d4:5c:
         b2:40:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:08:38 2026 by rpki-client