Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          cQOoOdNt0C6K//3r8IF5l7bg3uL4ttfrZk3J8yLhoK4=
Subject key identifier:   67:7E:F3:31:D8:37:2A:CB:68:91:5E:32:04:C2:A5:B5:6C:73:B3:9D
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       019CE9DCA86607060E62E8EBDDA98BF2D5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          1385
Signing time:             Sat 14 Mar 2026 01:01:18 +0000
Manifest this update:     Sat 14 Mar 2026 01:01:18 +0000
Manifest next update:     Sun 15 Mar 2026 01:01:18 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: qRTli5/+JR+yOOmZztzRZyhmKLS04v3a5K+y/0CiAGY=)
                          2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=)
                          3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=)
                          4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=)
                          5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:dc:a8:66:07:06:0e:62:e8:eb:dd:a9:8b:f2:d5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Mar 14 01:01:18 2026 GMT
            Not After : Mar 15 01:01:18 2026 GMT
        Subject: CN=677ef331d8372acb68915e3204c2a5b56c73b39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:49:52:73:af:af:d3:09:70:f3:ca:6e:cb:
                    3e:ac:61:65:40:a3:5d:28:17:7a:9e:44:8e:6d:e8:
                    ae:d6:88:0e:b1:18:bc:b1:7d:56:3e:6a:db:07:73:
                    52:45:79:71:28:d6:05:74:6a:67:06:53:15:18:d5:
                    dc:b3:51:68:81:b5:80:0f:ec:5d:71:8f:90:55:e2:
                    0c:b9:a7:12:cc:48:1e:f1:56:55:be:ef:19:90:2f:
                    85:03:ae:f1:0e:c9:6c:87:ed:c9:51:69:08:d5:c4:
                    0f:b4:48:9c:a1:6e:59:57:a9:d5:72:4f:06:56:d7:
                    27:eb:81:24:a2:43:d9:fc:62:30:b4:ce:f0:a0:47:
                    0b:bc:0e:e2:d1:33:68:ec:74:ce:7f:e2:96:f5:99:
                    a3:2d:c4:ee:df:b0:5d:b0:49:55:e0:4c:02:4c:2b:
                    ed:eb:49:34:f5:b3:46:73:4e:55:7d:73:94:c2:51:
                    64:e4:09:78:e5:1a:2e:ea:6e:97:fa:6d:22:17:9d:
                    98:59:f9:a3:7b:d5:1a:15:64:61:e9:d5:09:11:9b:
                    a4:a2:70:b9:dd:e3:5a:1c:ad:c1:42:1a:59:5a:b8:
                    5d:45:4a:18:fb:4a:11:42:07:14:cf:59:54:1b:4d:
                    26:cd:ff:5c:90:9b:c2:a0:69:8a:59:ab:71:ad:6c:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7E:F3:31:D8:37:2A:CB:68:91:5E:32:04:C2:A5:B5:6C:73:B3:9D
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:b4:24:fa:00:cb:85:f1:6d:8c:29:53:1c:73:b0:ca:e8:
         7c:51:5e:08:87:c4:61:03:49:44:b3:39:a2:e8:c7:f0:fb:1a:
         4d:37:cf:42:4f:c8:fe:8b:4f:67:c6:95:dd:5c:6b:d6:0a:9c:
         5c:88:a5:11:29:11:82:d0:89:83:97:83:5c:16:6e:97:e3:59:
         5b:03:98:6f:e0:7a:31:4b:ce:5e:d5:17:0c:67:fb:1b:7a:2c:
         63:88:47:91:06:28:e6:16:8b:22:b6:cf:24:e9:df:c4:04:df:
         56:17:3a:7e:da:2b:8a:67:ad:1a:53:97:b9:45:1d:5e:44:1b:
         45:5a:40:62:d6:74:5b:8c:a7:87:90:9d:8a:f4:42:28:00:6b:
         b2:af:7a:84:31:4f:47:f5:32:e8:d8:c2:69:9a:7c:58:94:02:
         ab:af:49:18:56:19:49:71:54:ca:71:b8:2d:30:49:6f:ff:0c:
         3b:ee:9d:04:df:42:06:7e:af:ba:14:e5:a2:b9:e7:9c:bc:d1:
         52:87:f1:97:5f:48:0d:8c:ae:5d:58:75:10:1c:47:60:0b:14:
         61:d3:b2:0a:29:1a:df:ab:b2:81:a0:d6:55:be:0f:d7:a2:29:
         c3:fc:f2:f4:71:be:ee:4f:e8:36:f4:1d:f4:53:fa:fc:df:a1:
         72:7c:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:21 2026 by rpki-client