Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          NU2cXgifMxHCVo1h/924m+/06OkmlCUFGrmeKtVA+kQ=
Subject key identifier:   07:BC:3D:23:31:F8:3B:16:0C:ED:75:EF:D9:CC:9C:07:98:4E:A6:97
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019CAAC71EEEE38BD829D905ED17541AA23C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0790
Signing time:             Sun 01 Mar 2026 19:01:42 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:42 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:42 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: N1hVKkD7xfDFkbfswZjwB+BBXWnPOlJ4D4lFYAzjqEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:1e:ee:e3:8b:d8:29:d9:05:ed:17:54:1a:a2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Mar  1 19:01:42 2026 GMT
            Not After : Mar  2 19:01:42 2026 GMT
        Subject: CN=07bc3d2331f83b160ced75efd9cc9c07984ea697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:27:3e:0d:6e:75:4f:ee:82:43:8c:3e:26:c9:
                    a7:0b:bd:ac:6c:65:1a:4d:5b:36:b7:25:f0:1f:b5:
                    8b:4d:be:6d:e5:37:8f:55:58:eb:4a:ce:3e:b2:a1:
                    36:06:78:20:c6:65:51:7d:e8:10:5e:7d:70:2e:82:
                    2e:88:27:b9:a8:68:a1:db:b6:03:39:1e:fa:13:11:
                    5f:f3:d7:d5:21:22:af:1b:b0:be:bf:71:f1:e5:ca:
                    66:17:d3:3f:ac:02:61:f2:bf:9b:d9:4c:26:15:73:
                    9a:95:7f:f5:65:29:ae:78:44:22:99:5d:21:00:45:
                    02:db:80:58:71:81:c0:8b:c2:15:47:77:9b:fd:b5:
                    36:5e:bb:4b:b6:f4:2e:4c:ef:2f:e3:c3:80:e2:24:
                    73:7e:e1:c7:72:02:76:92:a2:2c:65:96:d6:ba:a5:
                    b5:d4:bc:3c:39:24:23:54:a0:cc:42:29:61:75:cf:
                    c1:df:2e:65:53:c5:ca:79:7a:c7:a8:b7:5e:dd:c2:
                    e7:38:26:0d:c8:b6:43:4d:1d:19:38:1a:79:14:94:
                    17:7c:fd:24:ab:7e:96:81:c3:d2:a0:a1:a4:26:c2:
                    d7:a3:75:99:65:8f:56:9a:81:b2:0c:c0:c5:4f:0b:
                    28:73:65:ff:95:27:25:7a:52:db:90:d4:69:34:54:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BC:3D:23:31:F8:3B:16:0C:ED:75:EF:D9:CC:9C:07:98:4E:A6:97
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a0:fd:c5:f1:e2:65:b5:65:ad:be:9c:ab:86:2f:33:35:19:
         bc:e8:3a:62:72:07:c5:40:dc:03:eb:fd:70:ce:f3:ac:61:2a:
         ed:e4:7d:44:4c:1e:df:c4:bd:1b:0b:1a:d7:ad:dd:bc:86:33:
         4f:5e:08:9d:4f:25:8c:54:26:55:a5:9d:e9:b5:05:ac:de:cf:
         d8:9b:d7:b1:7d:99:b2:a0:a4:9e:3d:db:23:88:54:3b:b2:01:
         6e:a6:c4:7f:cd:4d:f1:b0:c3:6c:9c:5a:e2:33:32:6b:84:85:
         21:51:38:82:0c:de:e3:dd:4b:1d:0e:55:c4:0c:02:63:6c:05:
         08:5d:33:4b:9f:5d:1e:2d:29:55:3d:8d:89:36:3c:9c:59:bc:
         e7:ce:9c:71:70:a3:88:05:12:0a:e3:80:90:99:90:ad:b9:19:
         2d:46:44:83:10:c9:79:e0:f0:89:4e:43:13:b4:a9:a2:cb:27:
         fe:f3:f1:e6:50:a1:4f:d7:86:c8:5e:c7:57:5c:b7:82:66:af:
         42:9b:3b:83:08:c0:aa:28:98:8d:d0:33:41:ca:32:00:76:00:
         77:02:42:86:e7:38:85:2c:ef:2c:df:7a:49:b4:19:db:22:5b:
         89:fc:03:b8:cf:bd:ad:29:0d:62:e3:6c:51:30:7a:e3:54:3a:
         61:cb:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:31 2026 by rpki-client