Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File:                     t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier:          2wFJZ4tdZJGYawxOxvVPHQeXeleKEqvHwPYfbD+1+oc=
Subject key identifier:   E3:DF:DB:B8:C9:3A:D8:A7:81:37:54:53:66:10:10:99:FE:F8:49:6C
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer:       /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial:       019CAB33D6778C3E8FB4C40506F54696D3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number:          0749
Signing time:             Sun 01 Mar 2026 21:00:26 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:26 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:26 +0000
Files and hashes:         1: PZBnPdfbJCdgsdJ-b0ZM7yGRxxc.roa (hash: lKGeR/3YCO+JxIhtID6zbVNMC2uzyz/+F4TUSGRB+zg=)
                          2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: GNx/WwGqjHbxZ9JnyK0cvmxvYuxDBGmA1f4PFjNFitg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:33:d6:77:8c:3e:8f:b4:c4:05:06:f5:46:96:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
        Validity
            Not Before: Mar  1 21:00:26 2026 GMT
            Not After : Mar  2 21:00:26 2026 GMT
        Subject: CN=e3dfdbb8c93ad8a78137545366101099fef8496c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:b9:7d:72:e7:c1:62:0b:a9:67:a3:bf:b8:
                    e9:0a:6f:1f:da:2f:17:0f:11:7e:4d:fc:27:81:ae:
                    7e:32:88:5b:89:ac:eb:c6:7b:7c:c8:89:cf:7a:e8:
                    53:60:4b:56:54:5d:d3:99:71:67:49:7d:d7:1a:54:
                    66:58:08:cb:e3:b8:88:49:21:0b:98:77:9f:c8:43:
                    f7:bb:9f:1d:f1:88:a4:5c:d3:d3:7b:0b:52:55:b9:
                    fa:3f:cc:3f:17:f2:aa:c8:f0:a3:66:8c:7b:ce:c9:
                    70:c2:ba:f8:bf:69:95:8b:dc:59:61:dc:39:dc:41:
                    5a:1b:15:b8:1c:2f:c7:a5:f0:da:ac:ee:94:32:05:
                    ae:ce:1d:62:9a:de:21:a0:aa:ce:54:09:a6:a0:8e:
                    0b:e5:bd:96:ee:4b:53:68:1b:31:43:6f:07:40:54:
                    89:bf:da:19:96:0d:a6:13:9d:5c:19:1d:33:a6:db:
                    b6:de:2a:26:df:c9:ed:8a:3a:d8:33:0e:0d:85:e2:
                    aa:d8:8a:f7:a3:96:24:2e:e9:f7:e0:79:e2:89:f2:
                    3a:22:16:ea:8b:f5:e1:28:d3:ee:d8:c3:74:32:c1:
                    fd:04:14:65:68:4d:fb:4a:09:5f:74:54:27:67:00:
                    5c:8b:25:67:ea:89:a4:23:77:e1:f2:e9:32:52:1f:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:DB:B8:C9:3A:D8:A7:81:37:54:53:66:10:10:99:FE:F8:49:6C
            X509v3 Authority Key Identifier:
                keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:2a:33:bf:c4:ef:6e:82:3e:40:a0:2a:56:b0:98:76:82:
         e4:67:d1:45:76:c0:37:b9:05:c6:04:41:33:60:da:28:c1:fd:
         23:b8:12:6d:83:53:a5:0d:fb:8c:8b:9d:97:a9:1e:e7:2f:30:
         33:3f:81:e2:93:26:1f:3a:cb:46:a3:1a:45:85:7c:78:4e:a0:
         73:d2:e3:c8:9b:f7:70:4d:ee:93:bc:5f:9f:68:12:ef:d3:e8:
         9a:b3:c2:dd:77:9a:12:5d:07:60:ef:a3:3e:67:f8:49:7b:f2:
         82:e0:f1:8e:ca:90:68:95:0f:fc:8c:2a:1d:68:8f:57:af:88:
         14:1a:a8:0e:3f:8d:2b:33:59:43:6e:4d:69:ab:d0:69:64:15:
         55:ee:4d:87:9c:8b:fc:67:72:da:52:95:c5:fd:62:af:c3:c2:
         6f:0a:32:47:0d:c2:ef:57:25:91:e3:ee:a6:70:b8:5c:c8:9c:
         30:80:28:74:d0:7f:24:9c:dd:04:83:09:95:bf:5a:7d:91:15:
         ec:ca:70:36:75:68:8c:78:94:d5:eb:9b:0e:b2:cd:31:b0:c0:
         b6:b5:50:51:08:8e:12:ff:fb:b5:e5:f4:29:42:36:3a:83:31:
         23:63:22:ae:ca:e5:0b:25:69:a6:0c:77:78:8c:e8:b4:8a:08:
         06:f7:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:27 2026 by rpki-client