Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File:                     0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier:          CoQbXwaVTxW8WxeOp3xxDHGpCrc/W+cvkcEbZMKqHfY=
Subject key identifier:   C3:30:4F:E4:CD:28:14:78:A8:D8:8D:26:40:88:1B:22:0E:2C:AE:36
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019CA78F1B8E607653879CC100F3F366FCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number:          9E
Signing time:             Sun 01 Mar 2026 04:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 04:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 04:01:39 +0000
Files and hashes:         1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: R1YI56XZulIGwadHbkdu0gIOohfIG7VP+PXn2i+WVig=)
                          2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
                          3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
                          4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
                          5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
                          6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
                          7: xYx_vOW7vkTjvjtpiy67I2LnOhE.roa (hash: N7u6humGzKYT/H6+9vAbd+SuhUaYJnp74HRkR2a2nH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:8f:1b:8e:60:76:53:87:9c:c1:00:f3:f3:66:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Mar  1 04:01:39 2026 GMT
            Not After : Mar  2 04:01:39 2026 GMT
        Subject: CN=c3304fe4cd281478a8d88d2640881b220e2cae36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:f1:84:f7:9b:bf:a5:9e:81:0f:4d:ab:fa:
                    98:ad:8c:24:c2:78:4a:5e:91:3a:29:48:c3:2e:6e:
                    28:c4:80:ed:e3:90:2c:4d:30:4d:f3:3d:eb:af:1a:
                    d9:76:a9:20:fb:2d:f0:c0:43:16:30:11:21:1f:a4:
                    3d:1e:97:6d:5c:50:01:a1:27:b7:94:e7:85:8c:9f:
                    c6:5c:18:30:c9:05:c9:56:e0:dd:3d:2b:03:28:8a:
                    c9:13:3f:3c:8d:4d:e3:6e:be:84:fd:3c:c4:90:8b:
                    19:cc:d7:ff:9b:65:7e:67:f7:3f:3f:10:01:25:2c:
                    cd:66:97:6e:df:76:74:76:20:d5:02:8d:ab:3b:48:
                    cb:3b:7f:0d:48:f8:cc:45:c3:f1:f3:97:90:c9:cb:
                    93:f1:77:fc:27:7f:e5:4c:77:4d:ef:0b:76:97:44:
                    78:2e:dd:f3:a0:76:79:7e:ac:86:c9:95:92:8c:42:
                    ec:70:7d:23:7c:9a:d0:2c:5e:5a:d6:2c:5e:57:d5:
                    82:3d:d4:09:89:54:c8:a0:8e:1f:9d:ed:37:83:4c:
                    dc:65:82:34:a2:fa:73:f2:39:61:79:73:e8:d3:a6:
                    55:0c:1d:64:b9:2a:a5:7e:f8:94:77:18:1c:bb:7a:
                    d5:d8:3d:a7:ef:54:49:0f:6e:86:d8:02:a3:28:c2:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:4F:E4:CD:28:14:78:A8:D8:8D:26:40:88:1B:22:0E:2C:AE:36
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:40:b6:bf:22:fb:3f:6c:57:a6:ad:24:6c:c9:da:e0:69:
         d3:14:c5:ea:6d:54:6d:7f:68:9b:87:3d:ae:c8:c5:f9:27:f1:
         04:97:9d:e6:4a:ea:a2:98:d9:09:c9:bb:dc:bb:84:99:64:55:
         02:a1:ab:ab:ce:39:e8:af:2b:9e:93:29:db:42:23:dc:7e:4c:
         21:b3:6f:f7:eb:92:b5:53:6b:19:8f:9d:3f:d1:29:5c:20:bb:
         89:39:9f:11:1c:63:27:b5:c3:b7:42:cb:c9:b0:6e:a7:53:cf:
         85:c9:31:c3:78:4e:02:a9:2d:3d:5d:9e:09:ab:13:3e:32:81:
         21:e4:3b:e7:3a:86:9b:7f:3c:d9:2f:da:e5:20:67:24:ca:9f:
         0f:ea:24:4e:8c:07:d3:f1:97:83:c7:83:e4:6d:ae:9f:4a:3c:
         70:fc:7f:20:bb:35:93:8f:7c:8f:cb:6f:df:bd:51:f9:b0:19:
         df:6f:21:65:bb:e0:97:6b:ee:b2:5f:29:41:40:9c:13:69:95:
         5a:39:e1:22:98:1b:2c:36:f5:d6:35:8f:65:ec:b5:a1:06:40:
         4f:9f:08:b4:03:23:0d:93:1d:eb:b2:d8:e6:63:fc:c1:3d:b4:
         6f:55:12:c0:0a:0b:22:d1:9c:24:05:ce:72:a6:4c:11:e4:29:
         f3:8c:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:07 2026 by rpki-client