Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File:                     p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier:          V73HRxUifG6OglUXIPEug8Hnr4OQHuByT3hRmk4KwKA=
Subject key identifier:   BC:0F:70:10:CF:79:1C:1F:D1:E6:2E:C8:7B:18:A3:23:AD:0A:77:AB
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer:       /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial:       019CACEBE9C41C50987CCBFEE8A53F1320FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number:          07B3
Signing time:             Mon 02 Mar 2026 05:01:07 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:07 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:07 +0000
Files and hashes:         1: FgHH8Xt1f7VzQSoTVAC27ghf-rE.roa (hash: YVFe19iE2Xwhz35hkGQLqqB10MJOqZddrQvOlNebwwQ=)
                          2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: y1iwh+FcBcQ2IEvnu+M97jHfGqfSibGLV7k1bIpAR4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:e9:c4:1c:50:98:7c:cb:fe:e8:a5:3f:13:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
        Validity
            Not Before: Mar  2 05:01:07 2026 GMT
            Not After : Mar  3 05:01:07 2026 GMT
        Subject: CN=bc0f7010cf791c1fd1e62ec87b18a323ad0a77ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:df:7a:04:48:36:09:f5:93:19:2f:f6:61:
                    e8:f6:5d:5f:93:b6:02:1d:53:ad:ba:48:7b:0f:6a:
                    9e:e0:2e:5d:0e:cd:7a:30:d7:1d:99:07:76:1b:19:
                    fc:a4:1d:02:fd:d6:92:e9:2d:58:4e:c9:2c:93:90:
                    cc:ec:33:89:88:ea:1e:23:f9:67:7f:19:9c:6f:d0:
                    6f:dd:4b:fa:7e:09:ab:91:42:00:50:52:a6:ba:d1:
                    68:08:bb:f5:c4:20:6f:40:8c:96:ec:78:f8:38:72:
                    4c:27:67:1e:eb:3e:04:42:24:06:55:35:40:a5:0c:
                    3a:74:96:3e:82:5b:92:07:35:82:43:42:95:26:63:
                    96:8c:ea:51:56:46:04:47:4d:46:b3:8d:89:46:cd:
                    40:21:81:ee:b8:df:76:e9:74:9b:eb:8f:bc:c3:5e:
                    b5:89:de:a2:41:a8:0d:ba:d5:af:70:44:82:4e:1c:
                    0d:a7:c9:57:97:74:89:63:b4:56:e1:14:99:8e:cc:
                    48:39:5d:eb:06:88:ca:0b:25:8f:bb:82:42:0e:f6:
                    2e:06:c4:05:17:9c:23:cb:50:b4:bb:91:8f:6c:61:
                    27:d5:0c:66:84:fc:31:0a:84:2d:fe:a9:87:ac:c4:
                    6a:0d:fc:60:83:23:dd:9b:48:70:73:19:f3:69:85:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:70:10:CF:79:1C:1F:D1:E6:2E:C8:7B:18:A3:23:AD:0A:77:AB
            X509v3 Authority Key Identifier:
                keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ee:9a:09:be:5d:c9:9d:9a:e0:49:fd:5e:a9:97:23:3b:a6:
         5e:a5:07:42:3f:3e:ab:e4:07:68:a0:16:3f:86:86:71:72:ae:
         51:73:c3:4c:7e:17:30:aa:66:fd:06:e2:05:f3:89:34:07:5a:
         39:38:4a:20:07:20:9f:ca:c8:18:1b:b0:e5:4b:d7:6d:89:b0:
         c8:a7:fb:bc:b0:b3:00:14:43:64:c7:41:03:c6:0a:6a:b0:9e:
         f5:95:85:cc:59:3e:5c:dd:61:d9:6d:ce:54:cd:5e:09:06:6a:
         c1:4a:a1:10:ca:30:23:4b:89:e4:a4:c9:c9:ba:91:8c:15:2b:
         e1:12:1b:84:79:da:fe:2a:d7:5a:3e:93:3b:32:44:cc:93:03:
         8b:c3:ab:b7:03:1b:24:3a:55:05:10:29:cf:2b:fa:b3:cc:15:
         cb:08:4f:e3:a9:87:e4:3a:c4:5f:49:64:a7:d6:e4:0c:be:fd:
         53:51:ac:a4:2b:16:0f:5d:65:0b:e0:c8:15:d3:e0:9a:42:9b:
         8d:7a:48:dc:a9:38:51:4a:48:f0:aa:b8:92:b8:69:a3:b1:9c:
         cd:7a:f0:d0:33:06:70:57:cc:b9:31:34:1e:d5:c5:38:7f:9c:
         45:03:0d:e8:d9:df:c0:73:27:87:f4:0f:01:65:00:d3:d4:52:
         42:69:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:59 2026 by rpki-client