Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          VfSEeCWZZau+nBk7fjFVXfoYiNnBXV7K5YaO5dSeAqw=
Subject key identifier:   38:15:09:FA:B6:3A:83:32:06:F2:89:87:FE:48:C4:9C:E7:9E:EC:2A
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       019CA9EAEEFEF50D540E0D3E574A2BDC5CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 15:01:11 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:11 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:11 +0000
Files and hashes:         1: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (hash: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM=)
                          2: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: ZXCrM5EFnxHp+f9lS3ERbC8tQrEzR49RbS7VrUWw32E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:ee:fe:f5:0d:54:0e:0d:3e:57:4a:2b:dc:5c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Mar  1 15:01:11 2026 GMT
            Not After : Mar  2 15:01:11 2026 GMT
        Subject: CN=381509fab63a833206f28987fe48c49ce79eec2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:e8:ad:4e:8c:bb:a1:17:dd:75:3c:6c:51:
                    25:56:f4:22:66:ef:35:bc:35:7a:4a:f0:11:4a:20:
                    e9:0a:1e:e1:46:37:a6:1f:ad:a4:31:7b:23:b6:c2:
                    b3:5a:e2:39:88:c5:4e:53:72:63:bb:10:8e:81:90:
                    ff:98:ba:6f:08:55:7c:21:09:c4:e2:c6:a4:c3:eb:
                    13:00:4a:f8:86:4a:75:85:24:5c:0e:46:5d:c6:3d:
                    f9:31:d1:f4:47:65:7a:03:46:e7:71:3f:7c:83:5c:
                    b2:63:18:b9:46:f0:62:30:0a:1c:35:17:db:03:8b:
                    d4:d9:a1:1b:d2:49:6d:d5:fc:b9:45:df:97:27:d2:
                    26:7f:68:7e:8a:3c:39:65:2c:13:dc:e2:9a:c9:42:
                    a2:95:f8:16:8f:ce:a3:28:dd:ad:41:d1:f7:a7:d7:
                    48:43:f6:07:ca:32:23:99:58:97:f1:57:3a:41:76:
                    59:f4:fb:91:3f:12:80:44:16:34:af:c3:fb:26:42:
                    a0:c5:45:d7:97:3b:a4:c2:4c:49:57:a9:17:58:3a:
                    85:56:b1:a4:9b:04:a3:98:66:5c:7c:a2:ff:78:8a:
                    77:59:e7:1e:4a:a3:99:6b:39:e4:a0:5e:ee:12:f3:
                    a6:e1:21:17:e6:74:6e:c8:f2:ee:cc:06:e9:72:bc:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:15:09:FA:B6:3A:83:32:06:F2:89:87:FE:48:C4:9C:E7:9E:EC:2A
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:53:69:f8:d4:96:1b:31:54:48:da:db:54:4d:91:fc:fc:d2:
         b3:07:59:1f:e0:91:3c:7b:32:71:2a:ec:79:3d:35:8b:27:dc:
         14:86:0a:d7:0e:36:71:b4:d4:d2:1b:45:6a:de:8e:40:f3:4f:
         c7:c5:cc:0e:85:73:b0:5e:e9:fb:f4:d5:78:67:12:84:82:40:
         f2:25:cc:31:d5:29:03:f2:f9:d6:1f:69:6a:8b:2b:84:da:63:
         5e:03:27:6a:07:28:59:c3:60:3d:d6:41:20:19:40:6a:ce:ce:
         cd:f6:d1:eb:7c:ce:bc:fc:34:9b:44:bc:b6:91:27:5f:7a:96:
         51:c4:43:7f:39:28:35:f9:b6:d9:23:a9:8f:96:bb:71:a5:75:
         58:78:04:2d:ac:50:ea:c8:65:7c:dc:08:8a:d5:59:73:16:88:
         c2:4d:74:ef:f0:5d:f4:ac:9e:00:2a:84:f3:59:ae:b0:e0:6d:
         c5:1f:94:36:bc:9d:8d:17:fd:73:1a:82:57:23:20:57:57:b3:
         4d:8d:a3:e1:d8:3b:70:9a:0f:f4:2b:6e:30:e3:79:4e:1c:f9:
         43:34:ba:78:9b:b5:17:a3:2e:89:cf:5b:a5:2e:11:4e:cd:d8:
         84:18:68:96:41:7c:71:fa:34:c0:d6:27:52:02:96:a1:66:6d:
         3d:e9:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:23 2026 by rpki-client