Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File:                     V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier:          CGxpgYsv30ZhtSAu0+rNdsywJYt6XypY6AhfW0CKoWI=
Subject key identifier:   7C:6D:05:09:63:AA:E1:FD:F8:4E:D5:12:C1:4D:C2:43:1B:62:4C:E3
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer:       /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial:       019CAC7E12C89E1E477EEADAF77C72B3C85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number:          0F7A
Signing time:             Mon 02 Mar 2026 03:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:09 +0000
Files and hashes:         1: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (hash: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo=)
                          2: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: Q9EaKdYPEL06btTERikxS2w2OTJ1S/cR7Mg2Aeu4+Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:12:c8:9e:1e:47:7e:ea:da:f7:7c:72:b3:c8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
        Validity
            Not Before: Mar  2 03:01:09 2026 GMT
            Not After : Mar  3 03:01:09 2026 GMT
        Subject: CN=7c6d050963aae1fdf84ed512c14dc2431b624ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:79:c7:b0:a5:d7:e3:81:3d:b8:5c:9b:9a:
                    7d:a6:90:12:fe:60:e5:c0:a3:66:6d:31:9a:37:34:
                    51:27:3a:91:0b:ab:bf:5e:a7:41:36:eb:85:6a:1a:
                    6e:71:26:bc:4f:7c:70:27:c3:c8:97:76:19:cc:91:
                    d5:66:c8:ad:64:8c:e3:ff:7f:f7:08:34:01:8f:6b:
                    7a:85:9e:de:25:d3:c1:2f:ec:06:a0:8e:4c:00:d4:
                    07:ff:6d:ee:4e:4d:01:33:13:c9:5c:dc:33:36:f6:
                    9f:de:8b:e1:0e:f1:77:e0:c4:87:49:cf:60:53:f7:
                    c4:bd:2b:b1:1a:31:04:1b:f9:7d:48:01:e5:a2:d4:
                    f6:3a:ff:bb:e2:1b:d5:c4:6c:00:0b:69:da:df:65:
                    76:9b:89:d2:4c:f0:85:ab:4d:45:31:d1:a0:08:6f:
                    bc:d4:46:c2:e4:c7:f7:ea:63:aa:83:e9:c6:b6:c8:
                    ef:da:48:46:6f:e4:d8:17:6a:a8:14:0b:ec:56:6b:
                    e2:74:6c:60:23:ea:cb:1e:14:96:77:7e:43:7a:02:
                    e7:6a:1f:11:94:76:88:53:37:96:46:de:cc:90:03:
                    27:21:05:31:27:05:29:fb:3e:97:6c:43:72:ac:62:
                    b8:df:65:f0:d7:30:b4:f2:48:18:4d:83:d3:7c:18:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:05:09:63:AA:E1:FD:F8:4E:D5:12:C1:4D:C2:43:1B:62:4C:E3
            X509v3 Authority Key Identifier:
                keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:ca:9d:30:52:65:de:10:e3:e1:05:f8:2f:44:15:1f:29:
         05:c1:46:ff:5d:78:92:b6:37:26:29:66:f3:0c:c5:e6:f8:af:
         9d:f2:1b:66:4f:46:48:68:c2:0e:c8:8a:a2:b7:85:de:04:8b:
         fe:96:76:be:9b:09:cb:87:6d:38:e8:3d:21:b3:0c:f9:7a:c0:
         5f:58:cc:a9:0e:31:69:a8:c3:6a:fd:5f:0c:3c:af:cf:66:0f:
         3f:72:9d:37:86:35:b1:3c:81:c3:62:13:9d:de:61:79:69:73:
         50:64:fc:90:1c:c2:d7:3c:e8:b7:97:1d:d8:fe:13:ba:d7:a6:
         76:84:ea:b8:f4:89:5c:64:9a:01:8e:c6:93:62:39:8a:1a:50:
         89:8b:ce:0f:73:e2:ea:45:b4:3e:c3:a7:9f:c3:17:ac:6d:07:
         71:7e:0e:aa:89:38:b1:37:d3:29:57:10:91:ac:c4:d9:c0:3a:
         25:b2:3c:4c:b9:a8:55:03:a7:37:d5:04:9a:1c:f6:ef:77:46:
         d7:9f:fb:e8:52:98:30:96:3d:34:66:3f:2a:b8:2f:be:8b:4e:
         a2:f6:b6:31:b5:e3:4e:04:63:e8:f7:e8:99:6e:7c:8e:f8:6a:
         c4:ea:39:08:d1:7b:6b:aa:53:a3:73:f6:76:83:72:ee:81:37:
         fc:ff:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:16 2026 by rpki-client