Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File:                     V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier:          Ay7Hsg2sCsmpicc5OXgMO5+wPfnOyAiP/HPvkssLWyQ=
Subject key identifier:   6C:68:D6:16:CF:D0:C2:FB:32:0B:AB:7D:D1:0C:57:B3:7F:09:57:E8
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer:       /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial:       019CAC105B9E5A9BD6AA9A69F787BE909469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number:          17D9
Signing time:             Mon 02 Mar 2026 01:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:18 +0000
Files and hashes:         1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: ELQSAehsMybIA2Qi446+VwWO6p4uMsA7TZDSCakbjBU=)
                          2: wqUca6hdhuPK8izyY-5u-NB8hFo.roa (hash: HRKsMqKaEiIwseli6i4ZQRouG3dOlIyMlhskACBVj8Y=)
                          3: yOVUwpawosnLEvEpWeBu0ZksdtE.roa (hash: ecVfRjOLZ9OqmXqMU4m+THLoypH/3fTNLWWn4EOFi9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:5b:9e:5a:9b:d6:aa:9a:69:f7:87:be:90:94:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
        Validity
            Not Before: Mar  2 01:01:18 2026 GMT
            Not After : Mar  3 01:01:18 2026 GMT
        Subject: CN=6c68d616cfd0c2fb320bab7dd10c57b37f0957e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:97:e6:9e:5f:d1:e0:da:d0:c7:1a:99:21:
                    18:c1:5d:6d:2a:ec:c3:00:64:33:be:23:3a:ff:ed:
                    c5:29:d8:18:ed:27:58:70:ba:73:ec:77:53:05:2d:
                    3f:5e:de:e0:8a:b7:f9:8e:16:81:ce:53:38:96:52:
                    20:f2:b8:7b:a9:b2:b6:e1:a5:02:55:79:22:bb:9e:
                    f5:be:b2:b5:95:a6:23:b3:7b:7a:f9:a5:ce:fa:e8:
                    58:1b:09:93:4e:24:e4:8b:28:02:49:1c:4d:84:ca:
                    77:87:89:ee:69:40:63:0d:c5:b9:38:d4:f7:8d:ce:
                    b8:3a:a5:91:d8:54:e8:db:13:c6:20:dc:24:75:cb:
                    fb:3d:b8:16:5f:0d:b0:fc:cd:ea:38:68:7a:3b:6e:
                    19:af:5c:4e:a1:8e:60:e9:62:d6:07:02:b3:64:98:
                    5c:b6:c7:c0:6e:ce:78:b7:bc:cd:c1:db:77:f6:e0:
                    21:92:57:bf:72:86:1c:78:82:42:b3:57:08:18:b8:
                    c6:49:1b:62:7f:4b:6e:ba:94:a6:b5:92:7a:d9:d3:
                    33:ae:96:68:3f:17:8f:9c:b5:dc:ba:35:5e:09:aa:
                    6e:e6:d0:84:9e:48:70:4a:2d:e9:64:35:4f:1d:ed:
                    79:25:31:11:f3:a1:90:23:d4:d3:33:49:df:87:88:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:D6:16:CF:D0:C2:FB:32:0B:AB:7D:D1:0C:57:B3:7F:09:57:E8
            X509v3 Authority Key Identifier:
                keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:0b:c3:96:8e:fb:e5:6a:14:08:31:8b:16:57:83:94:88:
         47:91:17:9a:bc:73:20:b7:15:55:b2:69:62:9f:07:c4:d7:39:
         99:c6:46:87:5f:15:6b:a0:d7:e8:03:9a:6e:45:0e:05:e1:88:
         53:09:fd:bb:7d:ef:3c:22:20:9e:9b:ba:f8:10:f3:45:f4:62:
         f9:e4:7f:ea:ce:c6:75:a7:91:67:10:30:44:d1:59:69:58:48:
         05:97:7d:05:85:be:80:4a:5e:dc:84:83:e7:bf:a3:c7:84:e3:
         46:5b:5f:19:90:d1:02:a4:d9:8a:e2:7c:62:24:8c:63:d4:8d:
         7f:c1:08:81:11:48:ef:0f:f4:30:88:4c:c7:53:f3:9f:5a:39:
         fc:94:8f:60:bc:d9:11:12:ba:d2:c5:a1:26:fd:c6:78:df:67:
         d2:48:e2:1c:55:2f:c2:2e:9a:37:32:3c:0d:9c:bb:62:64:01:
         dc:6f:35:f1:99:ff:8a:78:31:47:e4:97:66:b1:37:18:73:e2:
         4b:ec:47:7b:27:f1:7c:bb:47:e1:11:15:fa:e2:ab:7f:5d:19:
         62:9d:f3:90:0a:e1:80:8a:d1:18:6a:ac:44:6b:60:31:bf:74:
         71:e5:f0:08:69:c7:58:c8:26:e7:93:08:63:79:0f:8b:88:41:
         3e:b4:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:40 2026 by rpki-client