Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          1NlbnPu7tZ05pFK+VJHq3gHpkL+6MbKZ9S++MhwH4tI=
Subject key identifier:   14:3B:3D:35:C2:C8:22:C5:F5:AF:FA:67:C8:CF:66:97:8F:49:3F:C6
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       019CAA8FD8374C98F0DE88927F319E5B641B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          1579
Signing time:             Sun 01 Mar 2026 18:01:19 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:19 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:19 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: YQ4M6epjU0qoFXm3Jmuhb023/xa0BKy4Ayy53PqYw6U=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:d8:37:4c:98:f0:de:88:92:7f:31:9e:5b:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Mar  1 18:01:19 2026 GMT
            Not After : Mar  2 18:01:19 2026 GMT
        Subject: CN=143b3d35c2c822c5f5affa67c8cf66978f493fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:12:bd:df:70:55:9d:e0:62:c8:ba:d5:01:
                    8c:36:55:2f:a7:e8:fa:b1:f8:4d:06:25:76:4b:07:
                    77:a2:72:df:a6:1f:63:86:06:66:51:77:2f:f9:91:
                    a6:90:d0:1d:d8:f0:b4:35:98:fc:40:80:79:e5:12:
                    43:5d:22:f1:5d:16:fb:69:89:8b:cd:9f:65:2c:81:
                    1c:0c:dd:3a:cc:b8:e9:e8:17:58:c5:5b:b1:91:92:
                    33:46:16:24:42:44:b6:1f:ed:95:35:d7:31:9c:20:
                    91:8d:29:91:e6:64:c1:9d:96:59:12:4b:07:98:0e:
                    72:6d:08:95:b6:1b:94:33:a3:31:05:ea:bb:12:9a:
                    5f:ef:5d:3c:a8:98:f4:e2:97:94:f4:5f:8b:de:fe:
                    5f:6d:b1:16:43:21:29:4d:dc:bf:df:08:9f:22:ac:
                    e9:3e:54:c1:07:6a:c8:1c:bc:89:2d:df:96:29:c8:
                    0d:a1:97:b9:f0:42:38:3d:60:83:3a:b2:b0:8a:39:
                    73:78:9d:83:05:60:b1:c0:b2:0b:52:3a:9f:b0:4b:
                    07:44:46:b1:38:2a:6c:da:3c:7d:cd:ae:53:ef:b9:
                    e9:95:c8:75:34:d4:e1:0b:c9:ae:94:69:92:3a:f7:
                    1f:f9:64:bf:9b:d5:15:ba:62:de:9f:b7:ba:11:f2:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3B:3D:35:C2:C8:22:C5:F5:AF:FA:67:C8:CF:66:97:8F:49:3F:C6
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:16:b9:5a:29:2c:77:a1:e0:0f:05:c5:01:da:5a:f7:9f:
         c4:43:a9:28:a1:fc:3a:5a:3e:9e:9e:7a:e0:81:08:d7:f7:93:
         09:00:ce:40:e7:e8:14:57:95:ab:c8:01:99:38:c5:d2:c8:86:
         12:d6:d4:f3:38:a3:04:d8:38:6f:1b:43:99:5e:06:07:72:49:
         3e:45:6c:50:a9:2e:b8:44:73:5e:f5:76:79:1a:35:d7:26:ab:
         e2:a0:93:e9:44:5c:17:64:ae:a9:be:1c:4f:55:12:d2:7d:26:
         b0:6d:a2:34:08:71:36:9f:e4:88:f9:93:3f:14:fb:a6:ad:21:
         a3:15:a5:48:5f:ea:eb:92:29:12:65:b0:8e:54:65:c9:d9:2c:
         04:1b:53:d5:4f:d4:cc:ce:46:1d:48:90:64:e6:b7:87:7e:5b:
         ee:2f:6f:92:60:b9:db:fe:66:08:7e:13:90:5e:54:91:31:83:
         cd:65:4d:83:c0:d9:6b:7f:ee:48:30:a3:9f:8b:de:d9:bb:92:
         82:1f:e7:64:62:2d:fa:f8:8a:da:e8:8b:25:0f:ec:dc:1e:6d:
         2f:29:78:ab:69:cd:3f:74:76:b9:3a:f0:03:a4:b9:0c:88:1b:
         3e:f5:7c:d3:dc:5d:66:31:b4:fb:cf:7d:60:47:bc:a0:2f:be:
         0f:dc:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:20 2026 by rpki-client