Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File:                     fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier:          g++QPgg7kelw0NtwEC3N2SK5uaiuilA7kRfjLN1bLVI=
Subject key identifier:   2B:21:DB:FA:F1:66:A8:54:D7:A9:E7:13:BE:B7:85:F1:3C:09:6B:A3
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer:       /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial:       019CACEBE51E6824F9203984707436BB91FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number:          7E
Signing time:             Mon 02 Mar 2026 05:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:06 +0000
Files and hashes:         1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
                          2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: TrNwDKDG6q9yrOnWK6r6lkscbb3gtCm0K16SvLeDvMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:e5:1e:68:24:f9:20:39:84:70:74:36:bb:91:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
        Validity
            Not Before: Mar  2 05:01:06 2026 GMT
            Not After : Mar  3 05:01:06 2026 GMT
        Subject: CN=2b21dbfaf166a854d7a9e713beb785f13c096ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:e4:3a:08:d9:6b:ef:af:d4:4e:11:06:79:
                    d7:36:7c:4d:d0:53:cf:a7:18:0d:9f:3e:68:f7:a5:
                    d0:43:44:6f:54:b3:0a:ef:3a:25:f0:f9:ac:8e:58:
                    09:0b:a2:86:28:f1:ef:64:39:f3:3f:20:98:bd:4e:
                    1a:d9:de:fc:db:18:36:05:d2:f1:5a:91:20:10:ae:
                    af:c4:1a:c2:fb:a1:e3:9b:cf:b6:a3:22:58:e3:0d:
                    d2:18:f9:39:44:89:fb:84:22:dc:a5:0c:6e:f3:a2:
                    2b:79:5b:78:da:2e:53:8d:25:97:52:45:c1:b7:a7:
                    00:3b:ec:1e:62:c7:29:68:8f:ff:74:f6:1d:66:e8:
                    ef:43:76:af:f8:c6:f1:8c:6e:01:9a:fc:07:de:6b:
                    8c:75:96:3e:90:e1:fe:7d:fe:c3:d8:00:4c:dd:9d:
                    51:2d:ff:15:de:e2:e8:b9:a7:21:bb:b5:15:2b:31:
                    72:64:8d:b4:b7:0d:aa:51:d0:d6:a7:87:7f:ed:d9:
                    70:94:89:c7:17:e5:ac:19:ab:a4:04:29:22:72:23:
                    22:2e:0d:d5:8d:85:e3:40:2d:13:6d:86:37:3a:a1:
                    0a:91:43:10:52:b4:c3:69:75:da:f5:e9:8a:f5:03:
                    90:a8:f9:c0:00:fd:e7:24:72:60:c4:03:eb:da:cf:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:DB:FA:F1:66:A8:54:D7:A9:E7:13:BE:B7:85:F1:3C:09:6B:A3
            X509v3 Authority Key Identifier:
                keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:ce:c6:1f:69:1f:bb:68:41:43:90:06:00:16:33:ea:05:
         f2:bb:8b:08:3f:22:31:22:23:45:de:63:fa:3a:86:c1:f3:fa:
         57:48:60:64:0b:14:b0:12:8f:ef:fa:45:5c:37:89:99:7a:8a:
         49:0b:d4:f3:f6:00:75:7a:7b:6a:15:1e:8e:4f:4b:57:94:b0:
         c9:cd:0c:a7:b1:82:54:94:77:1d:19:8b:50:6a:a2:64:05:a9:
         63:0b:ae:fc:16:c5:5e:52:99:2e:4c:f7:8a:79:c2:42:a5:a0:
         2f:b8:68:9a:cb:08:e0:40:fc:9e:78:ed:99:80:aa:cb:45:0a:
         26:66:fa:c1:51:3a:41:1f:96:51:51:5a:4c:44:34:47:fe:c4:
         50:9d:36:31:86:cf:a1:a8:30:e9:0f:cc:a9:d7:00:b9:74:59:
         c5:62:2f:20:30:c0:a4:ee:21:c6:56:db:30:99:a9:90:61:a3:
         ba:53:9a:ad:e2:b8:0e:cd:1a:59:a7:6b:18:64:d2:15:f8:0e:
         e2:db:d4:7d:5c:08:30:80:cd:b6:81:ea:b8:35:9e:d7:64:4f:
         c5:86:1f:2a:d2:3e:99:9e:60:78:9b:f6:91:c3:48:86:3c:3f:
         8a:af:fa:16:23:8e:65:07:bb:e6:32:98:c4:34:f1:45:f9:06:
         68:50:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:08:31 2026 by rpki-client