Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          Ee7q1Cnej1YuD9hC9Rg7ST5W+eWKDW7A8Ip4UP73fQ0=
Subject key identifier:   8E:FC:41:5B:52:1A:CB:91:4F:08:6D:27:62:52:ED:AD:C8:EB:CB:DD
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       019CAC7DC8DBB87C8A4821797E2AD9D8C63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          158A
Signing time:             Mon 02 Mar 2026 03:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:50 +0000
Files and hashes:         1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
                          2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
                          3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: b1P8UlOGxAyI6OAkgSV+3MQTgZPufZQ5sUHslPOY/6U=)
                          5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:c8:db:b8:7c:8a:48:21:79:7e:2a:d9:d8:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Mar  2 03:00:50 2026 GMT
            Not After : Mar  3 03:00:50 2026 GMT
        Subject: CN=8efc415b521acb914f086d276252edadc8ebcbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:35:b4:eb:97:1e:5d:ea:ed:06:86:e7:6d:
                    8a:de:92:0f:bb:9e:39:0a:41:cb:d8:50:ef:1d:b2:
                    09:49:79:ea:43:db:fb:05:3b:0e:75:6d:94:2d:02:
                    43:c0:fd:06:bf:53:2b:1f:0a:47:ca:75:37:7e:7c:
                    ce:b4:80:9f:08:88:c4:3e:fc:89:c7:39:d1:33:32:
                    a6:90:bf:12:79:e5:31:a7:fa:8b:e7:f7:98:c7:0a:
                    de:7d:1d:27:63:86:f2:13:8b:90:d5:bd:b8:3c:5c:
                    c5:d8:4c:f5:c9:8d:12:6c:6b:fb:32:39:34:79:a4:
                    54:b9:7d:dc:c8:37:75:76:3a:83:d2:ed:4b:8e:4a:
                    81:67:8d:2f:a4:d1:8d:9e:48:9f:97:08:ec:bf:60:
                    a4:c3:0a:43:fc:3d:c9:d4:b5:4e:66:7b:bf:d2:df:
                    65:8e:52:a0:95:82:a5:47:3b:33:19:c2:d0:88:80:
                    b3:c7:93:41:8b:5e:c1:d2:ac:74:23:49:44:73:26:
                    8a:a9:10:ee:e3:df:59:e9:ae:ff:c2:a0:d1:2c:f5:
                    c1:c6:a4:9b:6d:a2:4c:0d:c3:d2:3c:c3:ca:4f:75:
                    ee:69:b8:9d:f1:89:6a:83:7d:c9:6a:91:b9:cb:f4:
                    ed:86:3a:4b:dc:b9:ff:e7:ae:df:30:ac:f4:91:8b:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:41:5B:52:1A:CB:91:4F:08:6D:27:62:52:ED:AD:C8:EB:CB:DD
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:50:be:6b:c8:6d:b0:06:6a:a9:0b:18:81:a4:a1:67:8c:
         c8:9c:17:8c:7d:73:1e:14:74:f5:db:0d:ec:7d:0d:cf:32:9c:
         b9:7f:fb:b7:8f:42:b9:e4:fb:ea:34:d4:82:99:a0:02:cd:cb:
         50:3d:2a:26:8a:f1:7a:9b:06:7f:70:e9:ef:cd:43:23:5b:9d:
         27:0f:0d:77:85:15:44:d1:a6:b4:7b:a4:0b:16:eb:63:6a:04:
         0d:6b:5d:3e:ec:f7:b9:af:55:56:c1:4e:a8:6a:a8:c6:b1:fc:
         f9:d4:f8:47:bd:51:f6:77:1d:c6:de:e9:ab:51:24:36:b6:ba:
         8d:bf:9a:a5:ba:8c:53:2d:af:f7:91:71:bb:93:b8:10:c2:4f:
         6f:c1:d7:84:e3:52:26:f6:1c:af:50:bd:2f:bf:b9:3e:5c:b3:
         a1:1f:fb:9a:76:6c:fd:1b:49:43:ff:bc:ba:5d:cb:10:f3:31:
         e6:08:81:7e:15:43:a4:5d:da:bb:42:27:ed:74:1e:5a:53:d9:
         e4:cf:8e:78:21:ee:29:56:e7:57:94:79:c3:8e:27:68:0e:4b:
         64:c9:04:95:ef:53:dd:5f:59:a4:3b:ec:27:00:68:6b:6b:48:
         3c:c6:10:f6:51:f4:ab:61:8c:08:11:85:ce:a1:83:7d:b1:0d:
         0e:63:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:38:50 2026 by rpki-client