Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          0tlnIKusrr8gcpMNjiBgOKaUZS0oIj+6gyMg2bbB2T0=
Subject key identifier:   3C:83:06:C1:62:2F:08:E9:82:97:E7:89:D7:76:2C:30:27:19:CD:71
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       019CAAC7118C2092C0A888E913CD22AB48E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          07BF
Signing time:             Sun 01 Mar 2026 19:01:38 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:38 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:38 +0000
Files and hashes:         1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
                          2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: kuEjPo6BLheDi0yvqqdMvdTOif0t+wM18CgpD9ucEgI=)
                          4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
                          5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:11:8c:20:92:c0:a8:88:e9:13:cd:22:ab:48:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Mar  1 19:01:38 2026 GMT
            Not After : Mar  2 19:01:38 2026 GMT
        Subject: CN=3c8306c1622f08e98297e789d7762c302719cd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:0f:1c:12:d0:9b:70:37:e9:51:c0:7d:f9:
                    81:52:2b:7e:a7:b6:5e:7f:fe:e1:63:69:a7:b6:33:
                    bd:6b:8e:f6:3c:73:b9:56:26:c0:a3:41:a1:5a:dc:
                    8d:a7:db:cf:cc:ef:ef:26:da:2e:0f:19:94:d7:16:
                    97:c2:14:41:bf:2a:28:27:85:c3:15:18:e7:dd:a1:
                    92:38:6c:b4:ed:ba:17:d4:f8:36:22:ff:2e:6d:41:
                    48:1f:43:0a:d8:ca:28:98:2b:67:07:db:42:7a:29:
                    ba:1d:d1:e7:36:f4:99:a5:a0:62:1d:b0:04:14:9d:
                    82:b6:8d:7d:bc:38:37:1e:fd:a6:5f:6a:5d:b0:32:
                    aa:7f:8b:eb:05:63:4e:47:f2:6b:b7:b7:6d:77:61:
                    22:15:c0:65:ed:4f:c9:b2:95:54:05:62:42:91:73:
                    07:fd:5d:11:14:1e:0e:a3:54:61:27:4d:a3:05:9d:
                    56:ea:59:12:5e:ab:db:1a:c9:ff:78:20:6f:79:ee:
                    a5:b7:ec:d1:97:7f:2c:8d:e0:a6:dd:eb:de:4f:64:
                    fd:56:af:cc:73:ae:81:d5:9b:34:be:c5:83:54:f4:
                    68:17:86:23:92:8e:70:a9:b9:fd:de:ab:c9:1d:b1:
                    4c:d2:8f:fa:bc:48:35:ad:b6:fd:22:29:16:9d:f9:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:06:C1:62:2F:08:E9:82:97:E7:89:D7:76:2C:30:27:19:CD:71
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:a9:a4:24:3c:b8:c8:92:38:b5:1c:fe:a3:dc:16:12:f4:
         1a:76:df:06:05:49:fd:f9:a1:b4:fb:77:e5:8c:f7:15:73:6a:
         1d:3e:0b:e6:1f:93:02:91:42:61:6e:21:69:50:d2:af:71:32:
         ad:96:fd:99:f7:a2:83:e1:3b:66:c7:04:30:df:67:71:d0:55:
         ab:7e:af:d3:54:06:71:27:68:26:58:8c:49:e4:2f:cf:2c:52:
         2f:1b:63:0d:e3:6a:03:a2:0f:6f:75:11:98:22:0f:3c:e8:1a:
         0a:40:a8:f5:24:04:54:a3:f0:b7:10:72:04:c2:73:b9:a0:cc:
         b8:1c:f4:f3:88:de:a4:59:35:87:31:d4:a2:77:5d:4b:29:00:
         7b:5d:ff:82:25:b8:6b:26:e1:8a:92:d8:9e:a5:94:9d:3a:dc:
         8b:3d:3a:5b:68:94:1c:96:55:a4:84:80:8d:07:54:fb:02:be:
         81:c0:4d:81:99:2e:04:46:f8:25:fc:7e:be:02:e3:24:4a:a1:
         e1:b7:42:58:99:b1:b4:2b:4b:10:41:76:22:73:d2:61:ec:51:
         64:0e:06:0d:43:1e:ff:13:7e:a1:02:5e:d9:0b:16:e4:0a:98:
         a2:b7:cd:69:c1:f6:02:12:05:97:34:5e:84:16:d1:2a:ee:50:
         e9:fe:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:12 2026 by rpki-client