Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File:                     7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier:          uk+wDih8VV/QrDBGMjr6+TlMruLPENv/LybgXtBwDgc=
Subject key identifier:   C3:6A:DD:CB:3A:F7:91:61:7E:0A:9E:11:AE:7D:17:BA:E7:EA:97:78
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer:       /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial:       019CAB3464350435425AF170D81109043EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number:          0126
Signing time:             Sun 01 Mar 2026 21:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:03 +0000
Files and hashes:         1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
                          2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: yifW6ESr3z433f1+nyoGi4dSxtIfaDitw8kgZuAYFZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:64:35:04:35:42:5a:f1:70:d8:11:09:04:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
        Validity
            Not Before: Mar  1 21:01:03 2026 GMT
            Not After : Mar  2 21:01:03 2026 GMT
        Subject: CN=c36addcb3af791617e0a9e11ae7d17bae7ea9778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:a6:58:05:5d:1a:46:57:89:23:6f:02:79:
                    e3:6f:10:35:ad:35:3e:cd:75:d2:7a:36:d8:91:e2:
                    09:cd:ef:8b:ab:11:e2:ed:ee:e1:38:8a:f8:14:c4:
                    66:97:25:69:7b:ef:45:69:70:45:f5:06:0d:25:88:
                    ea:08:d1:2c:e9:67:57:73:c4:28:27:00:32:a2:7e:
                    98:f8:d7:13:eb:fd:0c:35:bd:d8:89:39:f6:41:e4:
                    77:86:43:09:2f:40:bb:8c:1a:52:86:5b:0d:af:0b:
                    c2:6d:ab:8d:a1:96:07:8f:d1:c3:4b:58:b4:3b:1b:
                    ca:2a:30:4b:1f:c6:0b:5d:64:3c:e1:fb:7d:a9:a9:
                    01:45:e2:2a:4d:8e:87:e4:d9:ad:39:b2:05:b7:28:
                    07:34:e8:8f:e3:08:23:bb:a6:5e:ef:c1:1e:d7:a6:
                    57:6c:ff:e5:28:02:57:50:78:07:f7:64:1f:37:04:
                    21:bd:ff:a6:f3:9d:27:6f:e9:64:8a:34:85:f7:e9:
                    45:fc:60:89:b5:8e:d1:5c:c1:c4:66:f9:37:f0:12:
                    12:b0:be:a5:44:9b:80:37:d0:2e:1b:4c:7b:f2:84:
                    fd:90:5f:0e:77:e7:37:42:c2:b7:13:45:00:7c:03:
                    5d:45:02:7f:4f:7d:5d:6f:2c:90:c4:52:1b:ba:f2:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:DD:CB:3A:F7:91:61:7E:0A:9E:11:AE:7D:17:BA:E7:EA:97:78
            X509v3 Authority Key Identifier:
                keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:ee:cd:4d:35:10:53:1e:5d:e1:37:fb:0d:bb:8c:c4:98:
         7d:97:c7:ed:f9:e3:1e:01:7d:38:f8:2f:02:37:31:ae:5a:74:
         93:e0:ce:b9:51:8f:ce:57:55:52:cc:db:33:71:5a:ba:2c:6a:
         dd:1f:5d:15:33:e3:c3:cd:a5:91:c6:e8:d4:c4:44:5b:e9:d7:
         49:50:55:54:6f:a4:a9:f5:82:89:8d:43:9d:63:97:54:13:78:
         ff:ad:e8:ea:8a:9a:37:ea:d2:3a:7e:c8:7d:66:1f:09:ec:0c:
         cc:17:89:40:24:a6:b1:74:15:61:c3:0a:34:90:82:07:65:d1:
         ff:6a:56:8d:66:cf:77:c3:7c:48:1e:c6:d2:56:06:6d:13:28:
         61:64:1b:13:a1:64:b5:5a:e2:e7:c7:76:c1:35:4d:d5:c3:56:
         07:dd:48:3f:bd:c7:f8:ce:ad:ce:cb:f4:8f:1b:2d:30:8c:32:
         98:d3:54:9e:03:5a:3a:a2:f9:af:5b:f8:47:cf:0c:d3:f3:cb:
         9f:43:2e:da:a6:c8:26:6e:f8:2c:b2:7e:36:d9:a0:55:1c:d8:
         68:8f:02:35:06:7d:f0:c4:26:41:8e:04:d4:e2:a3:30:c5:b7:
         4e:89:fb:2f:fa:ac:0a:71:22:0f:bc:a5:6e:21:83:be:53:a1:
         15:d9:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:08 2026 by rpki-client