Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
File:                     Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft (raw, json)
Hash identifier:          RPd8LC6jeohjlousUnCjysJkRtU4UG0i2b5GfGFGRmI=
Subject key identifier:   C7:2C:BD:55:3A:A4:18:7D:F7:C1:35:B0:2B:2F:76:53:77:72:B7:9F
Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7
Certificate issuer:       /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
Certificate serial:       019CA8A0E4FBAD6061247FF6AF8D4660A87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
Manifest number:          C7
Signing time:             Sun 01 Mar 2026 09:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 09:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 09:00:42 +0000
Files and hashes:         1: OVKvymFrbX43XOljNNooa7WThWs.asa (hash: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100=)
                          2: Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl (hash: yt3dKJFZjTvr+T+L44tnGL7N7xIJVA+AmuCzZPTOZso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:a0:e4:fb:ad:60:61:24:7f:f6:af:8d:46:60:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7
        Validity
            Not Before: Mar  1 09:00:42 2026 GMT
            Not After : Mar  2 09:00:42 2026 GMT
        Subject: CN=c72cbd553aa4187df7c135b02b2f76537772b79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:09:2d:87:ba:bb:2a:b5:25:e6:d7:89:19:
                    05:c4:bf:b0:04:a5:a1:74:d1:7b:93:e9:0c:aa:68:
                    6a:f4:7a:45:f3:e2:e9:42:47:8e:df:dd:0a:40:0e:
                    a1:62:d9:97:f7:43:fb:89:43:de:56:19:b5:39:42:
                    81:6b:0d:3d:39:1a:62:69:22:4f:02:5f:93:46:89:
                    29:bc:70:2a:0e:ca:e7:26:e9:bc:af:b1:b2:ad:ad:
                    0b:c5:4c:d3:f2:61:53:89:a9:72:ba:52:59:ed:30:
                    a8:8f:c8:4c:f6:54:bd:e7:c5:b0:9c:e0:54:3f:e2:
                    21:85:71:cc:e4:9f:9b:36:64:8f:a7:f2:e2:24:32:
                    d5:42:64:79:af:1c:ce:2d:df:f3:93:2b:3e:a0:d7:
                    9e:02:2a:9b:79:3c:45:5e:80:23:63:8d:d8:0f:8c:
                    6a:9c:aa:2c:55:d1:79:5c:65:27:77:6d:58:33:0c:
                    33:44:36:25:b2:84:a0:d5:15:0e:cc:61:8f:02:cb:
                    be:08:04:19:73:c9:6b:e8:47:2a:a2:a1:8b:2d:31:
                    44:fa:19:ee:f2:b7:01:10:4d:bf:13:f6:00:5f:f7:
                    a3:3e:75:78:27:43:e6:58:8d:09:59:05:54:04:87:
                    e8:dd:00:72:b3:a5:1c:22:2e:38:37:29:b1:e7:ee:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2C:BD:55:3A:A4:18:7D:F7:C1:35:B0:2B:2F:76:53:77:72:B7:9F
            X509v3 Authority Key Identifier:
                keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:d2:12:7c:a3:84:da:a0:01:8b:e1:f3:fe:df:d5:dd:ee:
         82:bf:93:31:fe:d5:2d:4b:04:67:34:97:7c:50:60:07:34:56:
         82:93:8e:66:08:99:29:a2:3a:31:9b:ee:ad:73:5e:30:44:25:
         5e:98:b4:d5:64:8b:ff:2c:57:ea:1c:4c:71:06:4b:14:36:f9:
         6b:91:73:21:1b:3d:4d:02:3d:3e:47:4c:e5:03:c2:87:0c:e3:
         b8:62:eb:3f:23:98:0a:9a:8a:79:d2:95:1a:89:f6:16:f9:5f:
         db:3e:ec:7b:99:10:93:c7:18:9a:aa:15:11:83:64:f4:96:6e:
         b5:be:17:4b:23:94:bf:e5:dc:90:11:cb:f9:c1:dd:c9:e1:b9:
         33:e9:a7:25:f2:b0:82:c8:df:09:2c:aa:02:25:c8:94:ff:4b:
         2e:41:9d:e6:60:09:18:6d:9b:73:65:41:97:a1:cf:2b:12:4c:
         e9:00:eb:4f:bd:ba:44:e1:6f:36:d6:7e:3d:b0:f2:c0:99:96:
         a2:20:c0:7a:45:a0:5d:11:ab:be:c5:c6:cc:ce:3d:6f:9b:aa:
         d7:8b:aa:2e:e1:1c:3e:c1:18:3e:93:fa:59:0b:fc:3d:1d:31:
         aa:8d:f9:55:81:63:08:90:15:4a:5b:9c:f5:6c:f7:1a:11:ad:
         e7:53:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:46 2026 by rpki-client