Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
File:                     E07-fFQfVAbcfg_yaNBVgrrvyZY.mft (raw, json)
Hash identifier:          eycl+k/GFf3QSKLdODUH6Mg8pf5latTsxNPbK3FGl3k=
Subject key identifier:   CB:A0:44:1B:B8:11:10:93:3E:53:17:7A:2C:5B:19:95:B4:6B:62:C0
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       019CA8A0B5E7DEF6DBD181BCC617BF8F2AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
Manifest number:          10AC
Signing time:             Sun 01 Mar 2026 09:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 09:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 09:00:30 +0000
Files and hashes:         1: DaKsgydCqfoR3UTYBt_-ur18SlA.roa (hash: Ysj7NmHSINROv98PY+Va8qHr9IIqkkjd7BHamq6fK5M=)
                          2: E07-fFQfVAbcfg_yaNBVgrrvyZY.crl (hash: 0by7UpNh9hXqtZ1MtZl21ozCJEPsSV8Bv0s2AgMcf2E=)
                          3: Je3-dQyZGrjEpidj8pgBzIq8514.asa (hash: Phq+3kUlN1dLNHjVvwmOmZqN/Lk0LOlZzti0ZU6t6DQ=)
                          4: hCIg72oCuzdjpvUErNyNeKZxxVM.roa (hash: LQOyDSnPMpgTtFEBEEGnWKFQ7ulRpBrIbaqJ9siiUKU=)
                          5: vQjo3Wxio6bNf-SY7ilrOLyS98k.roa (hash: s9F1BCbxLOthkzlppFYdSop1NXmGZVrmNaL2rSir5MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:a0:b5:e7:de:f6:db:d1:81:bc:c6:17:bf:8f:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Mar  1 09:00:30 2026 GMT
            Not After : Mar  2 09:00:30 2026 GMT
        Subject: CN=cba0441bb81110933e53177a2c5b1995b46b62c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:d6:28:cd:80:6f:a2:f4:bb:56:5e:1d:01:
                    a4:88:d4:5b:7c:0e:ab:b9:37:61:01:a4:fd:69:f3:
                    28:d1:db:00:5e:24:dc:18:e8:ef:d5:4d:2b:25:2e:
                    d9:d2:65:fd:6a:5e:1b:2d:e8:cf:a6:73:d7:a3:7b:
                    ee:38:f1:15:19:26:11:b0:c5:64:91:fb:7b:b0:65:
                    93:da:76:c3:51:fa:53:78:18:2e:6a:fa:42:16:59:
                    71:55:fe:bb:3e:99:d6:40:de:c8:1d:b6:95:3c:30:
                    90:0d:c1:b3:92:9d:de:c7:16:f9:1e:85:9e:f1:f8:
                    9f:f0:38:0c:18:71:4d:13:ce:f5:f5:6c:73:62:09:
                    13:0b:7c:a4:02:b0:4e:6f:91:19:8d:6c:65:09:08:
                    96:fb:54:b7:36:9a:d0:fc:3b:31:16:d5:21:d3:a7:
                    a4:b0:a4:a1:6e:62:6a:4b:28:ce:57:22:51:d3:70:
                    b2:d3:41:5f:08:c3:7e:88:98:cc:cd:7f:f8:05:78:
                    e1:f6:55:7e:0b:93:38:70:96:ea:83:4b:66:56:c5:
                    9a:2a:d3:96:62:bf:3e:84:30:e3:fa:0d:e5:69:f6:
                    98:1a:4a:3b:6b:b2:ce:80:e1:5a:9b:7a:1d:4d:6e:
                    a4:40:3f:fe:ef:ee:63:b3:93:87:1c:71:08:43:51:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:44:1B:B8:11:10:93:3E:53:17:7A:2C:5B:19:95:B4:6B:62:C0
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f5:16:d9:3c:1a:ab:6b:cc:c8:7f:0d:48:96:c1:5d:e7:b9:
         1b:d7:cc:cc:51:a7:d1:7c:57:90:b1:fa:6b:37:0b:16:ce:8c:
         8a:c4:93:60:a1:4f:ad:90:3b:87:b3:e5:4e:34:7c:50:29:8a:
         43:eb:64:cd:70:0f:4c:1a:4e:c1:8e:54:e1:ea:9d:05:7c:9e:
         d9:b0:bf:f5:55:a4:fc:50:9f:c1:d3:f7:83:44:9e:21:3c:42:
         94:b1:9c:31:a9:fe:eb:e9:b3:8a:12:13:a0:c1:60:e9:0f:89:
         2a:4c:1f:67:a7:59:f1:45:e4:12:5b:db:05:4a:11:5f:44:6b:
         3b:c3:56:01:8c:ad:3d:b6:e2:9e:6d:f0:2e:a9:d4:66:fa:81:
         2b:50:20:8d:62:07:dd:5e:94:d1:1d:9e:4e:24:68:4b:08:02:
         1a:68:74:d2:45:00:2d:9a:40:68:66:58:92:65:00:80:c5:81:
         85:4e:b3:26:aa:9b:83:94:e2:4f:81:fa:83:f5:fc:5f:e7:55:
         34:42:f9:38:e1:33:63:f1:43:c0:2a:c2:6d:9a:74:ee:c3:a9:
         02:92:ce:53:4a:4f:d0:95:4a:0a:2d:cd:14:d3:d7:1f:ee:6e:
         3c:fa:9f:99:0f:98:81:b8:b9:fe:61:65:3d:b2:27:e0:9c:97:
         bd:08:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:49 2026 by rpki-client