Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          uD5l5k9kqWUVUZLlZw5v9nUWdk5KGWrYZM70DPgmdcE=
Subject key identifier:   00:83:6D:15:A8:61:2E:C0:F1:80:2A:B8:AB:B4:12:FB:63:53:B2:35
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       019CAC7DC3CE93A963013162BE0E6E2EEDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0E24
Signing time:             Mon 02 Mar 2026 03:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:49 +0000
Files and hashes:         1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: LyBB1CxNgMlDSODlK2fhjwpJFWpjsm+8fDrP/C+J6+4=)
                          2: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          3: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (hash: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ=)
                          4: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (hash: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:c3:ce:93:a9:63:01:31:62:be:0e:6e:2e:ed:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Mar  2 03:00:49 2026 GMT
            Not After : Mar  3 03:00:49 2026 GMT
        Subject: CN=00836d15a8612ec0f1802ab8abb412fb6353b235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:de:a2:2a:78:61:a5:f2:f4:63:62:0e:d7:
                    90:38:76:38:8a:06:14:20:c1:91:34:6e:44:82:4c:
                    1c:c3:18:80:79:fc:6c:dc:ce:90:f8:79:85:6b:14:
                    94:cc:15:29:ca:5b:6e:9b:44:1f:10:70:82:c5:fb:
                    aa:65:44:25:8f:b8:d9:4d:0c:38:18:a3:b5:32:5d:
                    50:cf:30:5e:07:94:50:c4:81:ea:af:05:99:9a:a9:
                    e0:6a:e2:13:11:57:50:bc:d7:7b:3b:e3:da:44:66:
                    d6:fe:87:5c:c6:99:6c:49:c3:f2:83:02:37:77:01:
                    51:ac:5e:78:cd:95:10:d5:39:3b:91:25:4a:08:99:
                    1f:7b:93:f6:d0:22:e3:da:3a:fa:3c:88:a5:08:a2:
                    f2:fe:ec:e7:13:41:e4:3b:8b:50:82:29:c7:cb:73:
                    e3:46:f5:0c:ee:3a:e2:04:c9:ee:18:5e:74:79:c3:
                    86:03:5c:96:c2:ce:5c:c1:86:cc:b6:e7:63:a6:3b:
                    14:12:91:78:e1:db:e3:b2:a8:22:25:5a:f9:d5:a1:
                    57:30:ff:16:f8:da:3a:e4:2b:08:a1:a1:dd:69:b3:
                    c2:bd:fd:81:f3:9a:e0:d0:7b:5b:53:77:ee:32:55:
                    55:98:c8:42:b8:f3:e4:0c:7a:ad:79:8e:87:9d:82:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:83:6D:15:A8:61:2E:C0:F1:80:2A:B8:AB:B4:12:FB:63:53:B2:35
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:ee:23:d3:9f:a9:ac:99:ef:06:82:e9:70:66:36:b2:b1:
         67:53:9c:fb:ef:78:e9:be:5a:2a:2e:9b:90:08:14:e4:2b:f9:
         cb:d6:8a:9a:22:2d:a6:2a:99:e3:5a:44:45:90:9d:fa:66:22:
         5c:42:a7:88:9e:d2:74:6f:4a:8c:37:25:f3:66:a5:76:b7:09:
         f8:d0:78:a9:46:8b:d3:fa:35:7d:82:94:da:4d:10:5f:b4:85:
         5c:5a:1b:68:d9:84:e3:47:64:28:99:90:dc:77:dd:c0:bc:dc:
         85:a5:a3:63:84:6f:09:c0:fc:4c:ea:39:51:b3:51:a9:85:b5:
         63:6b:13:6b:16:45:e1:e4:81:f3:7c:0d:79:a4:85:eb:ab:e8:
         79:3a:bd:0a:c0:7f:42:fd:5f:aa:67:30:1f:3a:19:3c:21:b7:
         f7:91:65:9d:4e:92:db:f2:7d:69:53:7c:ba:59:7d:db:54:8e:
         64:97:c7:89:62:db:54:84:30:e2:87:da:4e:ad:9f:51:ac:c2:
         53:e4:1a:71:77:5a:56:c0:8b:b9:30:12:d8:56:5a:31:9f:44:
         e0:c8:8e:bf:b6:2e:dc:27:e7:bd:28:f1:14:e8:40:07:79:79:
         78:36:be:6a:59:fd:71:98:bc:cf:8e:db:7f:a4:3d:e6:f1:c3:
         89:76:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:28 2026 by rpki-client