Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File:                     F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier:          E61hd6gDYbdlvTCGQlkqOZSpsjfHiljsmKuWQs5a4m8=
Subject key identifier:   4C:5D:52:55:D5:A2:54:E0:B8:B9:54:B0:C6:B5:3C:CE:C0:18:52:77
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       019CAB34666DF84437192A85845713A11A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number:          11B7
Signing time:             Sun 01 Mar 2026 21:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:03 +0000
Files and hashes:         1: AzmcY5nCIGmTzMnG9LruhHEGo00.roa (hash: cMtkfTcSbWrHSFsNQ7VLJqs4PAOGb+NkHqYcRF5Tw+M=)
                          2: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: dU3rsKbIHOkkpupkxZJHbVc6jM9AAC15D4Y4Bl0ixQQ=)
                          3: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (hash: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE=)
                          4: XtK9VzDXyv3sdwcTkwc5-Qya0DM.roa (hash: teUAHbuYhJZuEkE7pLbgFZIEibZ6lPWc/nTcJhJoJaQ=)
                          5: _9HboKByaSoMHnysqhZOYfqvY2c.roa (hash: Nl3Q+3ezv+N3KYuLNQGwihVhoKkWwwwu9DNF0BRDFQo=)
                          6: gWhgdmlB2lpWuOAIl6VpGFWYvj4.roa (hash: k99lMPnYxfRiGOs/iXJ3ma/L1zdsn4yoYB5uNClc8J8=)
                          7: jrOsijLSha6RECGlO0QB8BL6Ido.roa (hash: rgLT7tnIPQnMgoJlyDq0oW/MhZozoq4vvCs1tzNQUIo=)
                          8: nCoVQp-9GoVs3ADjl3g0gBazokM.roa (hash: lnGftBj6+HAUcV2587YKXP9gaJct0VpqL1P75Kb2wPs=)
                          9: qcmbgoQaCmbceJ4xZI3Tt6jb-E8.roa (hash: OD8AG1ILYuTSDHzZIy152Q30x3zv2+IbmXk5SHJVDkU=)
                          10: vOpDb_RtDVytl5Ygs_Tb_D6twg8.roa (hash: 0yT29jGvPO8D24rMHIgvOXliv2Mpo0U2GR5aubiRoTA=)
                          11: yPF0loRCib-RBbqi2Jv4YOCUxA0.roa (hash: JdlBl0uHJZ27lQ7T6dMHN0yLNPKJ7KQjrbCgVKBWg7c=)
                          12: zXusYRLYwRAORttXPdckzwtPX9Q.roa (hash: LkaDbBqRpuuwa6zvdZYDfMixg8ARuKEupKYuwmwFLy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:66:6d:f8:44:37:19:2a:85:84:57:13:a1:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Mar  1 21:01:03 2026 GMT
            Not After : Mar  2 21:01:03 2026 GMT
        Subject: CN=4c5d5255d5a254e0b8b954b0c6b53ccec0185277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:f1:36:b0:04:c7:13:f2:5a:e8:6f:1d:a1:
                    3c:43:b2:f5:b4:ad:c4:25:90:f0:eb:02:cd:b0:9d:
                    0f:f9:0b:f6:22:e1:54:47:cc:84:dd:65:85:d6:b7:
                    8d:be:48:92:2f:56:4d:c9:69:98:3f:cc:3e:48:50:
                    70:56:dc:33:dc:e6:1c:74:58:ad:02:74:6f:38:21:
                    c5:a7:99:91:9a:86:0f:3b:10:4d:e5:aa:53:45:82:
                    95:c1:ab:6e:72:2f:20:b6:fb:bf:2e:c3:ae:ca:a6:
                    d1:ad:90:79:98:ef:79:43:4a:fa:03:55:c6:82:40:
                    f9:87:02:9e:73:c5:5d:ec:02:7e:a9:c4:bd:63:b2:
                    c3:66:1d:5a:8d:c5:24:ca:18:ec:51:1a:05:00:da:
                    b7:28:a9:fa:1c:fc:94:b2:ef:b2:0b:3e:a9:9d:85:
                    67:8f:fe:37:53:5a:d5:8a:59:b2:69:fd:1f:d3:48:
                    5f:2f:62:cc:7c:7e:40:d2:7f:0d:5c:bd:55:7f:9b:
                    71:3d:01:2d:34:d9:ae:3b:e1:70:55:4f:0c:37:ea:
                    fa:e7:e2:e3:6e:3f:05:44:3f:4b:f3:11:1c:8d:0a:
                    14:8a:3c:35:24:8b:1f:93:c6:15:88:39:04:fd:f9:
                    83:05:8e:2b:b1:4d:86:b8:8f:f6:71:53:8f:be:a7:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:52:55:D5:A2:54:E0:B8:B9:54:B0:C6:B5:3C:CE:C0:18:52:77
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:71:4c:53:9a:6e:e2:e3:9f:f2:cf:3b:85:7a:8e:55:15:
         da:c7:e5:fb:d7:d4:22:26:d9:02:af:c4:24:ff:18:12:ba:6c:
         54:3a:48:fc:12:83:f3:17:df:a0:5c:a3:08:c0:25:c6:8b:d3:
         77:95:a2:f0:1f:27:a9:b9:f1:57:17:38:b9:c6:76:7f:e6:4d:
         92:8c:28:70:60:29:33:29:3f:86:d8:52:ca:95:bf:f9:27:61:
         9b:60:b1:af:2a:d1:34:21:60:ee:17:c9:72:17:15:99:ba:f1:
         f1:3c:4e:78:d5:7d:27:6f:ef:5b:0c:c2:95:77:37:f9:57:90:
         09:8b:fe:47:23:6f:0c:13:70:e9:94:70:ed:f3:4b:ba:b3:fe:
         ce:e5:77:e2:09:12:93:70:a5:fa:ce:70:f0:73:20:a7:2e:a7:
         a8:de:45:fe:60:a1:a2:df:03:61:84:70:de:ab:d4:d7:c4:2a:
         16:88:51:98:9d:f4:4e:bf:99:46:75:0b:be:3f:9e:c7:ae:3e:
         91:ab:93:2b:09:f2:93:92:bd:fc:26:a5:13:eb:d5:bc:5f:a7:
         e4:8a:f8:9f:40:85:ce:42:a3:99:ed:32:b5:ef:8d:36:69:b0:
         43:57:d7:57:22:25:dc:24:e2:0b:e1:98:09:c7:55:c0:1b:d0:
         b8:ff:a8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:54 2026 by rpki-client