Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File:                     h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier:          C2bHWLghumBVDS3LETwpkMRWkMw5vD4eZLj5qL+Ah4c=
Subject key identifier:   5D:9A:A0:D0:C0:12:71:62:E5:D2:AF:0E:93:01:B3:25:BB:11:7C:68
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer:       /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial:       019CAD22F14EEEB909245E7310EE7EAADE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number:          075F
Signing time:             Mon 02 Mar 2026 06:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 06:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 06:01:14 +0000
Files and hashes:         1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
                          2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: uXbkWlDHtcJcCVxS3XWdjwnpZyCOp8TBlXEC01b5sfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:f1:4e:ee:b9:09:24:5e:73:10:ee:7e:aa:de:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
        Validity
            Not Before: Mar  2 06:01:14 2026 GMT
            Not After : Mar  3 06:01:14 2026 GMT
        Subject: CN=5d9aa0d0c0127162e5d2af0e9301b325bb117c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c5:fc:54:47:83:8d:50:92:f9:c9:87:bb:19:
                    da:88:73:ed:d8:e7:e2:b3:73:74:5e:d4:68:94:1b:
                    55:8e:f2:5c:92:12:1f:c5:41:54:36:b2:10:25:1b:
                    75:22:e2:6d:4d:e2:90:56:c5:be:ec:20:2d:c5:5d:
                    9e:6e:b5:58:11:22:04:70:21:3c:bc:cc:ab:b2:42:
                    64:69:f3:20:6c:b5:62:30:91:59:08:40:42:81:63:
                    ae:d0:a0:1b:22:04:6d:6c:13:0f:b3:1e:91:95:a0:
                    84:98:37:c4:40:91:ab:19:a6:1f:73:84:e1:42:1e:
                    d7:66:01:c8:8c:96:56:70:54:fd:46:5e:de:aa:d4:
                    82:42:18:78:7a:13:ec:11:a4:8e:10:aa:4a:64:02:
                    ed:2c:18:68:8a:16:54:8a:47:04:a3:49:4d:73:8d:
                    44:01:c6:35:66:41:1a:9f:03:f4:4f:c4:29:2c:ff:
                    c4:2f:d2:d7:c3:cd:31:9d:75:2a:f4:1e:57:90:f9:
                    d4:e9:15:2c:7e:1d:62:6c:57:0d:1c:f2:e5:a6:e5:
                    95:a7:a3:90:79:e6:0a:20:bc:82:ef:36:62:8d:d0:
                    5a:fe:8a:f6:dc:50:f3:db:fa:10:b7:4b:f0:a8:52:
                    0a:20:e5:e5:a5:0d:ad:10:a7:87:33:bd:de:c3:45:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:A0:D0:C0:12:71:62:E5:D2:AF:0E:93:01:B3:25:BB:11:7C:68
            X509v3 Authority Key Identifier:
                keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:15:74:59:08:b4:8a:00:91:9e:66:c8:ec:8d:a0:d1:66:ea:
         3b:24:5c:2c:00:f8:1e:99:14:a4:7b:90:94:b8:81:af:71:f8:
         dd:51:26:f7:22:5a:80:33:ef:b8:40:e1:23:42:36:a4:37:d9:
         cf:30:d3:5a:91:86:72:9a:6e:c4:f1:05:2b:18:24:1b:fa:0b:
         97:dc:99:75:74:aa:ce:14:3a:41:bb:d4:94:39:97:25:6a:f4:
         40:8f:bb:73:f2:02:c4:f7:69:55:20:08:57:a3:22:24:05:82:
         ae:cc:cd:ef:c6:0d:04:ef:4b:b4:b2:f1:70:d6:09:a4:88:9b:
         d1:93:ae:59:0a:06:c7:76:88:d2:46:d3:bf:b5:52:13:a1:f8:
         9a:f5:3c:d6:79:bf:9a:19:3b:bc:ea:b6:7a:e9:61:30:aa:b3:
         10:da:fd:24:57:9b:52:19:27:04:61:d5:de:04:a9:84:2a:2e:
         7b:c3:71:e6:7e:ea:28:05:24:10:b1:e1:ab:b1:9a:bd:87:23:
         89:d0:24:bc:33:41:59:45:6f:50:e1:35:5e:30:48:b2:e1:95:
         ef:d3:b0:ac:62:2c:02:9b:47:2e:8d:9a:dc:ff:cc:db:b4:5d:
         3e:0c:1b:8a:e2:70:13:08:c6:53:c0:66:e5:d9:a7:e9:50:a1:
         ce:b7:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:12 2026 by rpki-client