Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          vxwMbR2+IqyN/9xKECWMkT+k4weewu9fDdIZAGNCY3I=
Subject key identifier:   2A:42:92:6C:25:66:BA:26:98:C6:53:25:A9:E5:C3:70:EB:A4:6F:01
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       019CAB3406A00D2F8D689697F6AF567AE2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0863
Signing time:             Sun 01 Mar 2026 21:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:39 +0000
Files and hashes:         1: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: tFHT6oVve9ruMstprNkSZhc4D7648U1MMOSQVasJX5s=)
                          2: QSFo4SzW5Mxl0PfFRdNnIL_TgtQ.roa (hash: ihRbYBAqH4CF7W2NY5WPRwb0ldsVjq6C79woYjxyC0Q=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:06:a0:0d:2f:8d:68:96:97:f6:af:56:7a:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Mar  1 21:00:39 2026 GMT
            Not After : Mar  2 21:00:39 2026 GMT
        Subject: CN=2a42926c2566ba2698c65325a9e5c370eba46f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:50:d6:32:19:33:89:5e:71:b7:92:64:33:
                    60:7f:50:44:a7:2c:e0:de:30:d4:9c:aa:00:c6:51:
                    47:21:ff:fe:36:ed:3f:49:16:25:0b:11:ab:b3:e7:
                    ae:7e:73:3c:a7:41:e6:bd:71:37:f5:e6:fd:c5:72:
                    75:b2:7c:e7:34:fd:51:fa:70:80:0e:5c:44:84:c5:
                    7a:62:7a:08:10:70:69:02:0b:7d:2d:2a:0f:83:38:
                    72:e1:9a:6e:82:cc:fc:e8:a2:70:a6:5b:70:5d:b7:
                    19:11:1f:6a:19:51:19:60:1c:84:92:7f:e2:2c:32:
                    f4:53:16:78:4c:c8:06:f4:83:4d:76:88:ca:7f:fe:
                    32:72:af:f9:30:53:ad:0f:50:16:9a:2d:74:ce:cf:
                    49:80:9c:bc:d1:1a:3a:20:f3:80:c1:0b:2d:d6:0e:
                    9e:73:07:d8:8f:d6:83:da:61:47:b6:0a:e3:b1:2b:
                    33:5f:7a:6c:ea:9b:ba:2c:cb:aa:f8:be:54:3e:85:
                    0e:30:0a:49:67:bf:e6:42:27:11:70:41:9a:04:2d:
                    e9:17:2d:23:2f:af:c5:a5:d5:b3:e4:8a:fa:25:73:
                    9a:9f:0b:bb:04:be:e4:9e:8d:d7:ab:91:1f:86:35:
                    9d:15:0a:e1:88:2d:bf:e8:e8:9e:24:a8:3e:c7:59:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:42:92:6C:25:66:BA:26:98:C6:53:25:A9:E5:C3:70:EB:A4:6F:01
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:39:fd:91:04:70:d5:c5:53:af:eb:aa:6b:d7:c9:bd:8a:
         51:e9:10:5a:21:cd:cf:44:03:96:42:e8:98:ce:a8:a0:26:24:
         f8:8f:73:1f:7e:41:bb:82:10:bb:e5:79:6b:cd:5d:2b:82:05:
         aa:31:aa:76:8c:20:8a:da:8f:13:8e:6b:1c:41:3b:2f:74:e8:
         2c:c6:90:81:a6:32:f1:63:87:4c:ca:d7:ef:59:be:ff:ef:05:
         cf:c9:6f:90:ec:c7:d4:7c:95:12:25:a1:c9:21:9f:22:29:78:
         ea:d0:17:ea:eb:7f:7d:7f:f7:31:65:52:f1:11:1d:45:6b:24:
         24:44:92:23:03:84:44:b8:19:d6:e0:2e:7b:c6:68:a3:5a:8c:
         df:05:ec:b1:37:27:ae:7c:a4:77:2f:90:2b:a5:56:62:fa:39:
         41:b5:41:1f:1f:7e:08:3d:64:62:14:3f:88:89:c5:7a:42:15:
         66:51:2e:25:bf:df:2b:e2:3a:79:b5:df:d8:e7:4d:f0:fc:0b:
         bd:74:03:47:60:73:cf:9f:78:b4:21:fd:de:58:b5:f3:b2:29:
         7c:8c:ff:37:54:e6:ed:b1:fd:1c:be:8d:a7:25:e7:27:e4:88:
         e1:35:ea:b8:94:fc:48:5e:7d:5c:22:20:54:91:ed:33:6a:4d:
         52:c3:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:11 2026 by rpki-client