Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          +wY4yENY7DDVPukp801NE2Pkt+1Eu+ZEa2Y8IiNd3sE=
Subject key identifier:   08:3C:C5:EA:AA:E5:3E:AB:D7:5B:4F:B0:94:B8:FE:D1:7C:87:6B:99
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       019CAB6AFC3B40E2B5BC4F6AA928E43B6042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          067B
Signing time:             Sun 01 Mar 2026 22:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:41 +0000
Files and hashes:         1: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: I9ZxuqyZumZtsQasFQqCEGE/VISbghHVYQ6x7OEMoe8=)
                          2: qcYGo8GsD5Qo0ZDwLGyMrbx6gHY.roa (hash: nLCn8Ec+7rBnERt4mPRmTwnAU10kkGrGOavv+Diw2Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:fc:3b:40:e2:b5:bc:4f:6a:a9:28:e4:3b:60:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Mar  1 22:00:41 2026 GMT
            Not After : Mar  2 22:00:41 2026 GMT
        Subject: CN=083cc5eaaae53eabd75b4fb094b8fed17c876b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:3a:32:e6:f4:ee:82:be:eb:18:b2:af:0b:
                    e9:f0:a0:55:82:97:85:fc:fe:ce:40:f6:39:d8:76:
                    1d:66:f8:a4:44:90:82:ca:a4:da:a8:fb:92:31:37:
                    dd:b1:88:4d:29:8b:39:6d:e7:3d:02:c9:19:21:b0:
                    6f:5b:c8:96:24:a6:c2:2a:89:00:9d:17:9e:23:a3:
                    fc:3e:c1:5d:ec:0b:eb:fd:db:89:f0:7d:da:1e:b6:
                    a1:b0:8e:c3:47:3b:41:eb:d1:6c:03:3f:19:93:e0:
                    e0:ff:88:25:a5:61:66:e4:c2:f2:da:93:db:86:28:
                    23:bf:e1:11:fd:f7:fa:47:4e:ca:3a:98:3f:2c:e4:
                    d5:3a:dc:cd:84:13:09:63:e4:bb:76:06:b5:ff:6c:
                    22:e4:63:c9:82:01:35:0b:b9:1f:9c:15:26:dc:0b:
                    be:8b:7d:ed:77:6d:d3:b5:de:d4:a8:c1:9c:27:f7:
                    34:5e:e4:33:4e:42:d4:cb:34:90:91:46:24:8f:9e:
                    1c:ae:bf:71:45:c9:30:cc:9e:8d:2f:35:eb:a9:29:
                    26:04:68:02:cc:53:2f:81:c9:f9:3f:6b:2f:b6:71:
                    43:40:85:26:28:9f:79:20:f0:d0:e3:52:25:99:68:
                    50:e4:3a:bc:6e:b5:68:c4:7c:ac:dc:d5:9e:82:ab:
                    7c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:C5:EA:AA:E5:3E:AB:D7:5B:4F:B0:94:B8:FE:D1:7C:87:6B:99
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:9e:f5:7b:42:de:f1:52:6f:9b:c1:59:39:70:08:e7:fa:
         74:95:d7:a9:28:3c:5a:aa:e2:26:f2:2a:ec:4f:8a:a6:d9:7d:
         2c:69:2e:fe:bf:03:78:61:ed:75:a1:d7:48:3a:ce:e1:f3:4b:
         a7:e9:61:44:c0:0a:51:6f:df:83:1b:b3:23:a5:4f:40:36:ae:
         5d:1b:c3:f7:8f:c8:1a:44:ac:b6:af:a1:87:73:60:1c:93:ec:
         77:ba:23:3b:72:e9:5e:58:19:98:38:67:55:cd:c5:f3:5f:c0:
         a7:a9:31:8b:99:04:bf:19:08:52:33:48:41:4c:ab:4d:09:e4:
         65:47:85:74:e6:1c:fb:11:a5:a8:f9:b8:29:45:8b:1c:3c:a5:
         73:9e:b8:ee:66:e5:36:a2:11:5f:fc:d9:e1:8f:fa:8c:ba:75:
         d9:3c:23:da:09:f0:ae:09:07:23:ee:82:11:dc:62:ac:d9:8b:
         27:57:64:31:a9:00:f1:9c:10:1e:63:23:d7:95:c1:d4:f5:e6:
         9c:65:20:c1:82:dc:28:a2:94:de:94:a3:0b:41:12:1d:72:94:
         bc:5d:ed:7f:13:d7:84:54:64:6a:66:17:6d:5b:f2:75:ac:0f:
         1b:62:2f:35:f7:bb:87:19:4a:f3:8a:91:1c:ec:b7:6e:01:69:
         2e:03:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:13 2026 by rpki-client