Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File:                     e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier:          X664vleb5clanHo9QcmwuAjF0jGWldBuzxqGU3ShFn8=
Subject key identifier:   ED:CD:0B:09:C5:CD:48:54:07:FB:B8:81:79:12:BF:42:DA:8B:84:9F
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer:       /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial:       019CAB3440BF020D6685F6333A0D0723DC83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number:          063F
Signing time:             Sun 01 Mar 2026 21:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:54 +0000
Files and hashes:         1: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: EYlAoXAOeZTEoNoRVqxE4Q/SEc4jrKuf1AKAj19kKzg=)
                          2: yn22QITeYuSiQ4etW04NOKsyiwg.roa (hash: Hhng+JY/6IvIYBVuvykD/FKUSe2wsbGUoRKGJNpfZo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:40:bf:02:0d:66:85:f6:33:3a:0d:07:23:dc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
        Validity
            Not Before: Mar  1 21:00:54 2026 GMT
            Not After : Mar  2 21:00:54 2026 GMT
        Subject: CN=edcd0b09c5cd485407fbb8817912bf42da8b849f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:4e:c6:b6:ac:5c:52:a9:d8:85:96:79:ba:
                    c0:b0:25:b2:55:a5:1c:7a:22:94:df:fd:1b:17:ef:
                    b7:ff:d2:fb:32:c2:19:32:97:29:51:46:e2:23:6b:
                    68:71:7c:84:67:25:05:3d:e5:83:04:3b:02:0f:de:
                    b9:92:4c:c7:4f:fe:99:00:ce:d9:31:91:1a:47:fb:
                    80:16:bf:eb:c9:7c:45:79:5d:a6:1c:65:28:c9:85:
                    2b:eb:cb:2b:f1:8d:8f:6d:26:f3:7e:75:46:3a:20:
                    c8:43:0f:0c:ce:76:90:f0:fd:eb:86:ef:35:26:17:
                    cb:25:f1:6c:6b:c7:0e:ea:4e:a6:33:e5:22:af:f9:
                    50:7c:fd:df:4b:15:b4:2e:26:f6:38:d7:86:7a:c0:
                    6e:07:11:38:b3:1d:e2:1c:e8:59:b6:b3:c1:cb:5b:
                    c2:30:01:69:14:c8:4d:6b:9b:6f:c3:2c:ba:68:ca:
                    51:74:23:ac:78:d7:d0:b1:67:a8:50:44:dd:6f:31:
                    ec:f2:2e:35:ca:4f:80:de:f0:24:0c:fc:65:70:e9:
                    74:1f:e0:3d:f6:d3:67:4c:1f:c4:04:2c:54:06:38:
                    2b:c7:98:e3:2e:0e:15:33:10:1f:1b:53:4b:98:e1:
                    04:e0:0c:d0:ae:b0:80:ba:7c:19:b7:31:52:f8:0d:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CD:0B:09:C5:CD:48:54:07:FB:B8:81:79:12:BF:42:DA:8B:84:9F
            X509v3 Authority Key Identifier:
                keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:90:54:bb:d6:06:33:7b:3b:9e:45:59:5c:f6:5c:2f:9b:99:
         93:b5:6c:6f:c9:34:ee:72:fd:c5:52:97:73:4a:e9:b9:21:93:
         8d:a9:f4:2b:d6:d2:2f:00:f6:4f:04:33:b8:73:b4:70:85:f4:
         80:8b:e4:85:4d:9f:06:c5:c8:99:2b:c5:71:83:99:b1:13:6f:
         80:61:b8:57:be:3a:06:8a:74:31:51:86:d7:0a:ff:76:cb:cc:
         ed:10:e6:65:65:29:fe:9d:43:a7:fc:aa:7f:d6:fb:8d:07:a8:
         dd:75:bd:35:eb:ee:2f:38:69:30:8f:80:55:4a:2b:69:39:2e:
         5a:d7:f3:25:23:9e:f0:db:f7:bb:55:4d:08:09:e4:39:57:17:
         bf:92:34:b1:d5:c6:1b:a1:85:6c:62:56:9c:d6:90:1f:15:69:
         c7:f7:f2:84:21:1f:3e:f0:f0:da:f2:b3:ed:ea:38:63:e5:b0:
         45:8f:24:3d:84:07:eb:8e:ab:e5:38:a5:46:04:e8:67:8b:60:
         2e:a5:13:9b:3b:08:1b:18:67:19:77:82:2d:0c:af:07:f5:dd:
         55:57:9a:7e:4a:ce:be:e7:85:ac:26:5b:4f:f8:cb:4d:61:cc:
         06:c5:5b:ad:31:5d:98:83:23:9b:cb:f2:be:38:e8:fb:e3:55:
         65:fc:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:00 2026 by rpki-client