Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          lm2FLTvQaCiCWKf8cmejBnG40xTfBJuDxseqZvZAao4=
Subject key identifier:   7B:68:88:C3:F9:12:A3:CD:E7:38:6E:88:43:C7:65:80:A8:EE:0C:D3
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019CAA5841F7EB7F4CBCF5FCB518E333C6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0ED4
Signing time:             Sun 01 Mar 2026 17:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:36 +0000
Files and hashes:         1: 01VJy0Dn2aLCow1zskwji7mh2zM.roa (hash: ssAkAZTlxmgFPq0pN356mqWfCIhhPLbuRRLgW5XeJY8=)
                          2: B6alie6EioBSI4GRuYA153USJyU.crl (hash: 6Zwx1WKoMi6YD6qOhIwe21cr7zKGX7err+YEEyo+odQ=)
                          3: t9vvWYRPeToATeVWr4VSq8ee-Bg.roa (hash: ykKWvPxw03+JwAzaQkW4enMVJbdZNrE/vLvG44Vy5as=)
                          4: uxuYZ_f6aWaxaC82KUMAv_QaxnA.roa (hash: AHIAZkO88MIw/Jonn2+RvT3gl4wyE+yeli6wGOjt5vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:41:f7:eb:7f:4c:bc:f5:fc:b5:18:e3:33:c6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Mar  1 17:00:36 2026 GMT
            Not After : Mar  2 17:00:36 2026 GMT
        Subject: CN=7b6888c3f912a3cde7386e8843c76580a8ee0cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:79:c8:a0:55:d0:7c:63:84:df:bd:ba:90:
                    b5:a1:99:77:ec:ce:75:48:59:29:35:c4:82:69:f8:
                    18:54:a2:ee:e9:5e:9f:fb:72:e1:9d:31:a7:ae:0d:
                    e5:77:15:40:7a:ea:9c:26:30:14:38:de:c0:cc:25:
                    d7:58:bf:eb:54:de:53:33:0e:db:27:a3:c7:1d:3b:
                    61:d3:f6:32:35:a5:66:93:fd:a4:64:45:96:ec:ab:
                    0d:83:ae:89:e1:e2:c5:9e:64:48:05:a9:ba:94:50:
                    54:a6:93:56:6c:24:c6:ff:11:b5:e7:24:63:e8:0f:
                    1b:b1:b2:b9:9f:d0:5a:47:fb:fb:77:11:0d:9f:8d:
                    17:17:3f:32:65:4d:65:90:7b:5c:24:99:79:32:77:
                    30:05:3e:5a:41:57:44:20:e6:51:02:0c:ba:3c:6d:
                    92:d2:e8:e4:5f:9d:f7:5b:7c:32:99:60:78:6c:1c:
                    bc:bb:4b:cd:e5:27:bb:dd:f0:63:eb:ef:08:fd:dc:
                    d1:39:21:85:8d:6f:51:71:c8:e9:0a:b1:ac:97:a2:
                    00:5d:4d:67:c1:b5:f3:f6:11:ea:d8:16:8f:ea:b7:
                    21:14:4e:c4:8d:6b:2a:77:4c:ef:6d:25:a2:80:58:
                    1b:28:95:86:f8:dc:ca:7c:20:b2:e1:3b:f5:2e:c9:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:88:C3:F9:12:A3:CD:E7:38:6E:88:43:C7:65:80:A8:EE:0C:D3
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:ed:7b:1b:15:9b:08:22:03:3a:7c:0b:a2:56:c3:a4:6f:
         ee:e3:81:0e:3d:3d:f4:23:16:55:5f:6b:fd:53:fd:8a:4c:0a:
         a5:38:71:e2:c3:2d:53:83:24:1c:2b:c1:9e:0a:0e:49:a7:5e:
         83:e7:df:cb:7b:bf:10:da:0c:dc:51:d9:47:8a:c8:8e:d6:d3:
         61:04:2d:a8:6b:20:b1:f0:d8:ea:15:a5:0d:14:a5:c5:40:ac:
         6f:4b:88:9c:af:6e:56:dd:0f:1a:73:64:d4:a5:8d:d7:5e:a8:
         23:c7:8a:f5:1c:af:5a:a4:f7:1f:2d:2b:bc:d0:98:0f:fa:f4:
         4c:6d:e6:53:04:c0:0a:36:6a:75:fa:20:43:e8:9b:2b:29:bd:
         98:c7:fa:41:9e:d1:43:52:a2:8a:c8:e1:38:91:8a:e9:59:00:
         e1:95:17:5e:18:f9:00:53:c6:e1:0e:d6:dc:c8:d6:a8:65:c5:
         d1:13:4f:59:24:0a:3c:b3:9c:c7:e6:2b:3f:6b:a2:ea:9a:95:
         78:9e:63:f7:2d:8a:ca:05:a2:f9:62:38:3a:1f:fd:8c:82:ca:
         7f:d9:e3:c9:a4:bf:c8:e4:1a:34:0b:f0:8b:75:cd:ee:b8:67:
         8c:e2:40:b3:fc:fc:ed:7e:1c:32:d7:0b:3a:61:f5:ea:2c:fd:
         c6:2a:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:23 2026 by rpki-client