Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          JUOViCdkvK2HW87EbKPlwqTtnjgjZGzliL/khc1qIko=
Subject key identifier:   03:01:D3:84:9B:C4:A2:BA:9D:E5:71:7F:D0:00:A9:22:C1:60:6B:15
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       019CABD9C059DC645F3A7E8486785364744D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0EC7
Signing time:             Mon 02 Mar 2026 00:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:40 +0000
Files and hashes:         1: K9jBWJnPFWyovoVVDNOHvTVTaLM.roa (hash: K3SUQLFC2Lr1L1GFZeysffhTkVWpSG3Bk2hiWWGhkrI=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: ZbxtlG8X8kN6EYJoBX93ce8nRrwskv6GeF+oJzypbjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:c0:59:dc:64:5f:3a:7e:84:86:78:53:64:74:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Mar  2 00:01:40 2026 GMT
            Not After : Mar  3 00:01:40 2026 GMT
        Subject: CN=0301d3849bc4a2ba9de5717fd000a922c1606b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:39:02:7c:85:a2:21:e9:73:b4:11:88:8d:
                    fd:9e:0d:08:9c:19:37:ce:ce:bc:2b:75:6e:ae:13:
                    f9:20:93:19:75:74:3d:c0:b4:68:19:35:d3:a4:ba:
                    d8:39:de:c4:62:1b:a3:cc:66:38:22:13:71:88:72:
                    66:fb:5d:ea:ad:98:74:d3:0b:67:33:b9:bb:5e:53:
                    19:e9:bb:dc:0e:2a:00:a5:5b:a2:a7:a2:b3:0e:ae:
                    76:71:33:ed:e8:b4:c8:60:2c:a8:13:cc:1b:d0:41:
                    d0:f5:2d:21:68:48:87:22:cd:1b:08:5b:6a:13:11:
                    e7:00:39:dc:70:06:dd:0f:03:09:01:34:22:8f:63:
                    78:15:d9:db:54:74:41:fd:3b:47:5d:77:4e:8a:95:
                    90:1e:d3:27:70:66:8f:80:00:40:53:98:05:06:45:
                    0e:fe:5f:75:af:81:8e:84:a4:a7:04:2c:70:c9:d2:
                    0e:1a:66:e4:8a:d1:d5:75:2b:dd:f8:16:a8:72:c7:
                    12:59:7c:a5:5c:85:34:2f:df:21:0d:2e:a2:e6:77:
                    81:e0:23:21:ad:12:0c:7b:f1:c3:48:5c:8c:4c:2f:
                    ea:b0:bd:58:4c:61:a3:bd:01:c0:ab:64:9c:3d:cb:
                    19:03:07:44:51:d2:bf:95:48:9d:ab:a7:8c:ba:c8:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:01:D3:84:9B:C4:A2:BA:9D:E5:71:7F:D0:00:A9:22:C1:60:6B:15
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:00:fb:75:05:81:8b:6f:33:6f:eb:67:79:2b:86:4d:84:9d:
         75:f5:b3:33:bd:c1:3b:da:ff:1c:ef:3d:a3:de:e5:f5:ae:26:
         bd:34:a2:aa:30:48:8d:e6:9c:5a:83:93:d1:83:f1:a2:de:d6:
         72:45:74:d2:89:e3:8a:f7:1b:0b:b1:e0:28:02:09:36:c4:16:
         ba:5a:73:4d:06:73:95:16:f6:a5:da:22:87:7d:ec:73:c6:bf:
         06:53:ab:6c:e5:a8:42:31:a1:3f:30:1c:2a:4f:c6:02:0f:63:
         be:d2:61:da:94:36:1a:35:39:19:ba:3e:8e:c6:ee:71:cf:41:
         84:92:1e:34:84:d7:3a:e6:37:c3:10:21:0f:fd:8e:43:c6:27:
         97:48:c1:74:3d:89:d5:85:5b:0c:56:59:ac:ea:88:f5:a2:2d:
         88:f0:23:41:ec:ba:e2:2b:9b:99:01:25:3d:c7:aa:27:56:37:
         78:2e:9d:c7:79:af:bb:d8:b5:a8:af:f4:1c:08:70:eb:57:0f:
         a7:3c:f3:15:ea:a1:f4:e8:d2:96:ea:f6:11:a5:ca:ae:93:a6:
         4d:ad:f9:02:ae:6a:ee:94:3f:02:bf:c7:d4:01:83:2c:4b:6e:
         bd:bb:4e:5d:89:d6:b6:99:58:18:79:2e:49:08:20:f1:a5:ba:
         27:c7:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:32 2026 by rpki-client