Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File:                     7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier:          gHV7pSRr5pIfr0/cNCC9zqbitJiiQlqGVxKlVRP++nk=
Subject key identifier:   03:B4:04:82:18:9C:F2:F2:D4:40:71:87:EC:83:D5:59:3E:91:C8:CE
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer:       /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial:       019CABD9C2571B25BBDA354C86133A4E4E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number:          1591
Signing time:             Mon 02 Mar 2026 00:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:40 +0000
Files and hashes:         1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: j7PZe4ImKrux4aXhQTagUEKEBRCJUCZVap3iW3+tZhs=)
                          2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
                          3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:c2:57:1b:25:bb:da:35:4c:86:13:3a:4e:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
        Validity
            Not Before: Mar  2 00:01:40 2026 GMT
            Not After : Mar  3 00:01:40 2026 GMT
        Subject: CN=03b40482189cf2f2d4407187ec83d5593e91c8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:b7:f1:d4:23:7f:9c:f3:aa:18:c9:e6:b4:
                    5c:f4:68:2c:96:3e:9a:cd:af:69:91:e5:87:a3:79:
                    72:83:4d:8d:f6:86:0b:b6:7f:cc:79:24:10:02:03:
                    4a:0f:cf:2a:83:d6:45:61:d7:9c:28:dc:b5:76:fe:
                    62:8e:1a:65:77:2f:1d:38:02:79:68:5b:88:2a:24:
                    72:66:8a:44:a6:95:a5:da:d8:ee:ed:af:42:31:a3:
                    09:eb:5d:a0:9b:41:b5:49:ec:80:e4:a3:cb:01:a7:
                    b5:d1:97:4f:b4:81:4f:04:74:ed:ce:6f:db:ba:3a:
                    dd:78:68:2c:1f:4a:54:00:66:99:01:5c:f4:1e:e8:
                    06:a3:eb:8c:38:0a:d9:be:d0:7c:5d:bb:d5:57:92:
                    16:2a:90:2a:ee:87:b0:77:31:e2:fb:7a:94:15:bf:
                    37:a4:db:e1:1a:78:e0:50:3b:01:42:23:d8:19:93:
                    42:6c:65:ed:ff:85:8a:60:59:e9:e7:f1:f2:9b:0e:
                    83:7d:00:49:c6:49:be:f7:ea:0b:07:ab:89:2d:c7:
                    e0:3d:5b:ff:9c:01:62:c1:b5:d1:a8:30:59:59:38:
                    9f:9a:38:a9:16:c8:ef:ec:21:23:ce:2e:ee:57:11:
                    ee:ea:b5:9a:98:1b:9e:1b:bd:a2:d4:23:8d:f7:2f:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B4:04:82:18:9C:F2:F2:D4:40:71:87:EC:83:D5:59:3E:91:C8:CE
            X509v3 Authority Key Identifier:
                keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:d6:42:15:15:0e:0a:64:cc:a4:53:9e:c2:49:8e:c0:a7:
         3b:5b:1f:f0:66:16:64:4e:2e:3f:e1:a4:e0:ad:ab:4c:d7:49:
         6d:43:ff:a9:5d:29:07:c4:6f:08:3a:44:f9:69:7f:18:d4:c7:
         2b:55:33:18:86:66:24:73:82:53:11:fb:2c:15:d3:23:aa:9c:
         e1:cc:f5:9a:04:0a:5f:51:64:8d:a1:71:e2:5d:41:a0:69:6b:
         b1:6f:22:99:4e:ff:45:a6:5c:c4:67:59:df:d7:16:62:b7:bc:
         36:fe:13:85:ec:fa:a3:cb:0c:60:65:18:9a:af:ad:4c:5e:02:
         f6:8d:1a:5e:29:95:bb:bb:6d:aa:07:c8:1d:5d:8f:1e:94:ce:
         be:6f:02:02:70:d5:88:00:e3:36:e1:55:d9:36:ee:7f:91:bb:
         98:63:c5:ea:f1:d8:a4:88:e1:03:c2:cb:f6:13:b6:3e:3d:37:
         c6:66:09:18:cc:41:28:b4:4c:f7:c6:17:26:a3:8e:8c:e1:37:
         17:91:f8:d5:38:ca:58:31:e1:f2:27:a2:4e:eb:89:46:80:f8:
         33:db:41:8c:75:88:f8:f7:fc:2b:e7:fe:88:45:7e:b6:e0:9d:
         5d:c3:40:aa:91:b4:27:96:6b:f3:5f:d4:57:5a:21:db:bf:cf:
         e2:c6:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:26 2026 by rpki-client