Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File:                     7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier:          Xe6Rx/BWCbxRXmzM8RmmAKqo0empsHAV9PbYwgoUy18=
Subject key identifier:   67:0E:26:A9:36:0B:38:F3:AB:AB:35:FE:3B:63:EA:FC:21:37:DA:05
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer:       /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial:       019CABA1CF347A9AC51B2EAC713726000FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number:          04FE
Signing time:             Sun 01 Mar 2026 23:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:34 +0000
Files and hashes:         1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: ABwdY4FIt7Gpnu0qYd08okP+27WVfrMfqt6jZBMQXNw=)
                          2: E0RxxjzRl6KI64LFqtZcLSw2L2k.roa (hash: +o4tGG4s2zr/f/sl2ZygwSP9jX+reoSK5d2HJjcm+m4=)
                          3: z6fjFNC5yY7s5rVC_18gdfOPVm4.roa (hash: UsutNgSzfSxKpzDA+6kQmVSCK+R6MBOFNeCYRGmkXwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:cf:34:7a:9a:c5:1b:2e:ac:71:37:26:00:0f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
        Validity
            Not Before: Mar  1 23:00:34 2026 GMT
            Not After : Mar  2 23:00:34 2026 GMT
        Subject: CN=670e26a9360b38f3abab35fe3b63eafc2137da05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:4b:1a:0a:0a:16:34:ee:cc:e7:ef:bb:a9:
                    61:78:66:d3:f2:cd:44:13:d8:a8:f4:9d:d0:80:0d:
                    27:9c:02:84:c4:43:57:6f:f8:67:b6:48:81:29:1e:
                    f8:3e:03:20:d4:41:1b:7c:c0:22:1c:69:31:85:ec:
                    9d:cb:a4:9f:2d:4f:50:65:a8:2f:c0:76:b3:94:d7:
                    da:74:0f:c6:ab:28:97:27:b6:bd:aa:49:25:6e:04:
                    41:a7:9e:62:c0:65:2a:45:f5:4c:2b:a9:7e:a1:9d:
                    81:09:38:bc:5f:74:de:71:30:e8:5c:90:5a:4e:d0:
                    93:21:63:12:0d:b5:97:37:45:7d:56:51:3b:55:6c:
                    6d:78:f8:4b:54:4d:0a:94:7c:0e:2d:51:5c:80:da:
                    97:e9:65:aa:83:c1:cd:1a:06:e2:84:80:a2:23:39:
                    f7:98:53:af:13:63:88:9d:b7:59:33:98:1f:b6:2e:
                    39:88:8d:c4:4e:52:95:a3:1a:66:6c:e9:61:57:e7:
                    19:88:9a:0b:7e:ed:13:1d:5a:9a:48:64:03:a8:a4:
                    74:7d:dc:ae:20:14:37:cd:f3:73:6e:db:ae:03:89:
                    10:2c:0a:40:cf:48:7c:78:6d:a6:9c:94:b4:43:3b:
                    22:01:ab:60:a9:67:f7:c4:b3:60:36:2b:47:52:f9:
                    cf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:26:A9:36:0B:38:F3:AB:AB:35:FE:3B:63:EA:FC:21:37:DA:05
            X509v3 Authority Key Identifier:
                keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:42:7e:66:3b:ae:6a:07:38:0d:8e:54:49:a0:5b:a2:c4:
         d4:0d:6f:6f:37:e5:9e:d6:80:1a:e0:d3:21:69:bd:1a:3f:70:
         7a:44:19:e2:b6:1a:33:bb:c0:35:0f:bf:14:d3:b5:a7:84:f7:
         03:18:0d:97:4c:d0:73:78:f6:90:5f:ef:04:93:3f:66:ca:5a:
         dd:a5:02:eb:6b:ec:c0:7c:92:50:c2:fd:56:18:a3:b4:08:c7:
         72:e4:17:22:9e:6f:dc:60:1a:a5:86:c9:a1:ce:62:d8:62:b8:
         12:d2:a8:c1:e3:68:66:cd:d0:65:47:89:8b:6b:91:c2:2b:31:
         f7:77:1a:02:e2:6d:10:19:0b:e3:ff:f0:a6:06:8f:1a:0b:39:
         4c:35:9f:25:ca:0f:43:ca:b0:76:51:6e:43:0a:2e:73:28:0a:
         71:9a:eb:ae:94:f9:a9:1d:02:33:7e:1c:86:2d:ec:1b:b4:19:
         19:a1:1f:1e:bd:f3:21:40:87:c5:9b:37:9c:70:63:a4:c5:24:
         3c:f2:ba:5f:fb:a3:7f:2a:e8:d3:b0:62:f6:be:d6:fd:bf:14:
         a9:2f:69:dc:00:67:78:f1:60:43:01:07:e1:db:6d:68:49:9c:
         d6:19:4e:8b:45:90:9b:b2:0b:ce:11:71:a9:a4:34:ac:7b:b0:
         f3:cb:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:00 2026 by rpki-client