Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File:                     fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier:          /LmDV9vt5BjKH7o2chbY3lD1xOuDig71X5zkqvPE1fU=
Subject key identifier:   30:F7:C2:68:34:D8:A1:5F:64:B3:D0:49:09:B5:8E:2B:64:CB:6C:F8
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer:       /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial:       019D2960E447CE13E6BCAEBFA3D1742285F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number:          07F6
Signing time:             Thu 26 Mar 2026 09:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:48 +0000
Files and hashes:         1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: hiH+O+XosclyQEkDGUicIZMn08FrDKGI/St+odOg3KY=)
                          2: prR3St_T-JCudPoZgk4y2vYURI8.roa (hash: 1HOWJUzi0cuRKIHRjrvVgn5q7O99JRjdWW0TYvqs9a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:e4:47:ce:13:e6:bc:ae:bf:a3:d1:74:22:85:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
        Validity
            Not Before: Mar 26 09:01:48 2026 GMT
            Not After : Mar 27 09:01:48 2026 GMT
        Subject: CN=30f7c26834d8a15f64b3d04909b58e2b64cb6cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:60:bb:5e:f7:c7:4a:28:22:e1:59:69:d7:
                    1c:22:b7:1a:f4:60:89:26:f5:96:8f:31:77:63:7b:
                    59:71:62:d5:8e:27:6e:b2:d4:5c:3b:01:a1:2e:4a:
                    1a:2c:5d:6c:aa:ad:76:da:be:63:dc:d3:14:8b:55:
                    87:36:47:66:a6:0e:bc:3b:3e:62:90:fa:39:c4:7e:
                    a9:81:ef:82:10:55:7d:b3:05:81:8a:b6:84:c3:7e:
                    92:61:f7:d4:6b:d4:a8:b2:5b:17:40:e7:e1:ce:14:
                    39:a1:af:bf:40:85:82:8e:df:00:88:56:75:15:d2:
                    3c:42:32:d3:58:a1:f5:9d:c7:41:97:c4:d4:ce:96:
                    3e:44:dc:62:5f:8e:a2:ca:74:62:62:f5:b5:29:4c:
                    ae:67:de:ad:55:da:7d:ba:79:69:7f:ef:a5:82:0c:
                    7f:93:f1:43:b3:f4:47:5b:ef:19:a3:09:54:5b:d0:
                    4d:83:b9:66:bd:3b:b9:6e:10:b4:42:e7:f1:57:55:
                    df:63:40:c4:a2:57:09:51:19:24:67:1a:35:9d:4c:
                    58:b4:32:f6:22:33:c6:de:05:4b:35:d2:d4:d6:15:
                    e8:31:aa:52:35:80:5e:4f:92:4c:24:55:7e:14:c8:
                    0a:09:24:9e:97:7f:84:31:8b:53:23:36:f0:22:e7:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:C2:68:34:D8:A1:5F:64:B3:D0:49:09:B5:8E:2B:64:CB:6C:F8
            X509v3 Authority Key Identifier:
                keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:33:8b:00:ab:9d:62:6b:da:59:c3:d2:39:a8:6c:bb:21:5c:
         c8:35:ca:0c:e8:7d:3a:e7:83:1c:19:8e:54:4a:a0:e4:e2:09:
         29:66:58:61:6d:f5:1c:90:85:f8:9b:df:07:f9:44:6a:0a:60:
         db:de:ea:69:92:2c:01:94:a2:3d:62:38:17:2a:e5:ab:1a:d5:
         5b:75:77:df:c4:31:5d:01:f3:73:76:aa:46:1f:ac:c0:55:4e:
         69:b6:65:98:4c:68:c7:a2:78:5f:e6:07:9d:7c:11:f8:b8:82:
         fe:0c:4e:45:ea:33:9b:fa:8f:46:17:4f:31:82:ee:07:11:10:
         c1:4a:6e:cc:de:40:cc:37:88:c3:56:f6:6e:04:b9:ef:4d:56:
         82:12:d9:2d:26:16:d7:38:87:16:e1:89:5a:87:d4:1a:23:a4:
         78:b0:d2:42:4a:d6:ef:bb:b5:62:5a:7f:2a:d2:7b:9a:26:3c:
         8d:13:bf:d5:f3:af:76:8a:5f:3a:06:83:1a:42:79:87:48:25:
         6b:d4:51:a9:c2:4a:28:63:bd:38:f0:c8:5e:4f:11:f0:3e:86:
         f8:8c:20:65:71:c3:4c:76:cd:f4:08:e6:59:0c:d5:a6:8c:1b:
         1a:0f:6a:61:83:0b:aa:14:e8:1d:71:04:e7:e9:ff:d6:18:c6:
         1a:0e:7d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYORHzhPmvK6/o9F0IoXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjYwMzI2MDkwMTQ4WhcNMjYwMzI3MDkwMTQ4WjAzMTEwLwYDVQQD
EygzMGY3YzI2ODM0ZDhhMTVmNjRiM2QwNDkwOWI1OGUyYjY0Y2I2Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Rgu173x0ooIuFZadccIrca9GCJ
JvWWjzF3Y3tZcWLVjidustRcOwGhLkoaLF1sqq122r5j3NMUi1WHNkdmpg68Oz5i
kPo5xH6pge+CEFV9swWBiraEw36SYffUa9SoslsXQOfhzhQ5oa+/QIWCjt8AiFZ1
FdI8QjLTWKH1ncdBl8TUzpY+RNxiX46iynRiYvW1KUyuZ96tVdp9unlpf++lggx/
k/FDs/RHW+8ZowlUW9BNg7lmvTu5bhC0QufxV1XfY0DEolcJURkkZxo1nUxYtDL2
IjPG3gVLNdLU1hXoMapSNYBeT5JMJFV+FMgKCSSel3+EMYtTIzbwIueamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD3wmg02KFfZLPQSQm1jitky2z4MB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTOLAKud
YmvaWcPSOahsuyFcyDXKDOh9OueDHBmOVEqg5OIJKWZYYW31HJCF+JvfB/lEagpg
297qaZIsAZSiPWI4FyrlqxrVW3V338QxXQHzc3aqRh+swFVOabZlmExox6J4X+YH
nXwR+LiC/gxOReozm/qPRhdPMYLuBxEQwUpuzN5AzDeIw1b2bgS5701WghLZLSYW
1ziHFuGJWofUGiOkeLDSQkrW77u1Ylp/KtJ7miY8jRO/1fOvdopfOgaDGkJ5h0gl
a9RRqcJKKGO9OPDIXk8R8D6G+IwgZXHDTHbN9AjmWQzVpowbGg9qYYMLqhToHXEE
5+n/1hjGGg59Kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:17 2026 by rpki-client