Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          b1tkrJoursgyBgJDOXnJO2C3GMFt5N+ZfHGncdE4mCY=
Subject key identifier:   09:6F:E5:87:07:50:DB:53:E1:5E:9F:F8:5D:03:48:BB:22:C8:D6:5B
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       019D2A7229BF9BDF4ED3C86E5DC24EF3D99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 14:00:18 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:18 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:18 +0000
Files and hashes:         1: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: AmWzGIHE8gwZnBxNFIrPX5WIBVmiNV+tLuX6DU9a1Ko=)
                          2: TE-zkB1WXTHRYrdiQgGmk6uSVdQ.roa (hash: eRgAHRTvSReUmr1Kc9vOCDCB9vNQ0s5lkzXZyGteC2Q=)
                          3: cE9z_vi7aIN7R1MRmejkUdogCNM.roa (hash: ErypDac6PMXFFeqxfqyYQBUhuGPwndIrMS3m77VeKJg=)
                          4: e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (hash: 5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:29:bf:9b:df:4e:d3:c8:6e:5d:c2:4e:f3:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Mar 26 14:00:18 2026 GMT
            Not After : Mar 27 14:00:18 2026 GMT
        Subject: CN=096fe5870750db53e15e9ff85d0348bb22c8d65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:9f:df:43:fc:18:e6:f4:4e:ed:43:c5:38:
                    33:12:26:19:11:cf:b0:d9:9a:af:be:44:f6:2d:20:
                    8f:fa:86:e0:97:fb:91:9a:f4:0c:e4:ed:7e:3a:7f:
                    77:8f:3d:6d:69:31:36:92:a1:65:a7:93:34:ca:f8:
                    9c:2c:2e:62:3f:5f:73:22:f2:01:60:5c:3a:2e:a9:
                    a6:64:29:1f:78:fc:fc:13:37:ad:de:b6:8f:ca:39:
                    a4:69:ee:95:78:5e:6b:e4:ab:34:39:fe:1f:bd:b5:
                    f5:6f:ce:5c:49:da:8e:2d:c9:67:28:c4:38:dc:4e:
                    d9:ef:80:99:49:39:76:1d:46:4f:58:bd:5e:c4:19:
                    b8:68:6c:1c:40:bd:e7:34:bb:fc:2a:05:40:cc:b3:
                    37:5e:e6:1c:8f:5b:1c:ab:2e:55:d4:0d:6d:52:eb:
                    63:cd:a7:cc:f8:56:52:2b:65:73:a0:e0:8c:2d:1e:
                    de:e2:e6:ca:03:18:aa:91:18:e7:f2:28:f2:d7:10:
                    bd:e5:b3:f6:d8:1f:77:b0:7e:f0:ec:78:42:ea:d9:
                    7c:fa:d4:f1:79:a7:bc:58:50:d2:c6:43:00:ea:04:
                    05:e3:91:40:c8:d5:c7:a8:7b:00:86:1f:fa:ac:7d:
                    27:4b:df:0a:58:9f:82:1f:db:88:35:67:02:34:80:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:E5:87:07:50:DB:53:E1:5E:9F:F8:5D:03:48:BB:22:C8:D6:5B
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:29:3f:27:e6:ca:6a:cd:cc:71:a0:ff:78:45:ea:2c:96:a3:
         90:98:ca:a3:91:d7:49:fc:81:0c:2b:d8:61:9b:c8:65:8c:6e:
         10:7a:4e:9b:41:01:3c:ee:ff:bb:bb:2a:23:1a:03:71:15:07:
         5c:8f:fb:5c:6b:7a:36:57:fb:e4:64:45:73:f2:96:d1:59:b6:
         ae:aa:1c:5e:a3:9e:c2:54:84:2d:b8:22:d2:f4:c8:18:14:f7:
         24:85:15:90:c8:7c:e0:69:37:00:5a:1a:35:8b:97:db:54:b0:
         8d:b5:9c:ca:d1:e6:d7:13:f4:59:30:a6:01:6c:d3:17:3d:d9:
         cc:3f:43:df:e5:68:98:62:e5:6c:0d:6b:4c:94:6b:9c:00:7c:
         52:8a:9a:d0:83:cf:37:c9:21:e8:8e:82:5b:8e:d3:e8:d4:4e:
         82:bf:36:d1:84:f4:9e:19:90:09:2b:84:58:94:83:a4:31:a0:
         4e:a9:a0:53:3c:fa:c8:40:c7:79:93:2d:39:dc:8f:0e:51:a8:
         45:af:86:88:43:89:94:6c:fb:93:d3:71:66:10:2b:7b:12:03:
         a3:60:c0:09:36:a4:54:b5:56:c0:8c:da:48:18:5f:aa:86:43:
         e5:dc:37:c2:a4:f5:ac:43:75:b9:26:4a:4b:fc:1a:7e:48:5e:
         b6:37:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:09 2026 by rpki-client