Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          TikedZFgi5Ta3VOD6XVhMPc6cNsQ60aRalNnLsZhIlM=
Subject key identifier:   D2:D2:37:D5:83:DE:AC:19:D2:29:7E:FD:3E:A6:8A:7F:5B:C5:BA:09
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019D2A3C6A3942C4474E6A020D2F8A060DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          07B0
Signing time:             Thu 26 Mar 2026 13:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:35 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: o9BObQaScLR1Jr2NGt+fkR8Pd6kPhrq8Mbo1W+6F5Dw=)
                          2: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (hash: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:6a:39:42:c4:47:4e:6a:02:0d:2f:8a:06:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Mar 26 13:01:35 2026 GMT
            Not After : Mar 27 13:01:35 2026 GMT
        Subject: CN=d2d237d583deac19d2297efd3ea68a7f5bc5ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:67:21:1a:e3:48:50:30:42:5b:2a:a3:06:
                    d8:59:0e:da:70:7c:36:4a:1c:74:50:e5:60:6f:b6:
                    10:36:11:dc:ea:f8:f9:f6:b2:5a:9d:0d:da:d5:6c:
                    a3:84:29:83:8e:1a:e9:65:a5:64:5d:eb:b1:e2:15:
                    2b:5c:e3:ec:de:06:73:80:a2:c4:d8:e7:df:77:9f:
                    54:6a:d0:b9:f7:c7:1a:57:0f:1a:1a:7d:d9:60:d6:
                    d4:8c:e9:29:f6:cb:64:fd:b4:6a:f6:7e:ef:08:ff:
                    62:60:f5:24:5c:aa:ab:9b:b8:5a:ac:88:0f:c9:86:
                    de:85:eb:5e:5a:c2:d5:ca:19:95:40:d7:ac:b6:75:
                    73:a9:14:46:b6:a3:70:b0:87:76:f7:c8:78:f5:18:
                    1f:7f:df:b3:b0:e7:6c:01:f8:25:d7:02:8c:ae:4d:
                    49:4c:7c:53:a2:d4:a8:0f:b1:95:db:82:a4:1e:a0:
                    52:8d:6d:c3:4b:53:25:76:65:3a:de:41:ad:7a:f6:
                    55:0d:78:79:2c:4f:cc:a0:20:12:bb:87:ef:dc:06:
                    bf:22:0e:5f:7a:c3:d3:fc:c2:94:ba:ce:59:0d:e3:
                    a8:3e:3a:29:67:04:c3:18:52:46:5c:34:02:99:e5:
                    46:66:88:76:ee:0c:00:d1:0a:48:46:5a:b2:ac:39:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:37:D5:83:DE:AC:19:D2:29:7E:FD:3E:A6:8A:7F:5B:C5:BA:09
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:1a:9a:c8:61:93:97:49:30:9e:f1:87:2e:d7:3e:9a:b6:
         ce:60:2d:5e:f6:6e:d5:7a:4d:61:8b:a8:2b:a5:33:be:f3:b2:
         56:85:6c:fd:99:71:7d:cf:b0:6e:54:2f:14:cb:38:7e:e8:72:
         1b:7b:95:9e:97:ff:ae:83:f5:8e:55:3f:f6:12:cc:66:04:ef:
         dd:e9:98:fe:23:2d:17:36:1b:d6:0d:29:4d:7e:7d:b9:5e:f4:
         ea:59:d2:76:ea:08:24:4b:56:ec:00:71:1c:a5:99:4f:fb:6b:
         9f:c5:f7:be:49:b1:77:52:a1:59:c0:6d:2c:dc:66:ed:69:59:
         d9:46:ff:4d:10:64:2a:14:ec:0f:b7:9c:f6:64:4f:d4:94:7b:
         13:94:8a:8d:b6:4d:8e:37:43:20:c9:7e:85:a4:fd:3d:bb:bf:
         84:b8:37:c6:5c:cd:e4:55:d6:bb:cd:ae:08:92:83:d5:68:ce:
         12:ff:99:50:ec:8a:57:3e:44:6c:68:1e:b5:54:40:0c:e1:54:
         d2:57:04:ec:34:98:3a:1a:d2:58:b7:62:8b:b6:a4:5d:a3:d9:
         01:cb:f0:ab:00:cc:45:f2:55:80:da:64:58:5c:82:86:29:79:
         57:43:c3:17:44:df:dd:ea:2d:d2:ad:41:94:6e:28:aa:46:7a:
         09:1f:e3:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qPGo5QsRHTmoCDS+KBg3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTI3YjhjMWRlNmIxNjFjNzk4YWI3Yjg1MTUzZDZiYTM3
OWVmYmUwHhcNMjYwMzI2MTMwMTM1WhcNMjYwMzI3MTMwMTM1WjAzMTEwLwYDVQQD
EyhkMmQyMzdkNTgzZGVhYzE5ZDIyOTdlZmQzZWE2OGE3ZjViYzViYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwShnIRrjSFAwQlsqowbYWQ7acHw2
Shx0UOVgb7YQNhHc6vj59rJanQ3a1WyjhCmDjhrpZaVkXeux4hUrXOPs3gZzgKLE
2Offd59UatC598caVw8aGn3ZYNbUjOkp9stk/bRq9n7vCP9iYPUkXKqrm7harIgP
yYbeheteWsLVyhmVQNestnVzqRRGtqNwsId298h49Rgff9+zsOdsAfgl1wKMrk1J
THxTotSoD7GV24KkHqBSjW3DS1MldmU63kGtevZVDXh5LE/MoCASu4fv3Aa/Ig5f
esPT/MKUus5ZDeOoPjopZwTDGFJGXDQCmeVGZoh27gwA0QpIRlqyrDkPlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNLSN9WD3qwZ0il+/T6min9bxboJMB8GA1UdIwQY
MBaAFPrie4wd5rFhx5ire4UVPWujee++MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11SjdqQjNtc1dISG1LdDdoUlU5YTZONTc3NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTQyZWZhLTE4YTUtNDY0OS05OTI5
LTdiZTcxMzY3OTYwOC8xLzEtdUo3akIzbXNXSEhtS3Q3aFJVOWE2TjU3NzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA4Lzk0MmVmYS0xOGE1LTQ2NDktOTkyOS03YmU3MTM2Nzk2
MDgvMS8xLXVKN2pCM21zV0hIbUt0N2hSVTlhNk41Nzc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHga
mshhk5dJMJ7xhy7XPpq2zmAtXvZu1XpNYYuoK6UzvvOyVoVs/Zlxfc+wblQvFMs4
fuhyG3uVnpf/roP1jlU/9hLMZgTv3emY/iMtFzYb1g0pTX59uV706lnSduoIJEtW
7ABxHKWZT/trn8X3vkmxd1KhWcBtLNxm7WlZ2Ub/TRBkKhTsD7ec9mRP1JR7E5SK
jbZNjjdDIMl+haT9Pbu/hLg3xlzN5FXWu82uCJKD1WjOEv+ZUOyKVz5EbGgetVRA
DOFU0lcE7DSYOhrSWLdii7akXaPZAcvwqwDMRfJVgNpkWFyChil5V0PDF0Tf3eot
0q1BlG4oqkZ6CR/jFw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:14 2026 by rpki-client