Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File:                     7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier:          ZsBmNnOJ7uZV8EhAbyOhjmqSirzvV7XPoRv91tyFY0c=
Subject key identifier:   95:90:AB:0A:E0:54:07:29:9C:3F:62:75:98:C1:BD:E8:DE:29:D6:93
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer:       /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial:       019D270475016B5093E67905ADE4F716A8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number:          084B
Signing time:             Wed 25 Mar 2026 22:01:36 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:36 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:36 +0000
Files and hashes:         1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: E0aQPE5Gt0+427XnDJ8CY1P1/5IS7pZVskDBY70D2VE=)
                          2: rvf0hbFsWVEpBXykcpuVRP8DxR4.roa (hash: GCo9KByc6i3SxxBxNly9glVqB6hv/1pXfge2kLwR0es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:75:01:6b:50:93:e6:79:05:ad:e4:f7:16:a8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
        Validity
            Not Before: Mar 25 22:01:36 2026 GMT
            Not After : Mar 26 22:01:36 2026 GMT
        Subject: CN=9590ab0ae05407299c3f627598c1bde8de29d693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:69:b0:7b:aa:08:f0:f0:dd:37:ad:37:f8:
                    76:7f:38:41:4b:cb:e4:d7:75:d8:bf:3a:b4:f0:42:
                    a7:34:b4:41:db:91:0b:35:93:4e:37:c2:5b:d6:40:
                    95:5f:bc:52:c3:b2:f0:30:bd:40:8b:30:0e:c3:cf:
                    f2:91:13:3a:09:59:1f:bd:fa:38:87:f7:0d:f6:34:
                    57:26:da:91:61:8b:73:15:0e:5a:d9:35:e0:6a:14:
                    41:71:19:62:bf:f2:1b:b1:8f:fd:d4:7f:41:af:a7:
                    28:92:7a:86:f7:a3:66:bb:53:f7:79:6d:6c:33:47:
                    2f:ab:ad:a6:1e:a9:a7:7c:5e:b6:37:99:69:30:98:
                    5c:80:d5:19:f6:c9:28:76:f8:40:11:27:7f:d5:87:
                    76:af:49:19:c6:b1:2c:4d:1b:bf:62:d9:ac:bd:b7:
                    a8:52:6a:37:f0:2a:61:5e:32:e4:24:c1:02:37:21:
                    62:34:9c:79:2f:91:41:20:53:b1:12:08:41:86:1d:
                    fb:ee:e0:69:0f:50:54:89:73:71:87:31:fe:46:f5:
                    af:77:d1:f9:5f:15:88:47:0b:60:b6:01:1f:e9:07:
                    b4:23:58:01:31:17:31:bf:de:d1:d3:03:a5:86:f8:
                    56:3d:a7:ec:7b:06:16:47:94:a1:91:75:8e:b4:a3:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:90:AB:0A:E0:54:07:29:9C:3F:62:75:98:C1:BD:E8:DE:29:D6:93
            X509v3 Authority Key Identifier:
                keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:10:c4:30:9d:0d:01:48:b1:e7:67:3e:6c:88:6b:4a:4c:28:
         cf:1e:34:b6:6a:99:d5:13:82:50:3b:0b:a7:67:80:13:05:90:
         f6:70:d3:53:35:69:d9:ec:09:9b:3c:1b:4c:05:7b:57:59:58:
         fa:19:29:71:e3:86:48:3b:d6:59:79:fc:f4:ef:ea:8c:c6:95:
         0d:36:ae:25:80:ce:44:e3:40:3b:6b:e4:d8:ed:38:7c:39:45:
         e3:0f:db:b9:05:c1:4f:98:f4:b5:d5:c1:55:fc:0d:49:0f:8a:
         38:57:09:4c:32:53:3d:9b:42:17:41:c7:5b:69:fc:e3:cb:63:
         75:8b:31:89:05:b6:7d:b4:0b:a6:0c:cf:42:f2:91:ec:ee:c0:
         19:90:8e:4f:5e:bd:97:be:f5:d2:a8:39:79:97:b1:32:c7:55:
         b1:e1:45:c4:af:2e:f8:ca:d6:f2:9a:18:ce:d9:6d:dc:64:05:
         8c:7e:b8:90:96:31:2e:f9:df:8d:e7:08:a9:8d:a1:fd:95:bc:
         0b:54:eb:db:70:b0:53:48:c3:ef:43:9e:b5:51:3a:0e:36:15:
         21:90:df:41:d2:fe:9c:95:0d:be:9e:93:9f:75:5a:2a:ff:0e:
         6f:5a:3e:52:6b:6c:16:d9:03:7e:b7:81:b0:20:b5:3f:c5:b9:
         2a:37:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:52 2026 by rpki-client