Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File:                     7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier:          50xyudstK85UON/QdkXcVGV/GK/Z8wpZ7nrgr99kRjs=
Subject key identifier:   41:A7:3F:F3:7D:7E:47:07:80:38:D1:34:E7:25:C2:4D:7E:04:AD:32
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer:       /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial:       019D27A8818A7AEAC5CD4CFF30EB88254091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 01:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:47 +0000
Files and hashes:         1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
                          2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: IxQEJVViK9a1JW8oWPMCei+pCxk+U/hYsj59oa80qFs=)
                          3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:81:8a:7a:ea:c5:cd:4c:ff:30:eb:88:25:40:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
        Validity
            Not Before: Mar 26 01:00:47 2026 GMT
            Not After : Mar 27 01:00:47 2026 GMT
        Subject: CN=41a73ff37d7e47078038d134e725c24d7e04ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:92:29:9b:0d:1e:30:5b:2a:9e:9c:a0:d9:
                    6b:69:5a:05:6e:3c:58:7e:62:2a:ee:39:78:34:08:
                    83:aa:66:d3:47:0f:b5:b2:6c:ce:fa:b8:4b:a6:2b:
                    ad:fc:8c:76:20:3d:af:a5:fa:8c:a6:d8:d7:74:1a:
                    c6:00:a3:ed:5f:2d:88:9d:a8:35:b8:1e:70:23:0a:
                    19:aa:4b:84:b6:a5:92:cc:48:bd:b9:4c:cb:11:57:
                    46:cb:f4:c0:46:e3:35:3c:dc:5c:3c:b0:46:f6:7a:
                    51:95:7c:bf:92:07:13:af:e1:ef:b2:81:50:03:77:
                    24:04:c8:2a:b1:40:8b:ed:aa:3f:f7:a2:f0:f3:fc:
                    49:ad:dc:58:59:08:0b:10:cf:4f:26:4b:67:c6:10:
                    e7:29:3f:0d:93:0c:72:c8:33:42:fa:34:01:b4:f5:
                    27:80:c1:0f:ca:22:7f:bc:76:60:7f:47:0a:b4:c9:
                    04:c6:00:3f:fb:5e:64:89:6a:56:61:02:35:16:79:
                    b1:55:eb:3d:19:1a:82:34:9f:7a:bc:9c:73:7a:8d:
                    c2:8e:cd:f8:bc:82:c6:fc:eb:d3:26:2c:1a:82:d3:
                    c4:42:b8:3a:13:4f:52:86:e2:f1:66:3b:90:cc:78:
                    8d:fc:66:83:1c:96:04:af:7c:ba:0c:08:43:c6:ca:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:3F:F3:7D:7E:47:07:80:38:D1:34:E7:25:C2:4D:7E:04:AD:32
            X509v3 Authority Key Identifier:
                keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:a9:c3:ad:68:bc:a7:25:0a:f8:8a:e1:09:e9:30:97:07:
         2a:9d:0c:21:68:cb:6a:0d:fd:56:4f:25:98:a2:5b:05:af:b3:
         39:9d:54:fc:b1:16:b7:09:cb:8a:7d:c6:11:34:4f:07:1f:4f:
         78:fd:57:12:32:81:0d:88:a6:5e:2f:95:e5:d2:2f:ca:7e:a4:
         d6:87:d2:1c:cd:b3:b8:89:11:1d:0f:35:e9:92:0e:4a:49:32:
         de:f4:da:b5:84:b6:41:82:b2:33:14:38:e5:05:5f:29:1e:89:
         07:84:71:5e:cd:88:8c:aa:22:57:c1:ed:44:64:85:57:02:2d:
         19:50:f7:ce:30:32:f5:00:0b:2d:80:59:fc:9b:d8:55:1f:92:
         01:09:e3:f2:6f:67:e1:86:25:b6:f2:63:7b:b2:95:3b:e6:e2:
         fd:29:db:10:bc:fb:f0:51:75:24:99:68:ff:0a:c7:4e:fe:c7:
         70:db:aa:e0:cb:71:ca:65:84:29:7a:d1:39:5f:37:2e:13:fe:
         45:8f:e3:ec:e2:b6:3f:f7:16:81:95:5c:68:61:01:97:80:59:
         f5:4e:0e:d1:4a:8e:3f:86:46:b2:a9:19:c4:a7:13:ee:49:fd:
         0b:eb:12:95:28:8c:a2:3e:ee:29:14:48:1a:0b:a0:56:c4:0e:
         97:56:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:50 2026 by rpki-client