Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          rMsncOzAg/HfdgShev9EGom2TiloYevlJ0W2I7GjT4I=
Subject key identifier:   C2:2A:87:12:D0:66:7B:40:D5:B0:76:F7:5D:63:5F:45:D5:CA:B7:FE
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       019D26CCFF0336EF340AED29E07DC12C3B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 21:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:02 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: a9MggR4WMJ0gAWOKEizXMPqh4ORsFfCgpJQEfwAzifM=)
                          2: RY-r8degIdRULqk_qmxjFefq8O0.roa (hash: lLpPZuz/t5Yw8zlJe7ERdvGB1DRM1TuO1Rrg7Us/30Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:ff:03:36:ef:34:0a:ed:29:e0:7d:c1:2c:3b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Mar 25 21:01:02 2026 GMT
            Not After : Mar 26 21:01:02 2026 GMT
        Subject: CN=c22a8712d0667b40d5b076f75d635f45d5cab7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:88:c6:34:0c:86:4a:d7:e0:84:06:5e:ca:
                    b1:20:6e:22:5a:72:fa:0d:30:7d:fa:88:82:5a:1f:
                    36:76:70:74:f7:a7:b9:89:09:e5:b9:c9:69:d4:f4:
                    61:49:56:6d:47:63:43:d3:42:f5:60:e9:a4:58:29:
                    22:6f:aa:1b:9f:bf:23:54:2a:d1:42:be:52:dd:0b:
                    25:2f:0b:46:86:db:44:8d:cf:ac:cf:62:0c:e0:b8:
                    5d:e8:18:9c:65:e7:d6:20:1d:2c:4f:d8:27:fb:b6:
                    35:01:52:98:12:fa:e4:71:9d:e9:f7:d3:6b:e7:a3:
                    7c:c7:2f:75:ea:41:96:d4:5b:04:f6:a2:f5:ba:ad:
                    d3:ee:fe:0b:be:da:26:10:26:78:9c:9e:4f:5f:ca:
                    b9:59:78:0b:ab:02:92:f9:34:68:e1:07:22:91:99:
                    b6:5a:17:92:aa:46:16:69:86:b0:90:76:cd:ee:92:
                    2f:71:54:ee:f3:6c:5b:99:3b:2f:99:b7:53:2a:f5:
                    f0:8a:7e:80:6f:d1:16:bd:86:35:eb:52:15:e0:b4:
                    ca:88:92:03:42:1d:ab:ae:e5:ef:2c:36:0c:c0:5c:
                    80:ed:b8:20:e7:f8:aa:ad:34:37:62:9f:33:6a:a5:
                    b7:de:9f:ef:60:90:bb:c3:42:50:3c:fa:69:f2:22:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2A:87:12:D0:66:7B:40:D5:B0:76:F7:5D:63:5F:45:D5:CA:B7:FE
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:16:98:76:38:75:61:d6:fc:1f:c8:bc:ce:10:17:f3:5e:
         d6:4a:a1:8c:82:c5:42:99:e7:65:d8:83:86:ad:27:b7:cd:58:
         4b:6b:f6:d8:8d:40:4e:b0:57:55:ba:6a:48:63:00:76:c4:ac:
         1e:07:1f:4d:d0:20:fa:18:52:cd:81:ac:94:da:72:82:c3:57:
         46:46:0a:9d:d1:7a:ce:38:1f:28:1a:bc:e3:84:64:5c:82:31:
         4e:c5:ad:a3:74:89:57:59:b4:67:68:77:f9:81:94:95:7c:cf:
         ef:1b:d8:43:b0:66:de:1c:12:d4:bd:d7:0b:3f:2d:5d:8b:84:
         6b:f5:37:40:f3:ee:62:f8:62:ed:dd:16:fb:4c:ed:c0:97:f5:
         0e:1e:da:01:48:85:9e:b9:60:c4:62:fc:57:84:9f:79:81:cb:
         d8:90:5a:2b:d6:6b:ba:18:c5:5e:89:ac:06:18:04:8d:78:98:
         0c:09:79:0a:29:47:a1:ca:0d:7f:17:71:ec:e6:4a:6a:7c:8e:
         7c:ff:60:3a:62:1e:88:b3:7d:d4:e4:8d:e1:03:4c:89:cf:75:
         8b:1b:da:75:d7:19:11:ec:7a:7a:94:6a:03:f1:7f:7d:fb:42:
         8f:02:bc:0d:74:85:81:4a:3c:ec:2a:38:6f:ae:52:e2:1e:7b:
         3c:6a:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:08 2026 by rpki-client