Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          WBUN8hp/A9JScZZvHFLeYdOSY45dBwVYunWqffM4CpY=
Subject key identifier:   CA:D8:F5:DF:C5:A8:8B:AD:C5:25:73:4D:F9:D7:FC:7A:C1:25:46:56
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       019D26963B7762EC76EB64F5B757EC086510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          05C9
Signing time:             Wed 25 Mar 2026 20:01:12 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:12 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:12 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: VDlJjinREVFfI6nooFqZ7SRwbE+eyw0gP2X4pnDWIdA=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3b:77:62:ec:76:eb:64:f5:b7:57:ec:08:65:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Mar 25 20:01:12 2026 GMT
            Not After : Mar 26 20:01:12 2026 GMT
        Subject: CN=cad8f5dfc5a88badc525734df9d7fc7ac1254656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:06:93:af:36:ef:84:91:ee:70:e0:69:c8:
                    ef:e9:ac:cd:15:1f:5b:f6:c9:dc:14:ee:43:f0:e7:
                    00:be:fb:23:ff:0b:cf:ab:80:14:6c:fe:4a:17:7d:
                    4d:8f:2b:8c:ac:5e:87:c4:98:f2:19:90:a3:a9:d2:
                    44:bf:7e:2a:0e:81:c4:c3:1a:ef:93:58:50:4e:55:
                    4d:75:7b:d8:ee:82:2c:e2:a3:79:69:74:6e:2d:1a:
                    e3:c9:bc:6b:8f:8e:32:2b:d2:6b:22:7f:38:89:25:
                    e7:f0:9c:36:4b:74:b2:07:3d:f4:64:d1:89:16:0a:
                    22:16:61:a3:9c:d0:70:22:41:d0:28:a4:34:f4:d3:
                    b7:89:62:80:db:55:45:27:93:f1:fe:79:7a:ba:3b:
                    b2:39:10:a4:e8:a9:ab:c2:8b:43:4b:de:46:d1:55:
                    ff:a2:3e:10:57:a7:be:9d:c4:f9:1f:d7:84:83:0f:
                    21:0e:64:94:e0:c3:f5:fc:93:91:8f:53:d6:b4:55:
                    ca:c0:32:90:26:83:fd:0b:8a:9d:39:a2:dc:84:1a:
                    ab:5d:96:e4:44:72:89:07:04:49:0f:4d:79:82:46:
                    c3:5e:17:c4:c9:b8:5a:75:2d:e4:87:40:e9:e6:40:
                    8f:05:88:42:7b:b7:19:a9:69:64:ba:e6:a3:20:07:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:F5:DF:C5:A8:8B:AD:C5:25:73:4D:F9:D7:FC:7A:C1:25:46:56
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:69:de:56:42:bd:e1:3e:68:65:79:d5:f1:1d:af:a0:c7:
         05:e6:90:70:18:3d:eb:44:3c:b9:11:fa:f6:bf:89:6d:49:89:
         9b:dc:82:00:b6:6e:67:75:cb:c9:6c:e7:32:13:e2:47:79:58:
         9f:69:85:df:58:6a:02:7d:85:1e:8c:92:b8:1a:43:f1:e4:61:
         0e:c8:ab:d8:ca:b3:d0:13:6b:2c:1d:b6:6d:5e:2d:ae:1f:1b:
         7e:ce:bb:95:e0:9b:c0:03:84:4e:41:87:c6:0f:92:92:32:c9:
         7c:51:b0:b6:ea:13:a8:9c:21:8a:f8:21:c4:67:08:8d:ba:99:
         de:6e:db:ad:49:5c:8a:5f:6f:38:04:11:ff:78:f2:08:15:9e:
         9a:72:a6:e7:60:ab:78:58:2b:fc:e4:59:3a:d3:25:24:1a:47:
         c6:3b:16:b3:e9:4b:9d:1e:56:d9:d4:85:cd:c7:69:6a:02:c7:
         3a:18:43:a7:f6:65:3c:5a:98:18:91:f9:3d:7b:70:17:bf:68:
         08:84:e5:dc:86:47:87:00:8a:a4:05:c0:c8:a9:4f:07:00:34:
         55:18:14:36:e2:85:9f:3a:40:d5:be:33:44:21:19:92:70:de:
         e6:a4:a8:1b:0b:71:f2:b9:16:97:e2:28:0c:37:89:72:03:a4:
         55:ce:2e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljt3Yux262T1t1fsCGUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjdiYjc1ODhiODJkNzBkOGNiNzNkNGU0NTE3N2Y2N2Vj
ZWYyMTMwHhcNMjYwMzI1MjAwMTEyWhcNMjYwMzI2MjAwMTEyWjAzMTEwLwYDVQQD
EyhjYWQ4ZjVkZmM1YTg4YmFkYzUyNTczNGRmOWQ3ZmM3YWMxMjU0NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH0Gk68274SR7nDgacjv6azNFR9b
9sncFO5D8OcAvvsj/wvPq4AUbP5KF31NjyuMrF6HxJjyGZCjqdJEv34qDoHEwxrv
k1hQTlVNdXvY7oIs4qN5aXRuLRrjybxrj44yK9JrIn84iSXn8Jw2S3SyBz30ZNGJ
FgoiFmGjnNBwIkHQKKQ09NO3iWKA21VFJ5Px/nl6ujuyORCk6KmrwotDS95G0VX/
oj4QV6e+ncT5H9eEgw8hDmSU4MP1/JORj1PWtFXKwDKQJoP9C4qdOaLchBqrXZbk
RHKJBwRJD015gkbDXhfEybhadS3kh0Dp5kCPBYhCe7cZqWlkuuajIAcJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrY9d/FqIutxSVzTfnX/HrBJUZWMB8GA1UdIwQY
MBaAFO1nu3WIuC1w2Mtz1ORRd/Z+zvITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5Yjkt
MWI2MGRmMjUyY2E3LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83OTU3YmItNjFlMC00ZTExLTg5YjktMWI2MGRmMjUyY2E3
LzEvN1dlN2RZaTRMWERZeTNQVTVGRjM5bjdPOGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2xp3lZC
veE+aGV51fEdr6DHBeaQcBg960Q8uRH69r+JbUmJm9yCALZuZ3XLyWznMhPiR3lY
n2mF31hqAn2FHoySuBpD8eRhDsir2Mqz0BNrLB22bV4trh8bfs67leCbwAOETkGH
xg+SkjLJfFGwtuoTqJwhivghxGcIjbqZ3m7brUlcil9vOAQR/3jyCBWemnKm52Cr
eFgr/ORZOtMlJBpHxjsWs+lLnR5W2dSFzcdpagLHOhhDp/ZlPFqYGJH5PXtwF79o
CITl3IZHhwCKpAXAyKlPBwA0VRgUNuKFnzpA1b4zRCEZknDe5qSoGwtx8rkWl+Io
DDeJcgOkVc4uRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:24 2026 by rpki-client