Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          +tDA7n7W/JEa5S2gzWMekYmCD7nGuLkFgqoHFRtfSW4=
Subject key identifier:   AF:83:F7:3E:00:08:9C:28:F9:B2:53:69:3D:5D:D9:22:DD:A5:BD:4A
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       019D2884A7F9F1F1AE5827AA37868B8C2999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0D66
Signing time:             Thu 26 Mar 2026 05:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:15 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: ZAKpHJPy5Nljl9IpP0k7wumc8depLVCy5IXKPzn9fYw=)
                          2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:a7:f9:f1:f1:ae:58:27:aa:37:86:8b:8c:29:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Mar 26 05:01:15 2026 GMT
            Not After : Mar 27 05:01:15 2026 GMT
        Subject: CN=af83f73e00089c28f9b253693d5dd922dda5bd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:72:ce:c1:fc:58:fc:c2:e5:ae:14:b6:d2:
                    00:18:6e:39:16:69:a8:5d:ad:7a:1c:5e:8f:d8:20:
                    a3:bb:f8:d7:84:8d:6f:a0:af:9b:ca:b7:46:ad:08:
                    04:43:3d:52:22:44:5f:b5:40:41:0d:8f:96:50:14:
                    00:c0:87:9a:1e:41:22:ca:47:d4:ca:74:15:29:08:
                    cd:de:35:bf:0e:20:fa:48:d5:7b:b0:46:a9:50:92:
                    89:89:c5:d2:e9:95:e9:85:ac:ba:46:01:5b:a6:87:
                    8e:0e:91:4c:8c:57:2e:94:58:bd:a6:ca:9d:ea:2b:
                    77:74:07:70:b4:12:5b:d6:c9:a0:f7:b3:84:3d:10:
                    74:6f:64:45:89:ee:a3:e4:4b:f4:af:04:ce:a3:09:
                    94:9b:3d:fa:3f:f0:66:ec:a4:ea:65:48:8e:02:d4:
                    eb:24:19:ad:c1:cc:33:69:51:e4:3a:06:09:96:72:
                    9b:7d:c3:53:3e:c7:0a:2a:2f:11:09:1b:12:f2:60:
                    fb:2c:e0:4b:49:fd:97:55:5a:93:74:8f:7f:cc:cd:
                    1f:0e:cc:46:be:ba:68:6d:8c:99:69:f3:45:c4:34:
                    62:d3:e9:e1:76:50:61:83:f0:81:24:a3:3a:50:73:
                    8e:d8:15:cb:c0:fc:52:b0:7c:40:ea:c3:06:9a:34:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:F7:3E:00:08:9C:28:F9:B2:53:69:3D:5D:D9:22:DD:A5:BD:4A
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8b:0d:9f:bf:da:1d:af:6c:50:ed:3e:82:0a:23:fe:ed:c0:
         fe:3b:22:72:e8:bd:5e:5c:78:67:36:ae:18:af:d6:6c:c5:28:
         45:38:59:8d:ff:1c:73:62:b2:1b:14:97:4d:ec:3a:c8:02:cb:
         db:ff:2b:b3:47:bc:2a:e0:20:c8:0c:a4:a2:7d:81:75:46:84:
         7f:a5:00:f1:89:a4:ab:7d:6c:be:67:06:7f:be:93:7e:27:ef:
         b3:a1:c3:03:7e:3e:7a:13:f8:10:b4:74:49:8c:78:f0:c5:f1:
         b6:c4:b0:c3:30:45:b8:50:11:c5:a4:a0:fd:00:6f:c5:6e:7d:
         80:97:09:44:6d:93:7c:da:ec:9c:b2:71:f9:52:52:40:88:5d:
         f4:fa:4f:42:be:15:89:03:b9:a0:9b:fb:e9:04:19:82:cb:da:
         5f:28:82:ca:07:c4:35:37:f8:3c:84:af:91:ac:3c:ed:8e:b5:
         0a:d5:ee:3e:a9:cc:78:dc:81:c8:29:db:14:84:9a:d0:b9:b4:
         8a:fa:07:c0:89:ce:63:9c:f2:9f:5b:46:07:6c:e6:75:ec:d5:
         8e:88:37:f0:2d:35:7f:81:f9:f6:d7:e3:31:d6:9a:a2:0e:0b:
         96:ee:1e:19:cf:92:91:93:fc:94:53:b2:61:65:85:e9:24:28:
         7f:17:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:34 2026 by rpki-client