Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          J9MsgCgtGCH1r9X9wMXkRzLOa6EXRgFOxwv2CqbDfME=
Subject key identifier:   92:7E:A8:AA:88:4D:A4:47:1C:51:EE:6E:7D:EA:2C:7C:3D:86:D6:9A
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       019D2884A06122CD32672BC1E3C53FD2EEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          1807
Signing time:             Thu 26 Mar 2026 05:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:13 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: bFPUEMxhcRjpN1A3EorPTInxgW0u3wyb3mQhrH7hNfM=)
                          2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:a0:61:22:cd:32:67:2b:c1:e3:c5:3f:d2:ee:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Mar 26 05:01:13 2026 GMT
            Not After : Mar 27 05:01:13 2026 GMT
        Subject: CN=927ea8aa884da4471c51ee6e7dea2c7c3d86d69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:de:8a:27:ec:f2:3c:4a:4f:50:97:d0:f5:
                    b8:51:94:aa:62:4b:69:19:d9:c3:af:0f:ad:46:6d:
                    5e:82:1f:30:c1:e6:59:15:fc:e5:d2:96:a0:49:a2:
                    19:de:13:73:fe:71:a5:b5:a1:91:e7:8b:80:ce:de:
                    e3:ea:09:55:67:5f:b5:4b:fe:5b:53:e9:72:b5:03:
                    47:c5:40:d9:65:91:32:e3:ce:35:3c:3b:32:dd:fd:
                    b4:97:22:fd:70:ec:d7:8a:eb:9f:c2:f3:c6:01:68:
                    f0:c3:c3:6b:25:d3:a1:59:46:68:4f:2c:00:cd:2c:
                    ac:74:25:8c:b7:8d:f1:02:e3:96:51:06:b1:2d:57:
                    9d:5e:2a:32:51:b5:ac:d6:aa:2b:7b:d9:5b:96:3b:
                    b7:79:5f:33:90:8b:5a:84:74:87:86:cf:47:a0:e2:
                    e3:dc:fe:1f:f3:dc:30:77:46:79:16:dd:b0:a3:aa:
                    ee:06:34:de:47:00:14:c8:69:25:c3:5b:5f:9a:a4:
                    ad:a1:6e:f6:be:0e:52:1f:5e:a9:e3:26:15:25:c2:
                    b4:5c:18:f2:fd:5c:e1:dc:ff:ed:3c:07:05:96:78:
                    a6:c5:58:18:b4:59:84:81:9a:7d:3c:a5:fa:c7:3c:
                    f9:88:ec:90:89:0f:8e:38:c1:d5:16:aa:06:9d:78:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7E:A8:AA:88:4D:A4:47:1C:51:EE:6E:7D:EA:2C:7C:3D:86:D6:9A
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:da:02:7c:9c:04:a9:97:58:e2:45:2c:91:f2:3e:ed:93:
         85:34:e3:57:c6:f0:39:f1:54:5d:ac:31:45:a7:17:a3:d6:09:
         8f:77:da:f0:a2:a8:16:7b:06:c7:16:33:b5:19:69:cb:bd:35:
         f4:fa:c3:d0:84:5f:56:d2:c3:21:29:cf:b8:fd:a7:f5:f4:5d:
         bb:ba:71:5b:f0:c6:8c:fa:6d:33:de:78:eb:b7:f0:bc:00:84:
         77:8b:65:35:8f:bc:ae:2b:1f:20:76:c5:25:3a:f4:6a:e9:c9:
         85:c2:28:89:fb:99:bf:d2:ee:7c:1b:82:55:f3:e7:8f:9b:4d:
         15:18:f3:00:ca:b0:19:79:4d:3f:40:83:b7:d0:ca:57:7c:9b:
         10:2e:e9:52:28:41:cb:9b:65:16:18:ff:25:2d:f7:25:ad:c2:
         06:f4:db:66:09:4d:19:61:85:f0:d3:be:e7:17:db:63:56:f5:
         4e:dd:6d:51:6a:40:d5:fc:d8:eb:bb:3f:03:2a:c3:ff:07:e2:
         6f:cd:43:cf:d7:c7:c2:5d:f4:f4:8f:45:a9:ab:27:0e:4f:fb:
         40:6a:f2:12:17:a0:f0:77:12:ae:aa:65:a6:75:8d:f0:fc:ed:
         91:53:64:23:62:56:7d:27:ef:48:46:af:48:f8:36:67:d5:8a:
         52:af:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:24 2026 by rpki-client