Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
File:                     7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft (raw, json)
Hash identifier:          NziKHoFlvRElM67MmfrsXAUV0wzhMKB+phWK3xmAfNk=
Subject key identifier:   95:92:0C:40:0F:8B:A0:2A:7D:1E:33:09:7D:B1:BF:2F:88:AE:B9:F6
Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
Certificate issuer:       /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
Certificate serial:       019D2695BB417F6C9C96AF6CC2289CE4E163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
Manifest number:          01A4
Signing time:             Wed 25 Mar 2026 20:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:40 +0000
Files and hashes:         1: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl (hash: QpVncIc/G9ZN+Py8Xge47IibvMuEtY7eHOddAl4McG8=)
                          2: gSax7OXH-iNOvXWvL1n7wzpYk_A.roa (hash: 1itI78/MFf8nZzpbrs5mEB4VVmo+weMxJkNLYAmF8A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:bb:41:7f:6c:9c:96:af:6c:c2:28:9c:e4:e1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
        Validity
            Not Before: Mar 25 20:00:40 2026 GMT
            Not After : Mar 26 20:00:40 2026 GMT
        Subject: CN=95920c400f8ba02a7d1e33097db1bf2f88aeb9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:74:87:6c:7d:1c:f5:02:1f:08:57:21:14:
                    59:1b:a6:d5:7c:17:d4:62:9b:40:7b:54:eb:bc:58:
                    2b:cb:b1:2a:29:7f:4d:7f:8e:d4:03:ac:60:82:de:
                    13:11:dc:68:6a:5d:09:04:45:d2:15:9f:2e:ce:c3:
                    54:66:ad:65:b1:96:fe:38:29:ca:00:89:bd:ac:80:
                    89:cc:1c:3d:54:b9:cc:c2:61:89:d7:71:bf:aa:07:
                    7e:da:bb:70:fe:5b:40:43:16:19:10:94:91:cc:ea:
                    07:a9:fc:92:5f:49:ab:4b:58:ee:48:d8:d0:c2:64:
                    da:cc:d3:dc:8f:56:1c:49:3a:0c:91:1e:e4:67:61:
                    84:72:b0:e8:bd:af:89:82:d6:31:d9:2a:19:1b:0b:
                    20:e8:67:0b:b7:5e:70:f4:59:88:91:08:aa:1f:11:
                    89:9d:5f:37:de:04:b4:7c:2a:28:b7:47:26:fb:78:
                    ae:47:52:2c:19:88:5b:7c:00:11:93:26:7d:69:6a:
                    33:b8:8e:28:ce:b7:b9:a8:6a:4f:01:bd:15:01:24:
                    ab:81:9a:e6:0f:1d:38:b7:c2:29:6f:4b:41:7b:3b:
                    de:8f:c4:96:3a:15:bb:7f:2c:a7:55:58:01:9e:db:
                    4a:c4:54:80:f2:e0:e0:67:ab:76:56:f9:33:07:32:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:0C:40:0F:8B:A0:2A:7D:1E:33:09:7D:B1:BF:2F:88:AE:B9:F6
            X509v3 Authority Key Identifier:
                keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:48:46:db:0e:54:15:a3:cc:36:2a:b4:3e:ee:df:5d:ea:97:
         e1:b3:92:21:58:aa:84:16:58:e3:44:30:8a:8b:49:da:3c:5b:
         95:2c:24:4f:a4:f1:8d:66:02:fc:bb:83:7a:06:f6:f7:4f:4f:
         4b:df:1f:a1:4e:c0:12:52:cc:18:cb:3a:56:67:e6:ad:0a:8d:
         b1:a6:4d:81:0f:b0:5f:93:43:bc:41:ba:26:05:bc:7d:8f:10:
         a8:06:e7:3e:60:6f:28:b0:71:c0:3d:b2:75:a4:a0:31:85:08:
         8d:16:49:85:62:8c:a2:29:a9:92:69:ab:17:c2:4d:37:19:84:
         a7:c5:3f:7c:0f:b2:1c:12:18:1e:75:0e:e5:72:b2:0f:de:55:
         d1:0c:b7:54:3e:d4:56:08:fb:81:5b:74:16:4e:b8:06:3a:5e:
         bf:ce:01:e5:88:2f:62:19:25:64:11:4d:44:ef:9a:83:52:d5:
         7c:fe:04:42:3b:2e:8c:b3:91:48:f1:00:46:b0:5f:3a:2a:8c:
         83:5e:82:ed:c5:9a:da:a9:7e:1f:c2:58:a5:eb:45:62:0b:f9:
         88:4a:9b:25:d3:2c:73:b0:0b:77:c0:72:bb:6b:27:d8:fa:7e:
         8d:31:95:d6:0f:e5:69:b9:f7:fa:2b:f8:9f:10:e8:43:38:a2:
         e1:89:b1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlbtBf2yclq9swiic5OFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMDlmMGU4ODY2M2Y4M2E1YjZmODRmMWZlZTZiNDJjMzVj
MGY4ZjIwHhcNMjYwMzI1MjAwMDQwWhcNMjYwMzI2MjAwMDQwWjAzMTEwLwYDVQQD
Eyg5NTkyMGM0MDBmOGJhMDJhN2QxZTMzMDk3ZGIxYmYyZjg4YWViOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoR0h2x9HPUCHwhXIRRZG6bVfBfU
YptAe1TrvFgry7EqKX9Nf47UA6xggt4TEdxoal0JBEXSFZ8uzsNUZq1lsZb+OCnK
AIm9rICJzBw9VLnMwmGJ13G/qgd+2rtw/ltAQxYZEJSRzOoHqfySX0mrS1juSNjQ
wmTazNPcj1YcSToMkR7kZ2GEcrDova+JgtYx2SoZGwsg6GcLt15w9FmIkQiqHxGJ
nV833gS0fCoot0cm+3iuR1IsGYhbfAARkyZ9aWozuI4ozre5qGpPAb0VASSrgZrm
Dx04t8Ipb0tBezvej8SWOhW7fyynVVgBnttKxFSA8uDgZ6t2VvkzBzJSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWSDEAPi6AqfR4zCX2xvy+Irrn2MB8GA1UdIwQY
MBaAFOwJ8OiGY/g6W2+E8f7mtCw1wPjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQt
MzZiNTY4MGFjMzY4LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQtMzZiNTY4MGFjMzY4
LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUhG2w5U
FaPMNiq0Pu7fXeqX4bOSIViqhBZY40QwiotJ2jxblSwkT6TxjWYC/LuDegb2909P
S98foU7AElLMGMs6VmfmrQqNsaZNgQ+wX5NDvEG6JgW8fY8QqAbnPmBvKLBxwD2y
daSgMYUIjRZJhWKMoimpkmmrF8JNNxmEp8U/fA+yHBIYHnUO5XKyD95V0Qy3VD7U
Vgj7gVt0Fk64Bjpev84B5YgvYhklZBFNRO+ag1LVfP4EQjsujLORSPEARrBfOiqM
g16C7cWa2ql+H8JYpetFYgv5iEqbJdMsc7ALd8Byu2sn2Pp+jTGV1g/labn3+iv4
nxDoQzii4YmxBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:02 2026 by rpki-client