Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File:                     7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier:          MlbNJTFcMSqhzEAy9LDnMfP+IRXbMkUVDigqC13NuSk=
Subject key identifier:   8A:E3:DE:A0:5B:94:99:33:5D:25:F6:64:9A:87:CA:07:FA:AF:40:77
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer:       /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial:       019D26CD7BFA457286513341B46053622D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number:          0D7E
Signing time:             Wed 25 Mar 2026 21:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:33 +0000
Files and hashes:         1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: wUC2u+zD/292FIUVcCSNBIItgDaxAWTedHT9x9d3MeA=)
                          2: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (hash: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:7b:fa:45:72:86:51:33:41:b4:60:53:62:2d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
        Validity
            Not Before: Mar 25 21:01:33 2026 GMT
            Not After : Mar 26 21:01:33 2026 GMT
        Subject: CN=8ae3dea05b9499335d25f6649a87ca07faaf4077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:60:a3:fd:41:18:a3:a1:2d:70:b7:e7:61:
                    6d:06:bc:13:0a:e4:65:b7:46:80:18:58:b7:1a:d2:
                    b8:b5:1e:c2:b8:89:33:58:bf:ab:64:fc:85:0a:16:
                    1f:56:94:10:9c:6c:d3:c2:d9:d2:1f:01:f3:05:98:
                    72:8c:cd:34:9b:6a:41:ee:98:34:f5:88:fe:f6:19:
                    ff:0e:72:ae:e5:bd:fd:6b:df:b9:51:52:3a:61:82:
                    dc:3e:b8:73:da:9d:1c:d3:4d:95:a6:d5:ee:d8:a7:
                    6f:24:73:80:a6:4b:b0:44:6f:af:ef:51:31:aa:4d:
                    2b:b2:94:d8:35:24:b8:97:6f:75:21:06:e8:e9:83:
                    00:66:5d:75:01:eb:f3:91:6d:27:33:26:18:00:30:
                    46:77:fa:f7:75:91:20:9a:76:e1:b3:c9:8b:0e:42:
                    e2:e3:7f:f8:17:eb:de:97:57:3a:25:f2:57:81:5e:
                    8f:af:2b:a1:45:3a:d9:a9:25:a2:8a:7c:bd:be:47:
                    ac:c8:a0:8b:91:c0:83:1e:8d:d1:e7:c8:a6:88:5d:
                    ea:fd:a0:a1:f6:33:8a:d7:b9:a9:f6:ce:56:2a:73:
                    78:44:6f:56:59:3b:11:14:80:6d:5a:ef:d8:d7:84:
                    b3:eb:f2:88:c6:cb:ae:d0:66:3f:00:95:13:7b:eb:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:DE:A0:5B:94:99:33:5D:25:F6:64:9A:87:CA:07:FA:AF:40:77
            X509v3 Authority Key Identifier:
                keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:48:d7:5c:32:d0:e9:3a:2c:8c:43:4f:d2:70:78:6c:81:
         97:83:b3:2e:b8:a9:7f:e1:37:ed:1e:c9:17:53:d4:4c:71:cf:
         cf:43:66:22:4c:11:cc:d8:89:a3:c9:cc:73:f7:fd:1a:94:9b:
         98:ac:bf:4a:94:60:ce:42:82:ab:ff:76:1f:f1:80:0b:b0:58:
         f2:60:20:8d:74:37:8a:2f:a3:80:25:25:5f:44:a5:1e:e8:34:
         07:60:89:f9:84:6f:12:23:d6:f1:11:ec:bc:3e:9f:87:50:74:
         9a:91:7a:fe:78:3e:fc:13:73:25:47:a4:53:b3:44:fe:70:cf:
         ea:3e:e7:ea:cd:e6:97:f0:41:db:ba:b3:85:6e:9e:aa:5e:4e:
         56:51:f9:63:5d:87:4e:f9:63:eb:c2:14:83:35:80:cc:7e:2d:
         1a:f3:ab:b5:de:fe:65:32:ea:16:29:46:06:17:8f:ca:3e:47:
         dc:ea:78:fb:33:79:d9:67:d7:9c:67:91:38:b5:5b:61:3b:78:
         8a:1a:44:c3:56:27:93:28:25:35:ab:77:3a:e0:23:f4:66:3d:
         68:51:f5:7e:73:ac:23:10:a3:b0:38:4d:85:a2:06:a9:46:52:
         0e:c9:7f:bc:78:6f:bd:2f:35:60:14:b9:6c:21:1f:b6:b0:4f:
         5e:8d:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:59 2026 by rpki-client