Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          1KssjEkf4mgeZrXzGwpIyVKNjk/HqnWNrtEj6kvhF6o=
Subject key identifier:   99:26:07:32:37:0E:D6:EA:08:74:21:F4:1E:42:32:BF:BB:05:A2:2F
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       019D273B186A0B6878035806415B59621AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          1899
Signing time:             Wed 25 Mar 2026 23:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:17 +0000
Files and hashes:         1: 2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa (hash: Wiz2ighDEoFn4OhV9qneE+0XWQZVHPj+hAbIfIbUN0g=)
                          2: 4bCgDxdDaKJgzA4h-Rx55rf85c8.roa (hash: pNURX3p9L1wk4RiWa90pndbKlQ0u4vCpDE0muKi8F30=)
                          3: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: 9aE1sq/NG7Z4w3eEDQB6tauDMKw47U6I2H3fBS0Vp6g=)
                          4: L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa (hash: dFcPnovhPqX+I0cA7rgPPiD8o0Ghfz0dhmsmMJvSAmc=)
                          5: ymwq65dFLSRW1oFgWNSexktPNrw.roa (hash: rVpzH0+E2/XQlxkiDJfpz/vLZgr0hKXz0oMYUu0ZIig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:18:6a:0b:68:78:03:58:06:41:5b:59:62:1a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: Mar 25 23:01:17 2026 GMT
            Not After : Mar 26 23:01:17 2026 GMT
        Subject: CN=99260732370ed6ea087421f41e4232bfbb05a22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:1f:a3:5f:43:85:7e:e7:81:0b:e1:28:e5:
                    03:30:d5:2e:f9:cf:b3:75:12:e0:7e:f5:af:5b:8d:
                    0e:c3:d1:d1:9e:18:27:ee:cb:40:77:95:91:9e:69:
                    f0:06:e8:da:fc:b1:41:35:e8:ba:c8:bf:74:21:82:
                    f6:96:e5:3b:e1:a6:e9:0e:7a:5a:a8:c0:5d:58:09:
                    56:01:82:9c:2c:78:be:de:3c:38:78:60:29:06:f6:
                    15:20:c0:15:95:a6:82:f6:f2:3e:ed:ae:f6:7c:05:
                    2c:f9:b0:32:c0:b7:90:df:29:99:48:c1:d3:80:77:
                    98:5a:50:2d:5d:46:84:ad:ef:99:c1:22:27:8b:90:
                    b6:74:c4:31:4e:1f:1d:e8:02:69:3f:df:b5:60:1c:
                    f1:7d:62:c9:e3:c3:28:77:a5:9a:1e:c4:26:d9:44:
                    cb:c1:12:a2:ab:4b:9b:9d:c6:88:ef:b3:90:b4:71:
                    ec:47:2a:37:dc:ea:2f:82:d9:a8:40:0c:ba:c9:52:
                    ba:2f:00:a2:15:f9:a7:f9:43:cb:ce:cb:9c:19:7b:
                    fa:2a:44:3c:0d:67:38:9b:23:dc:64:d6:ff:51:32:
                    45:e7:64:a0:a8:87:eb:66:24:af:19:ed:be:e2:2b:
                    40:ba:45:48:07:b2:e8:e3:10:95:6a:75:07:76:e0:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:07:32:37:0E:D6:EA:08:74:21:F4:1E:42:32:BF:BB:05:A2:2F
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:e4:e4:19:8c:d2:14:96:f2:f2:47:58:45:1b:f6:73:2c:
         04:b9:90:df:cb:80:fa:1b:9c:4d:1c:4b:be:fc:82:6a:75:66:
         18:7c:d4:bb:bd:2f:10:9a:f3:a5:fa:68:94:cb:de:a2:7b:79:
         79:49:87:64:3a:fd:b1:00:33:41:44:3a:18:2a:08:82:35:77:
         b4:96:78:f3:8c:28:bf:8a:1b:0a:1d:54:e8:1a:ac:72:be:e9:
         60:17:9d:d5:d6:54:e2:02:5e:17:7b:71:8d:f3:3d:16:e9:21:
         94:45:ea:19:e7:5f:a7:0d:ba:f6:59:05:c0:05:c3:07:ff:f5:
         3e:cf:10:fb:cb:c8:09:e7:a4:39:64:89:5b:6c:c0:35:f9:15:
         49:f7:23:a4:a4:b8:8b:f6:89:3f:8e:a7:37:3a:b2:3d:bd:f7:
         c2:77:ed:de:7f:27:68:9a:89:90:ac:8b:7c:89:45:e6:cc:a4:
         b5:db:4d:e3:63:73:df:30:17:3c:9a:29:c7:5f:82:8d:45:86:
         e0:b1:e9:ea:e4:fb:4c:7d:e4:4a:b2:b8:99:6a:b7:c5:83:37:
         2e:33:c0:7b:74:02:68:06:ad:cc:97:98:32:96:4b:a1:70:63:
         a7:1f:e3:19:0c:f4:e8:0d:d4:7e:bb:18:9b:7e:ca:65:31:6f:
         1c:8b:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:13 2026 by rpki-client