Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          eT/AHIi+6+qNU8R6kN00awUgzvHRdAhumaPWTt1dY7g=
Subject key identifier:   A1:2C:8D:A4:3C:44:87:1B:17:11:00:77:C3:60:6A:B9:A2:56:9F:C3
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       019D2A3B42E750CB11AEAE3B0F01D07715B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          06C1
Signing time:             Thu 26 Mar 2026 13:00:19 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:19 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:19 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: /7Lf+2aOIxjMpbrMqgkAO9+M8wGXX3bamKwfMM81oYM=)
                          2: KKkdWKb8trEZFH4vckoUJV2EraM.roa (hash: Ag2mjewJcCUE9H557ALCBro2BDKEQqn+ZfAIETR7Z90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:42:e7:50:cb:11:ae:ae:3b:0f:01:d0:77:15:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: Mar 26 13:00:19 2026 GMT
            Not After : Mar 27 13:00:19 2026 GMT
        Subject: CN=a12c8da43c44871b17110077c3606ab9a2569fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:31:47:e8:9c:ff:68:a2:6d:a8:61:a5:fd:
                    24:5e:11:ef:47:db:a9:11:68:12:7d:d1:d6:3b:de:
                    d2:e9:ce:8d:c7:9b:8a:01:a7:ec:0e:9f:ce:5e:34:
                    19:99:1c:56:c4:65:16:7a:f3:0e:04:1b:ac:a5:a0:
                    52:6f:c1:eb:2f:4d:36:c2:fc:5e:45:b5:c1:2a:f5:
                    a8:0a:d7:f8:cc:2b:a5:9e:40:7b:07:d2:c6:0d:1c:
                    c6:d2:1d:81:ee:41:3d:81:07:2d:97:f4:38:be:61:
                    ac:1e:1f:c6:eb:cb:fe:cc:43:af:b8:ed:44:11:5e:
                    f5:e6:1d:3b:c1:84:18:42:53:5f:28:e6:55:92:5e:
                    3f:83:45:23:06:8f:cc:68:01:29:9d:36:29:4d:d6:
                    4a:0b:c2:0f:8b:ed:44:06:26:39:bb:8f:c7:b2:8e:
                    dc:58:b8:25:13:70:99:48:c5:52:5b:a3:22:29:74:
                    00:22:de:38:3c:29:d9:96:56:b3:91:d7:20:da:77:
                    2e:4d:bd:ef:40:a3:7a:4e:55:1d:ce:d6:bf:f2:eb:
                    0f:21:86:b7:43:b1:c6:57:a3:ee:aa:bf:e7:08:f0:
                    35:26:94:24:b9:37:51:7e:ca:1c:d5:92:3c:d8:76:
                    58:1d:ce:77:b4:de:57:09:8b:52:2f:9f:3b:ca:d3:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:8D:A4:3C:44:87:1B:17:11:00:77:C3:60:6A:B9:A2:56:9F:C3
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:c2:28:40:e4:db:d8:61:8a:ec:17:58:e8:9b:0e:d7:78:
         c6:5e:97:b4:56:9a:d5:a1:3e:79:6c:c9:18:96:84:1e:ed:f2:
         66:dd:cd:92:27:4d:4a:d7:4f:6b:cc:ea:21:af:2e:7d:dc:d5:
         2d:4d:56:3c:a4:17:29:48:fe:a7:50:08:19:a4:a3:c0:e4:ae:
         c7:10:95:6e:86:e2:a2:79:c9:3a:8d:43:9b:81:0b:14:67:57:
         bb:2e:b9:91:a2:6d:98:1d:ee:3c:59:c7:c7:fe:34:6d:1d:5f:
         0f:b6:24:5e:ee:eb:0c:c2:a2:ce:df:1e:e1:6f:fd:44:81:9b:
         4c:f5:a3:a4:36:1f:50:3c:31:f1:de:5b:2e:ae:06:bf:80:fc:
         92:12:22:2b:fb:40:4b:77:78:16:80:4e:b5:a5:24:33:0c:a4:
         7b:90:f8:a7:69:33:c2:ea:d0:88:b2:50:d4:a5:86:52:26:c3:
         18:cb:75:0c:3a:91:7e:24:16:73:d6:74:1b:9f:11:9d:4b:b4:
         7f:bc:f3:96:cd:f8:eb:fa:d5:2d:10:70:82:ec:0e:70:ff:1a:
         81:43:9e:3e:d8:0b:f3:aa:10:b7:85:c4:c0:4f:2c:be:73:f7:
         e4:b8:15:d1:4a:0f:b8:46:18:1a:c8:af:23:af:53:02:cf:c8:
         62:b6:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:49 2026 by rpki-client