Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File:                     7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier:          WG36XTxpd+9DhNr0n9zIh/PouqBim7t6qF2Z7qcIIZs=
Subject key identifier:   33:E6:B3:E7:BA:72:8A:39:84:52:66:12:7C:7C:59:10:93:E6:FB:25
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer:       /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial:       019D2771CF37D64791876579C6BB62CA3E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number:          1183
Signing time:             Thu 26 Mar 2026 00:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:03 +0000
Files and hashes:         1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: 0XhrMb2I6CGru2hTzq9JnuEqkzjPzzYTmHu0usTxRqM=)
                          2: t6qrZMnMT533RSAzZ-Cs1wkfZKU.roa (hash: za2khRaYkPT+2IlbEqg/xal2w9rhxHbcNNQ5m8PfzoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:cf:37:d6:47:91:87:65:79:c6:bb:62:ca:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
        Validity
            Not Before: Mar 26 00:01:03 2026 GMT
            Not After : Mar 27 00:01:03 2026 GMT
        Subject: CN=33e6b3e7ba728a39845266127c7c591093e6fb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:66:91:45:0d:d2:3c:b6:ba:70:3b:5d:45:
                    de:f0:b3:2d:09:b3:de:cc:09:32:fd:7b:d7:99:6b:
                    af:4d:d3:1b:d1:f2:2b:02:fb:fc:ab:45:5f:66:03:
                    37:3c:81:25:36:f7:3b:7c:ae:21:6d:3d:7e:95:4a:
                    e6:e7:c6:1b:d6:ea:e9:9b:bf:3a:3a:10:1c:9e:31:
                    73:45:1c:41:23:53:c6:c0:bc:f5:ea:c3:88:de:f1:
                    9d:06:64:d5:bc:ad:a0:dd:ec:28:e5:8f:a2:6d:2e:
                    d3:78:2d:1d:e2:c5:88:98:a7:26:52:79:ad:98:ff:
                    f1:72:22:29:a1:79:f7:83:ec:66:65:02:ca:d1:f6:
                    28:ed:ed:c6:cf:ff:9b:c1:a3:8e:8a:2f:39:72:38:
                    68:22:c4:82:6c:01:7a:fd:0f:ad:8b:2b:6b:89:09:
                    4b:98:1a:a1:37:04:ad:61:10:70:bc:04:48:7c:6c:
                    21:cb:f9:ad:91:ab:83:93:c3:e6:27:ff:a9:77:eb:
                    44:1b:c9:b1:41:ef:7c:cd:05:fc:28:bb:d3:8e:19:
                    c4:91:47:20:77:44:e4:85:45:d3:ef:eb:54:38:38:
                    0c:b6:bf:2b:dd:c3:63:c0:31:02:c7:a5:db:75:88:
                    07:61:fa:aa:b5:71:f4:58:30:0d:c4:a5:3b:48:f5:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E6:B3:E7:BA:72:8A:39:84:52:66:12:7C:7C:59:10:93:E6:FB:25
            X509v3 Authority Key Identifier:
                keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:19:e1:5f:e0:c0:df:9e:cf:31:3a:bd:04:22:77:99:ad:
         9c:ab:80:48:ae:50:63:e2:b3:43:69:f5:2c:3c:1c:79:53:fd:
         98:d0:e4:05:a3:f1:4f:d4:82:0f:c3:0b:40:4a:93:15:35:75:
         9a:c3:b3:18:74:14:9f:be:20:4c:c8:23:fc:05:99:1a:b5:8d:
         a3:81:39:ef:c5:7e:58:86:a0:96:46:60:93:ab:0e:eb:ce:b2:
         3f:ec:7e:78:ee:1e:91:93:7f:5d:b4:87:2c:02:0f:d0:cb:0c:
         03:e8:23:2f:b4:c9:97:05:84:7c:60:d6:9f:cc:fc:3b:62:c6:
         aa:f3:3b:32:4e:64:72:83:0a:4b:fe:7c:32:06:15:ec:df:0c:
         2d:bc:73:78:d5:60:66:01:ef:16:5b:23:1d:c9:7b:b2:67:6e:
         91:61:91:c0:ca:c4:98:db:35:6e:d7:8f:15:94:9d:ce:63:19:
         42:15:d7:e5:4e:7e:8c:fc:99:f8:7c:06:64:d8:2e:01:f9:b1:
         0c:e4:06:d1:c4:41:84:96:87:f1:6c:58:7b:06:9e:42:1a:94:
         5d:d9:99:30:e6:99:2f:98:af:51:03:bd:b6:2e:0b:0a:22:58:
         78:de:58:b9:47:bb:b8:da:9b:51:30:35:c6:f0:2f:40:7d:7c:
         65:b6:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:08 2026 by rpki-client