Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File:                     dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier:          Fb0WekEQExjjrZZwcSFdaVUzb9Qk1zpdQpitMBiCgEM=
Subject key identifier:   CD:44:57:AD:1B:23:E5:07:65:55:46:19:E3:FB:01:0B:F8:25:7F:F4
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer:       /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial:       019D28F31CA38FD31FCF4F205B4A6CA8C24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number:          11EA
Signing time:             Thu 26 Mar 2026 07:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:54 +0000
Files and hashes:         1: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: krTBDA5MN/hHfCm7BwK8xQkAfpAhubOnMMKWwaYEiAQ=)
                          2: ynQWqqRQzgYY2w7C-ZLiYaA0Cxo.roa (hash: tf5X3dbrn9gwldWFkRsRF/32dVlJk97Ns13Rw6axOok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:1c:a3:8f:d3:1f:cf:4f:20:5b:4a:6c:a8:c2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
        Validity
            Not Before: Mar 26 07:01:54 2026 GMT
            Not After : Mar 27 07:01:54 2026 GMT
        Subject: CN=cd4457ad1b23e50765554619e3fb010bf8257ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:ec:a5:a2:9c:c5:a8:4e:ec:90:49:a8:68:
                    8a:91:9e:6a:dd:b3:ef:47:53:ae:d4:80:2f:c4:38:
                    7a:a0:a8:08:1b:a8:64:f3:f6:7b:93:9c:fa:28:14:
                    30:07:d2:54:1c:a1:50:a3:de:fe:80:df:2f:c0:4b:
                    b1:13:03:9f:5f:d6:26:7f:3e:6b:3e:8d:c9:7f:9a:
                    2d:0b:f0:94:e2:fb:a0:82:4a:b2:fb:3f:2a:a4:c6:
                    64:e5:ba:ba:3a:2d:fb:a7:d9:6a:fb:3f:84:ce:6e:
                    6d:6d:71:f4:36:86:eb:c1:23:aa:5b:38:88:2d:8a:
                    12:80:c4:cc:bf:9b:17:7b:01:ae:3e:3d:c9:c0:81:
                    a1:42:bf:43:12:cc:e2:4f:99:ea:b5:76:74:ba:21:
                    53:f7:db:26:68:ad:aa:e7:01:e3:34:8b:dc:3c:27:
                    3a:d1:bd:85:ea:bf:46:2b:c2:8b:62:56:fd:e6:c3:
                    99:56:87:17:a0:69:0e:95:f6:67:bd:22:61:98:3b:
                    66:8e:6d:09:df:39:25:ef:88:40:88:9e:66:07:5f:
                    39:9a:8c:68:fe:75:c4:1d:9a:ae:e9:1d:11:78:e6:
                    9c:3c:04:83:4d:77:28:39:45:54:98:34:35:4a:99:
                    93:cb:df:ce:ad:21:fe:74:e0:f1:05:79:87:37:c3:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:57:AD:1B:23:E5:07:65:55:46:19:E3:FB:01:0B:F8:25:7F:F4
            X509v3 Authority Key Identifier:
                keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:74:8e:da:70:fb:91:12:f7:26:58:1b:51:24:32:bf:be:
         cd:13:9c:9f:87:63:dc:57:3d:05:71:be:93:31:45:73:93:57:
         85:cd:ac:41:1d:2b:b0:2f:ac:19:df:f6:f3:f4:9e:1d:06:8e:
         cc:a5:c7:1d:e6:ca:6c:14:84:3c:f9:4b:ef:d4:95:ed:82:b4:
         86:c1:95:34:50:a6:04:57:be:8a:0e:1c:83:12:bb:ae:f3:a0:
         0b:4c:ec:68:b0:fd:01:9d:f4:79:04:d7:07:d4:81:d6:7f:64:
         5e:91:e4:36:ca:e3:89:3e:a7:03:16:05:3f:91:95:38:f7:e0:
         20:da:db:a4:70:f7:7d:00:69:3c:99:9f:f6:53:9b:c1:6e:fa:
         a0:9a:57:eb:be:44:d4:e9:f5:af:3b:51:bd:2b:b2:9f:d2:41:
         4f:b8:1d:5a:f3:48:69:ca:0b:6c:e8:48:ff:5c:91:b7:02:07:
         e4:c8:52:fd:53:99:8e:22:c8:91:3e:e7:fc:9a:a5:74:54:9c:
         64:b5:95:b3:87:1d:82:e9:74:fe:2d:1d:20:01:9d:04:a9:c4:
         28:56:39:f5:e7:f5:55:07:ca:f7:7f:20:5b:26:bc:b4:59:9e:
         f8:e4:32:6e:34:f8:a6:6b:a6:d8:78:00:60:12:49:7a:f4:97:
         0c:65:69:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8xyjj9Mfz08gW0psqMJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDdjY2MzMDkyOTFkYzgxYjE5MTQzZDRkM2ZlMjhkMDFj
NmJlYmQwHhcNMjYwMzI2MDcwMTU0WhcNMjYwMzI3MDcwMTU0WjAzMTEwLwYDVQQD
EyhjZDQ0NTdhZDFiMjNlNTA3NjU1NTQ2MTllM2ZiMDEwYmY4MjU3ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AXspaKcxahO7JBJqGiKkZ5q3bPv
R1Ou1IAvxDh6oKgIG6hk8/Z7k5z6KBQwB9JUHKFQo97+gN8vwEuxEwOfX9Ymfz5r
Po3Jf5otC/CU4vuggkqy+z8qpMZk5bq6Oi37p9lq+z+Ezm5tbXH0NobrwSOqWziI
LYoSgMTMv5sXewGuPj3JwIGhQr9DEsziT5nqtXZ0uiFT99smaK2q5wHjNIvcPCc6
0b2F6r9GK8KLYlb95sOZVocXoGkOlfZnvSJhmDtmjm0J3zkl74hAiJ5mB185moxo
/nXEHZqu6R0ReOacPASDTXcoOUVUmDQ1SpmTy9/OrSH+dODxBXmHN8MejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1EV60bI+UHZVVGGeP7AQv4JX/0MB8GA1UdIwQY
MBaAFHYHzMMJKR3IGxkUPU0/4o0Bxr69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmIt
Yzk0ZmU0Yzk3MWQ0LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmItYzk0ZmU0Yzk3MWQ0
LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi510jtpw
+5ES9yZYG1EkMr++zROcn4dj3Fc9BXG+kzFFc5NXhc2sQR0rsC+sGd/28/SeHQaO
zKXHHebKbBSEPPlL79SV7YK0hsGVNFCmBFe+ig4cgxK7rvOgC0zsaLD9AZ30eQTX
B9SB1n9kXpHkNsrjiT6nAxYFP5GVOPfgINrbpHD3fQBpPJmf9lObwW76oJpX675E
1On1rztRvSuyn9JBT7gdWvNIacoLbOhI/1yRtwIH5MhS/VOZjiLIkT7n/JqldFSc
ZLWVs4cdgul0/i0dIAGdBKnEKFY59ef1VQfK938gWya8tFme+OQybjT4pmum2HgA
YBJJevSXDGVp+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:30 2026 by rpki-client