Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File:                     T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier:          r80c/MQULhBKoJkq4fh1mcmtDxDny/OoAJcK8y4+gJk=
Subject key identifier:   88:74:34:B4:78:43:0E:27:4D:4D:56:B4:3A:59:E3:6D:F4:15:76:C2
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer:       /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial:       019D27A89F43CA0952BCF1B44A51A626824F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number:          0BE7
Signing time:             Thu 26 Mar 2026 01:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:55 +0000
Files and hashes:         1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: bGkQwpAcuSryEeeI4RG44WKqszP2HWY1qDP8kq+jcDg=)
                          2: vGITqOM2Qr7qYaxHjQA6bgwtMHQ.roa (hash: oAck/TCVUq6iwApW0WsXsYIkY48wx+OrIDhclhnJfcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:9f:43:ca:09:52:bc:f1:b4:4a:51:a6:26:82:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
        Validity
            Not Before: Mar 26 01:00:55 2026 GMT
            Not After : Mar 27 01:00:55 2026 GMT
        Subject: CN=887434b478430e274d4d56b43a59e36df41576c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:fe:2c:9f:80:8d:0c:b2:2f:b4:57:4d:ba:
                    72:ba:06:a4:6d:ad:c1:63:61:6a:5a:b3:39:fc:33:
                    15:8b:f9:aa:5d:dc:2a:97:7c:22:49:0b:68:43:29:
                    43:0c:bc:e7:3c:6b:0e:17:4b:ae:4a:0d:2f:9d:55:
                    62:2c:f5:90:81:f3:39:22:36:d8:1b:db:44:34:a6:
                    fe:5c:14:af:d7:7e:af:93:27:10:cf:97:7d:1b:bf:
                    8e:d8:c5:c9:10:8b:14:79:b4:1b:d0:c6:80:b6:48:
                    10:05:ad:94:9c:a4:fc:87:38:e2:88:53:5c:7f:c4:
                    75:72:da:59:17:41:da:29:d6:a0:35:4d:b3:04:a5:
                    3c:77:fb:79:cc:10:92:f1:18:f0:bb:c5:68:32:e9:
                    5e:7c:55:0c:31:d8:ab:27:c7:8e:c7:6d:1d:6f:e5:
                    b0:04:89:c0:7c:45:f4:f3:1d:1f:e0:36:4c:5c:13:
                    5f:a3:42:88:fc:e1:d2:a0:d8:2d:de:de:f5:9f:44:
                    bf:26:c0:4d:7e:4c:22:ae:07:6b:fd:f1:30:05:e4:
                    2d:ac:af:73:fd:aa:35:52:29:bb:6d:aa:1f:b3:62:
                    70:d2:44:7f:4f:1a:d5:e8:f6:a1:11:c8:04:e4:ce:
                    9d:aa:e8:50:38:39:d1:a0:19:52:48:86:d1:f8:f6:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:74:34:B4:78:43:0E:27:4D:4D:56:B4:3A:59:E3:6D:F4:15:76:C2
            X509v3 Authority Key Identifier:
                keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c9:1a:90:f7:46:be:00:8e:7b:c6:5b:1a:f3:2d:90:ad:a2:
         db:43:e3:5c:ad:b1:ce:f5:a0:dd:d7:83:5f:8b:65:1e:16:55:
         24:88:f8:43:b8:37:b5:14:5d:db:d5:bd:4b:b9:fa:73:a2:e3:
         50:ca:4a:de:49:6f:6c:78:2e:85:c8:16:2e:90:52:69:22:91:
         d1:70:22:13:1d:00:ad:a4:2f:18:ff:a5:b0:ac:29:0f:da:97:
         9f:1a:7f:db:b5:91:2a:fd:fe:44:fc:d2:5d:8f:b0:95:79:1b:
         4e:8f:bf:49:5c:58:84:ae:18:9b:7d:a1:7f:b6:c8:f9:a0:07:
         c4:09:3e:2d:7e:be:54:0b:dd:a4:09:c7:1c:63:7d:bc:b2:87:
         44:ac:99:4d:05:f3:6f:68:99:c0:ec:68:74:20:d5:98:6e:bf:
         35:94:9e:d6:e0:2d:19:af:a3:b9:06:6a:1c:87:80:5c:41:93:
         82:5e:38:05:4e:c9:ae:e7:ac:f9:46:3f:2d:82:66:8b:32:6a:
         ba:89:0f:e8:ef:cf:44:8b:7a:12:e9:8d:8e:fc:ef:7a:63:bd:
         e6:96:46:9b:54:d4:a2:3b:d6:2f:fa:b9:e7:21:d5:dd:13:fc:
         8d:1a:31:00:65:78:5f:cf:cd:85:3e:3a:3f:7b:68:6a:87:5d:
         cf:4d:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:31 2026 by rpki-client