Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          m/kzdVJiUmJR+t7QBTKq8pi8HHzeh/m4lzPN/2dI/dw=
Subject key identifier:   CE:44:1C:A2:6A:4F:2F:EE:63:99:D0:3D:07:09:CC:9E:D6:C5:95:D0
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       019D265F1B9EAF736C0E17DBB4FE3A3047E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 19:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:00 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: M7Nay+z46Mj64Re6vNev0i4vDVS6cS9+qaFYcjda/Nc=)
                          2: FE713c5vfxbQIGSVdFNk2cWFSNM.roa (hash: JgjcAo4jgA6vPRnMC9MOKVjzjQ9dpKh8w3rh7WLC4i8=)
                          3: MzmWO7LoBcnanX-oi0jTnFog8Sk.roa (hash: 5odMEIfNAjn0z/TvPiyQ2V/cG1Zv5Ya9/4mq6vD/C1A=)
                          4: ZFxceImgdOll43mTIb-2CEd5iZU.roa (hash: LEd9mfjkTgsQciD0Ian4mosID5/HXYAOaKPSHE8Z4vM=)
                          5: gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa (hash: K81jA4IV1mFJAtA8ax5fpPdJJ+koFS4vN7Zd8+4wcqc=)
                          6: nL83DswPZjOseSZh-M_SsVEMmMI.roa (hash: +wx/HPeXcm/ZjhRslTkWTgSvYpXyWghawfhk/xaSRoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:1b:9e:af:73:6c:0e:17:db:b4:fe:3a:30:47:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Mar 25 19:01:00 2026 GMT
            Not After : Mar 26 19:01:00 2026 GMT
        Subject: CN=ce441ca26a4f2fee6399d03d0709cc9ed6c595d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:0f:1c:ef:3e:3a:ed:ae:1a:36:16:47:a5:
                    fb:f7:79:ae:d8:81:05:c1:08:8b:b6:f0:85:74:09:
                    53:46:7d:aa:32:e7:9a:d4:98:51:81:ad:af:06:a6:
                    92:bf:52:47:b4:87:44:99:4d:be:56:1f:19:87:c4:
                    ab:6b:02:9d:df:68:fe:d3:7c:7c:92:fa:4f:94:e0:
                    a8:ba:a6:60:8c:f6:06:e7:dc:dc:f4:18:f2:12:9a:
                    33:e7:56:22:a1:df:15:08:a1:ee:97:68:4d:f6:58:
                    b9:e1:4b:a1:50:5e:51:fe:2f:5d:94:49:71:ac:a0:
                    56:2c:f5:ef:66:1e:97:2e:e4:bb:fc:cd:9e:a9:77:
                    b8:08:b3:9c:6d:b9:ee:ee:e5:62:54:95:02:80:20:
                    b7:b6:d2:4b:dc:b4:3a:4a:bc:62:a6:69:14:1e:10:
                    10:2c:c9:99:b0:ba:d0:fa:ce:46:83:6e:9a:50:d5:
                    c7:7d:f0:12:a1:54:f4:dd:40:09:96:f7:82:ee:23:
                    99:0d:25:94:04:0f:43:f5:0e:25:4b:c1:f4:bf:e3:
                    81:79:4b:53:84:ac:b1:92:72:f2:5e:a4:24:cc:aa:
                    8f:19:eb:82:47:1d:be:67:d1:89:63:3a:86:b7:1c:
                    b8:9f:65:74:0f:2a:b3:01:b6:7a:26:61:ad:ba:95:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:44:1C:A2:6A:4F:2F:EE:63:99:D0:3D:07:09:CC:9E:D6:C5:95:D0
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:50:44:77:f6:b2:74:b1:10:39:08:d2:7f:03:72:76:70:
         30:7b:9a:18:c3:28:88:ee:6f:c1:d0:1f:da:9c:22:62:72:72:
         ba:35:82:50:7a:14:8b:b5:89:dc:27:7e:72:b0:ce:56:fe:05:
         7b:49:bd:b4:26:37:3f:b1:b8:e1:88:91:02:8b:b2:2f:14:78:
         fa:76:f3:ea:e5:68:3b:c0:0b:8b:5c:6f:ea:e4:a4:2e:fe:c5:
         3a:fc:c7:17:09:56:e6:8c:72:40:7c:5d:9a:27:59:06:d5:59:
         9e:94:43:0b:c8:60:41:32:07:57:88:82:2f:55:21:02:68:09:
         8a:47:4e:7a:e1:5a:aa:2a:cf:2c:6f:3f:76:1a:4a:6e:bb:95:
         9d:49:18:a2:07:5d:ce:58:a8:9a:42:d3:01:d8:39:61:67:5a:
         45:2d:1b:ce:be:a3:8a:a3:5b:55:9b:16:56:5c:a8:07:2e:e3:
         76:64:34:53:c1:d1:f9:1e:f7:fa:c7:e2:04:b9:15:f3:68:65:
         7d:7e:7a:af:ef:2a:8c:13:ad:6c:cc:99:86:06:66:6e:e0:ea:
         13:e8:dd:3d:78:0c:5b:d0:88:98:87:39:6f:64:d5:94:3e:29:
         95:0b:75:36:8c:eb:2d:89:79:d2:e0:a7:35:30:17:01:1f:06:
         19:a0:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:41 2026 by rpki-client