Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File:                     7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier:          c7QWxuXKIZZ9zr2VlsPuJXAXVxRqpNg4NYsjdWkoEa8=
Subject key identifier:   5A:9E:CB:29:ED:BF:CD:B6:57:85:B7:61:00:2D:0E:06:8A:3D:05:2C
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer:       /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial:       019D2AA9D51DABE2D7558C862F08F75B1402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 15:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:06 +0000
Files and hashes:         1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: 4ZGFF6vjrD96C2r6NMVxQ3JY6Lef7reUm19ECTyPcRk=)
                          2: OYAYkJsr12Z2fzjQPZfjWQb7bPE.roa (hash: mR0GOPgYN71wfw37nSlvDHq0Q6YfRMuXiZgBdujomYI=)
                          3: PhcWaa3aMcSfSfL7A05LVlfWmo8.roa (hash: muO9ZarGeUAZ/RdE0uDFFvn9bzKE1jMQWRZvhI1+828=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:d5:1d:ab:e2:d7:55:8c:86:2f:08:f7:5b:14:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
        Validity
            Not Before: Mar 26 15:01:06 2026 GMT
            Not After : Mar 27 15:01:06 2026 GMT
        Subject: CN=5a9ecb29edbfcdb65785b761002d0e068a3d052c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:ac:b9:76:f6:b1:d4:fd:fd:26:47:86:30:
                    ff:4d:e8:1d:3c:eb:01:68:46:61:a4:20:4d:76:b9:
                    ad:27:a3:a4:8f:0a:ad:40:66:b3:bd:b2:6e:dd:5f:
                    de:a6:a7:97:d4:5d:a1:ce:83:4e:83:a4:44:03:a1:
                    24:bc:ff:85:d0:62:97:b0:df:27:c2:5b:c2:41:6e:
                    ff:c4:87:64:85:d7:b8:e8:f5:b0:e0:ed:b9:e9:db:
                    47:a5:e4:51:4a:46:ea:7b:97:8d:22:43:e9:5f:bb:
                    18:01:d5:b3:80:c1:42:f7:fd:7b:05:8d:3e:67:2f:
                    90:70:54:1a:b0:26:e1:b7:51:13:f3:09:f9:a6:f2:
                    b1:e0:46:41:6d:b2:3e:5f:83:51:a8:10:0f:61:d0:
                    8b:f6:b8:ff:3e:74:4f:76:9c:76:80:81:74:3e:b2:
                    2e:19:d8:86:0b:9d:82:dc:33:81:34:86:38:67:4a:
                    b1:b8:50:a3:69:c6:55:9b:12:c0:94:4a:8c:14:08:
                    f1:d1:39:b9:50:a2:ef:83:8a:44:42:8c:ac:4d:94:
                    9a:94:68:07:cf:0f:5d:a7:89:59:c8:b9:54:84:b3:
                    9e:74:84:46:da:21:25:e3:86:14:93:52:50:6f:2c:
                    2f:75:0a:78:61:68:c3:63:f1:85:36:8f:03:6a:bb:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9E:CB:29:ED:BF:CD:B6:57:85:B7:61:00:2D:0E:06:8A:3D:05:2C
            X509v3 Authority Key Identifier:
                keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:bb:fb:07:45:76:3a:7d:8f:b3:b3:37:25:d1:ad:35:8e:
         bb:60:e1:47:36:f0:e0:6c:f9:5c:b2:ed:4e:fc:7e:c5:d0:6a:
         e8:7f:8f:14:ec:43:b5:c0:ef:87:6a:21:e2:a3:23:2d:6f:ea:
         d3:f5:ba:b4:37:0d:e7:f8:fa:53:eb:a0:cc:a4:44:da:bb:09:
         0e:42:c6:98:bd:eb:1b:07:47:d7:66:75:eb:d3:5d:d2:c4:38:
         e6:ae:c7:1f:55:67:94:e3:a2:18:1d:18:e2:a6:8a:0d:98:d1:
         91:c0:76:e0:5a:8d:05:58:9e:0d:75:75:6e:1f:bc:df:87:46:
         87:72:64:35:9d:3a:63:1c:34:b2:59:59:17:bb:04:ec:d2:05:
         37:b7:64:1d:5b:15:aa:76:a8:3b:2a:8a:9f:ae:76:99:6c:5a:
         80:d2:a1:87:82:e5:1b:16:a7:d5:cf:af:0e:7b:aa:e1:83:43:
         67:ad:44:fd:de:be:56:ed:f1:2c:dc:41:52:55:26:e6:16:9f:
         f4:62:30:1a:62:27:ec:4f:73:c8:08:02:d2:1a:55:02:90:fd:
         00:cc:bf:d5:d7:54:82:ca:e1:cf:6c:0e:ce:10:ba:6b:c9:dc:
         53:dd:be:da:9e:90:44:36:c4:71:a8:d4:93:09:e0:33:03:ad:
         88:50:d9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:24 2026 by rpki-client