Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          +dYCMYJOamApk+5WCbFwPu1CH8zLiLTV22YB+j1ZIA8=
Subject key identifier:   1E:9D:0E:EA:4F:D2:12:A2:72:87:78:04:6E:90:98:B5:72:5D:29:AC
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       019D27042A0FC9C47329CB056514625281E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 22:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:17 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: 3DgBxUjhV1GOvXYeR2ul5jdUP/HrUfc8QjRvRtxbt5w=)
                          2: YfWgj2my_KeNLyWnne6FgiOk-6s.roa (hash: tWmUa8IGcqX7DqS4EQsx6DEzH9rUFPj7katD2nQ7ngQ=)
                          3: a5xIvW3BW1C9Z86vKuhHNnMUW1I.roa (hash: N1TPiZLS4CBPYcke7d0x1aNn6YXVm1B/Voa46DaLwok=)
                          4: cttWIecNV3-RxwLBOUCi60J1iJY.roa (hash: BkBMDu3YGkPA9g0Vj6imuKd49PHZGK/pP3QhJiDHRZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:2a:0f:c9:c4:73:29:cb:05:65:14:62:52:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: Mar 25 22:01:17 2026 GMT
            Not After : Mar 26 22:01:17 2026 GMT
        Subject: CN=1e9d0eea4fd212a2728778046e9098b5725d29ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:2e:b7:43:c6:1a:f3:5d:e2:14:91:a8:7a:
                    23:73:62:07:0c:8f:fa:9a:fd:d0:c3:96:42:5d:46:
                    0a:14:48:e0:c7:d2:4c:06:99:7b:87:5b:ca:4d:46:
                    e7:40:81:3a:ac:f3:d9:b8:4c:fa:bb:e3:4c:92:8c:
                    87:fa:ce:19:6b:29:1a:8c:29:db:48:bc:fa:2a:26:
                    fc:79:20:62:f1:2d:a6:32:22:5d:33:c8:1c:2f:eb:
                    0a:ee:ce:9e:cb:73:f8:c6:45:93:62:ca:7c:7a:08:
                    81:15:31:d6:1e:49:cf:32:b7:49:a1:b6:cf:ea:89:
                    b1:56:70:41:2c:81:7a:09:c2:cb:b9:3a:5c:ed:c7:
                    48:ce:e0:44:b8:fa:7e:a2:68:12:bd:17:3e:a2:f9:
                    c9:4d:6d:2c:85:e2:e3:b8:d7:c6:0c:27:dd:b4:1c:
                    ad:73:c4:61:32:9a:00:99:93:01:4d:f9:12:68:98:
                    58:b7:aa:3b:b4:40:f4:35:f7:84:81:a7:46:82:a9:
                    f9:0c:b9:e0:90:6f:98:6e:69:20:dd:9e:a0:55:32:
                    56:20:4e:6a:a3:b5:72:74:32:80:ec:f9:36:1c:da:
                    14:47:df:97:2f:0f:fa:85:55:cf:da:c8:5d:22:2b:
                    db:fd:bd:4f:a6:58:16:cf:3e:16:e2:a9:15:b9:61:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:0E:EA:4F:D2:12:A2:72:87:78:04:6E:90:98:B5:72:5D:29:AC
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:ba:d3:9c:03:1e:b3:be:22:54:b1:3c:1c:a1:1b:58:27:
         c8:e5:45:c1:9d:2c:cf:f2:83:28:f5:94:c6:ef:36:71:74:64:
         1b:60:02:d3:e9:97:cb:41:c9:15:cc:a9:a5:1e:c7:ba:67:5c:
         72:a3:ef:12:b0:00:29:15:65:8d:b7:ef:f1:69:90:59:74:73:
         2b:55:76:54:ae:51:f7:fb:8a:34:04:8b:4c:c9:0d:5f:1a:7a:
         26:38:08:0a:6e:68:fa:3f:c6:42:3e:22:01:57:60:4b:3f:a9:
         28:e9:98:a4:0b:dd:eb:60:99:cf:ce:d5:2e:f1:db:72:05:27:
         ab:51:b1:ef:53:80:2f:13:14:41:55:be:70:05:3f:33:64:13:
         f2:76:8c:0c:d3:ee:6b:49:de:d6:dc:cf:cd:f1:f1:7f:46:c9:
         51:8a:2b:4a:62:ac:e6:13:bf:7f:9d:57:c6:71:c7:a9:78:1a:
         ad:14:0e:75:5a:cf:56:6e:5d:90:5e:1a:f1:28:c0:f0:36:d4:
         44:14:a7:50:92:5b:77:d6:26:58:e4:07:e1:0d:0c:4d:b3:72:
         09:0e:bf:c7:e5:fc:bd:63:2d:f1:b7:44:0b:d5:5c:bd:50:0d:
         0c:98:d8:60:e5:76:aa:68:10:3d:fc:d3:12:ea:50:ec:47:93:
         81:cd:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:18 2026 by rpki-client