Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          +uf0Za4RQ5FZ5e35nIJP/dnVBNbSFlpVNaHnh4Ss0xQ=
Subject key identifier:   9F:61:CE:F8:32:F4:FD:91:2E:60:32:34:D3:9C:E9:6B:D3:46:E3:1E
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       019D27DFD7B31AFB02EC8B6DFD0FDD7E48B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0E7B
Signing time:             Thu 26 Mar 2026 02:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:14 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: PhLGM353DrXSZsDxHWVeNYBcl5HWFBji16NXJFe6qKs=)
                          2: I3HAZf8rku9CbsUBC3F9P-EBYlg.roa (hash: Eycp5thHHdJu+vFCPvEGzpeSVr3x+pRAbitu/74D2KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:d7:b3:1a:fb:02:ec:8b:6d:fd:0f:dd:7e:48:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Mar 26 02:01:14 2026 GMT
            Not After : Mar 27 02:01:14 2026 GMT
        Subject: CN=9f61cef832f4fd912e603234d39ce96bd346e31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:cf:3a:f6:fd:f2:0f:e3:b7:98:97:64:f4:
                    8a:83:1b:88:66:24:23:eb:0b:35:08:83:c1:11:cc:
                    fa:13:b0:ce:d7:ec:2c:13:0b:41:40:e2:31:bc:a4:
                    7b:46:ad:38:36:d4:6f:01:6d:35:0e:16:63:fb:8c:
                    fe:b5:68:ec:92:4b:2a:e3:cc:a6:5b:57:38:84:2a:
                    08:1e:40:c3:ad:c9:61:b5:73:b8:a2:db:75:0b:bc:
                    de:29:7b:1b:9e:0b:b9:8b:35:a9:a3:01:5b:37:78:
                    72:f5:2c:c7:2d:cc:40:df:f2:60:b3:ed:0c:61:dc:
                    9f:db:f0:fe:f3:fd:b1:0f:bd:da:6f:03:41:f6:a3:
                    1e:68:b6:c9:ae:54:a9:ab:94:29:41:f6:80:cd:15:
                    35:a1:8e:5b:98:6b:f4:38:81:79:c8:b3:1d:6d:83:
                    8c:be:4b:b1:ff:a5:46:e0:8c:f4:e4:82:6f:7e:b0:
                    2d:db:e4:99:ca:c0:f7:c3:5a:9d:31:5c:ab:13:8b:
                    25:c0:ad:e4:3c:97:fb:99:dd:58:61:68:5d:82:5f:
                    1d:08:b6:02:85:1a:3c:32:3c:7e:60:b2:74:7b:71:
                    ba:58:eb:d1:b7:c7:0c:a1:eb:f4:d8:8b:2c:f9:a4:
                    5d:a9:9f:84:2a:55:de:46:00:8d:17:46:06:85:ea:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:CE:F8:32:F4:FD:91:2E:60:32:34:D3:9C:E9:6B:D3:46:E3:1E
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:2a:38:81:53:2e:90:ce:2e:35:ca:cc:a7:41:ae:54:43:
         5f:74:ea:1f:40:02:34:b5:01:65:ad:6e:ce:c2:4b:26:ca:a5:
         e5:24:9d:a1:fe:31:b2:0c:6d:c2:ea:d7:2c:71:74:63:9f:03:
         5b:9d:12:34:c4:c9:78:8a:3b:7a:83:0a:52:31:54:1f:f7:ed:
         9a:23:5b:f4:e8:d4:de:58:3a:49:d7:52:8e:fe:f4:4e:cc:d2:
         75:ca:cd:13:ed:d8:a3:2f:19:ff:c9:32:35:cf:46:f7:5d:fb:
         e0:ca:60:f2:06:2c:5d:4f:d9:0d:3a:bc:c9:b3:53:d8:16:0b:
         15:4e:e0:ce:e6:a4:f4:a1:f5:57:36:93:3e:f4:14:47:3f:39:
         70:21:6e:3c:dd:bb:6b:18:1a:ba:14:b1:07:dc:09:29:51:1b:
         bb:e0:86:1e:c0:37:06:09:36:35:5e:c9:ea:54:03:2c:96:fe:
         bc:02:55:f9:22:7d:e7:20:21:4c:e5:4d:43:4b:ad:a8:43:c7:
         28:58:dc:6b:83:4f:60:4c:2d:c5:8e:95:b2:d9:6f:8a:67:c7:
         fb:4c:13:f2:5e:35:ad:ad:72:c0:73:34:5f:3b:8c:cd:49:58:
         25:b6:79:ed:91:d5:52:9d:d5:f5:fa:b3:00:e4:9e:9a:7e:4b:
         9d:dc:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:36 2026 by rpki-client