Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File:                     fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier:          S8qEkBfdwpybeI1i6yu7xLmREEzTVDA/k+B9iyZe25U=
Subject key identifier:   7A:E8:70:7F:85:4B:46:35:C0:03:A3:82:63:17:51:FB:90:BF:CC:28
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer:       /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial:       019D281687675AECA0859428DB22036485A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 03:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:58 +0000
Files and hashes:         1: VmznbVd9MfFy-le51-Dat5kq1h8.roa (hash: D7NpQBExPzq0VipR/3wFdXRjoX0wngBafprQmxoUvlI=)
                          2: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: UMausgc5ZQtuhZWOFAvZ5lVdYsloKWu4DncQYsm5Kw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:87:67:5a:ec:a0:85:94:28:db:22:03:64:85:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
        Validity
            Not Before: Mar 26 03:00:58 2026 GMT
            Not After : Mar 27 03:00:58 2026 GMT
        Subject: CN=7ae8707f854b4635c003a382631751fb90bfcc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:a4:9b:14:95:10:31:51:c2:e3:e1:3e:83:
                    19:f6:bb:67:ab:e8:f0:8f:e7:31:29:31:ef:39:32:
                    3c:e7:e3:6b:86:41:21:79:52:99:be:dd:fc:9e:07:
                    74:5b:ed:ed:ca:e9:3d:69:47:c6:3d:5b:0a:9d:d7:
                    d0:76:d9:90:7d:b6:6f:19:b3:d4:f2:f1:a7:cc:7c:
                    a6:bf:e3:a2:42:f5:07:2d:53:e3:b3:c9:92:75:d1:
                    ec:88:e4:59:f1:50:88:3c:79:f5:fb:86:6b:26:ea:
                    ff:7d:6e:c7:32:33:00:b9:3f:8e:a7:a3:d8:04:b2:
                    d1:56:48:5b:e2:f9:40:5b:40:f1:93:e9:94:57:91:
                    64:d7:a4:2b:3f:c7:3d:c8:8b:78:f8:8b:92:fc:c5:
                    c3:9a:a4:87:10:ab:86:a7:95:58:c8:aa:46:7c:4f:
                    60:46:cd:ff:47:a9:31:62:f9:c0:e2:2a:9b:eb:3d:
                    e9:e0:a2:3e:50:5b:0d:68:4d:f7:a7:54:33:dc:01:
                    88:36:0c:2c:fd:60:b6:1c:cb:f6:73:62:65:e0:35:
                    73:68:2c:13:98:4d:34:01:c6:f1:61:cb:6d:25:2f:
                    a6:b8:bc:2a:ff:af:ae:8f:e3:60:33:3f:46:52:84:
                    0f:9b:64:56:d4:d9:8d:f9:39:05:37:b7:52:7c:30:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E8:70:7F:85:4B:46:35:C0:03:A3:82:63:17:51:FB:90:BF:CC:28
            X509v3 Authority Key Identifier:
                keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:12:05:a2:1c:0a:79:d4:bb:41:02:1d:ca:11:66:05:8b:4f:
         04:13:90:7f:5b:36:ae:42:64:c7:b1:33:5d:bf:e6:89:93:06:
         0d:7c:89:d7:38:c1:a0:45:74:2b:a2:16:aa:68:65:8e:88:5e:
         09:3f:3c:27:57:82:96:fa:01:9e:d7:56:2e:46:f8:21:b4:db:
         48:4c:bc:00:ff:57:2d:84:c2:12:e1:a0:b4:7b:8b:45:2c:c3:
         eb:89:3d:41:9f:89:35:50:1b:d8:3a:cb:9a:cc:93:35:e9:d3:
         9f:8f:2a:8c:bd:b4:3b:65:7e:2a:0f:90:11:62:7c:71:ba:e4:
         9e:0f:06:11:9f:21:cf:f2:9c:b5:a0:d1:6d:e9:53:e7:c7:3b:
         24:ff:98:78:f3:3c:2b:6b:79:36:b1:ba:cd:52:22:83:c0:c4:
         67:22:21:ee:f6:fd:a6:3a:34:aa:85:9d:f8:a6:2c:5e:26:92:
         60:28:9c:0c:cf:f2:eb:34:87:b3:9d:5f:04:a8:de:a3:be:09:
         e1:2d:42:ad:8f:71:63:e1:99:42:70:49:82:40:74:8f:9a:bc:
         fe:66:dd:b6:7f:39:7b:f7:f7:54:f1:df:f8:13:95:49:b6:2f:
         88:f9:78:a3:f9:9f:c2:e6:9f:4d:97:a8:b6:ed:80:62:32:5a:
         0b:80:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:31 2026 by rpki-client