Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          iaVSJXHf9nxaBMC7AmMy3rW6c8NBq8M6qjEuH68F+uM=
Subject key identifier:   6E:25:7D:0F:2E:26:06:E0:59:C4:59:EF:16:6B:AC:F6:54:54:9E:25
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       019D2A3B8524B3D5AAC14110BFE32572C2EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 13:00:36 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:36 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:36 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: wdtI0OaGq8fIxLIHxOdjbWEXD4EWci9zvtCwCRmrtdg=)
                          2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
                          3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:85:24:b3:d5:aa:c1:41:10:bf:e3:25:72:c2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Mar 26 13:00:36 2026 GMT
            Not After : Mar 27 13:00:36 2026 GMT
        Subject: CN=6e257d0f2e2606e059c459ef166bacf654549e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:42:f6:ab:a5:dc:3e:c5:b0:91:46:3a:79:
                    d9:8f:69:0e:88:cd:2d:63:ac:75:39:28:e2:a5:ae:
                    0a:97:36:ea:86:6e:dc:d7:44:01:96:fb:20:0c:ee:
                    f0:fc:e8:b2:da:73:49:8b:80:79:06:fc:95:26:2a:
                    28:68:ca:f9:84:65:71:6b:7b:bb:b9:64:6b:3f:73:
                    1c:02:4c:6b:cf:d6:be:10:60:f6:ad:f0:91:a1:6e:
                    c6:ac:38:6d:92:db:d1:eb:57:a3:08:57:54:86:1f:
                    7c:8e:c0:67:f5:ea:35:40:af:e0:5e:f9:32:6b:77:
                    2e:bd:5c:87:df:e8:10:9e:66:3e:90:d7:55:1b:f5:
                    3a:fb:62:10:12:54:e0:75:37:59:00:8c:ef:5c:74:
                    0b:68:20:78:03:a1:e1:19:de:cb:13:3b:f2:51:cb:
                    3e:a2:1f:96:5f:77:c0:d4:c4:48:fb:79:8b:89:18:
                    59:e5:2f:e5:5f:94:35:57:32:5d:bf:1c:11:0f:db:
                    1c:f7:be:d7:0f:0a:13:d5:1a:b3:e5:63:8b:5f:70:
                    49:e7:63:d9:0e:8d:dd:bd:0b:12:4a:20:f5:7f:34:
                    8f:3b:71:83:00:41:81:1e:87:f3:1e:11:ab:81:55:
                    76:a2:56:88:38:1d:5f:ee:a6:96:ae:d6:82:50:06:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:25:7D:0F:2E:26:06:E0:59:C4:59:EF:16:6B:AC:F6:54:54:9E:25
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:48:35:ba:7b:3f:ff:0c:f7:5f:a0:7c:a5:78:f5:5d:4d:
         b3:d3:9c:cd:15:f8:1e:09:75:24:42:35:cd:e8:ff:95:df:66:
         83:98:03:f7:1e:f2:cd:99:f6:e7:ea:41:c5:a2:5b:5b:92:51:
         38:e2:6a:39:18:13:1f:a8:72:17:22:6f:a4:93:8f:54:77:0f:
         39:c0:f1:41:82:eb:50:8d:e2:00:4e:82:80:63:4e:cd:29:66:
         86:5d:7c:13:e6:9c:20:bc:b3:e1:dc:01:d1:50:22:16:29:1a:
         00:52:c3:8a:3e:9c:bb:2c:a1:5c:15:96:31:d3:4d:34:78:2c:
         59:29:14:d0:8d:1f:04:d1:76:0e:7b:ca:74:8e:17:d4:d7:fa:
         f8:eb:60:18:21:ff:52:44:38:fc:8b:6c:b8:c9:33:db:19:a9:
         c5:d9:e1:37:b2:21:1a:5b:54:5b:c1:fd:87:07:f8:2f:b7:b1:
         84:69:38:17:c1:9f:33:d4:a9:33:75:51:7c:e5:cc:d6:a1:cf:
         44:c0:65:9e:2b:65:69:7b:a0:ea:f5:6e:7f:ae:a0:58:22:8c:
         66:65:40:0f:9f:d6:29:cb:1a:45:3e:90:ec:33:39:91:0b:66:
         6d:9e:f3:ed:e2:94:48:65:ec:fe:54:99:72:8e:22:d1:e8:c6:
         7c:e4:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:43 2026 by rpki-client