Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          TezSbRoiIRjlh6d9sUV7QEVr+nWJUyWRvCVGfDOK8Zw=
Subject key identifier:   D3:4D:56:C8:14:66:30:FA:BF:25:5E:C0:A3:B8:0B:0E:95:36:D8:F6
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       019D27049CA94DECDE8ACEC72811588D86FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          078E
Signing time:             Wed 25 Mar 2026 22:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:46 +0000
Files and hashes:         1: HdtIM72Je6eID2UflpjXv9hX0Fg.roa (hash: c++PW514MuKO6i2Ca50xS+brdGSlfDfubR4SvsYDiXQ=)
                          2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: IZSGX5nZCfvX3Zm79WEor6Z32glRsoPRfRSUJ/WFU/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9c:a9:4d:ec:de:8a:ce:c7:28:11:58:8d:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Mar 25 22:01:46 2026 GMT
            Not After : Mar 26 22:01:46 2026 GMT
        Subject: CN=d34d56c8146630fabf255ec0a3b80b0e9536d8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:34:23:2a:e2:6d:33:82:40:fb:be:d7:d3:
                    56:ea:e8:63:b3:f7:61:04:79:d5:57:7d:24:6f:0b:
                    2c:6b:44:52:6b:c7:11:97:e9:6f:6d:7e:e9:48:71:
                    2e:ab:32:13:c2:df:63:7c:4a:f4:2b:14:db:34:29:
                    31:f8:9d:a2:a2:a3:43:d7:dd:18:67:f2:6e:f8:0d:
                    a5:3b:53:91:f1:15:5d:7c:25:07:d6:79:79:73:da:
                    5e:9f:d3:42:fb:95:c7:b7:74:87:13:0d:e3:08:ca:
                    a7:83:e1:5e:c4:49:f6:1b:30:63:b3:41:12:9c:f9:
                    5f:d9:22:80:33:74:97:bb:5b:0c:31:50:8a:61:34:
                    37:d0:8f:e4:e6:75:db:3f:d2:2d:9d:b7:4e:16:3d:
                    63:7d:50:6c:6a:84:b7:b7:a0:e1:1a:c5:ce:25:66:
                    b7:73:f2:83:ea:b1:a6:03:a6:f8:76:73:66:91:83:
                    04:df:f0:ae:7d:1a:89:36:81:bb:5c:1d:42:a5:ad:
                    75:6e:46:a2:56:51:67:41:6c:3a:b2:be:e1:25:d7:
                    00:a5:49:00:28:30:6c:ad:20:51:c5:60:ab:e8:31:
                    4a:91:e8:ff:92:39:f1:72:21:be:96:aa:4e:f8:d0:
                    32:12:5c:26:41:7a:fb:58:60:02:07:99:b9:35:73:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:56:C8:14:66:30:FA:BF:25:5E:C0:A3:B8:0B:0E:95:36:D8:F6
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:d0:4e:42:f8:b4:c2:35:31:81:62:fd:79:5f:50:f0:35:
         ef:0a:a4:15:ac:80:81:e4:31:73:4b:b1:ea:41:ec:4c:be:97:
         9b:3e:f6:8c:2a:eb:69:25:39:8a:91:ca:80:94:55:b4:f6:ae:
         58:b3:08:72:45:a7:b9:d9:e8:23:f3:02:9b:30:fb:12:d3:7c:
         51:4b:e0:41:34:a2:aa:c5:4d:1d:b9:71:09:f8:37:27:e4:2d:
         04:91:06:c5:03:74:18:09:3b:3f:45:52:c5:10:33:10:f0:13:
         2f:0b:54:43:42:d4:8e:40:dd:62:7c:06:0b:37:43:16:f8:7c:
         16:b2:1b:ad:29:93:98:2d:2a:87:1e:8b:4a:6f:71:b8:23:e6:
         b2:ac:1e:e5:9c:58:01:e0:26:d7:e7:24:3a:a9:5c:d3:db:4a:
         dc:56:e2:8f:28:26:b5:54:3b:89:41:7d:ec:7d:72:02:e2:08:
         27:1c:39:d1:1a:97:b3:7f:1e:87:bb:12:42:d4:d3:0c:05:40:
         2b:76:c1:f2:b2:50:9c:00:5f:10:ce:07:eb:38:4d:79:30:f6:
         9a:cf:14:ec:a1:00:8f:14:d1:e5:3a:c5:d9:02:04:ef:87:99:
         e5:83:cf:4f:1e:63:be:43:f1:0c:b6:46:98:c7:4a:d0:9e:30:
         fe:80:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:46 2026 by rpki-client