Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
File:                     7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft (raw, json)
Hash identifier:          FYcyGze6oR0mx0X5fEjKDKlm4piYKQ3qH5COTv1wUC4=
Subject key identifier:   A7:BA:1B:CE:F3:0A:0A:8D:92:CA:8C:E6:F0:5B:35:0A:8B:FE:88:5B
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Certificate issuer:       /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial:       019D25F207C5BDD899FF497131C18FEFE6D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
Manifest number:          17E1
Signing time:             Wed 25 Mar 2026 17:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:51 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:51 +0000
Files and hashes:         1: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl (hash: OOntQ9HdCRIFEQapvfQOPV636KkH3gUYkMyqMU3QV1I=)
                          2: 7O0-WQodmjjGVUBOxW6Jvd4Ww7I.roa (hash: DsSc/REu21MuM1a9JQHPgAHIAE36g5CaUqClp3hJ+dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f2:07:c5:bd:d8:99:ff:49:71:31:c1:8f:ef:e6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
        Validity
            Not Before: Mar 25 17:01:51 2026 GMT
            Not After : Mar 26 17:01:51 2026 GMT
        Subject: CN=a7ba1bcef30a0a8d92ca8ce6f05b350a8bfe885b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:b9:17:cb:1c:a8:40:62:b7:e8:d4:fe:46:
                    ec:27:f7:80:3e:d7:64:c6:24:dc:94:72:bd:be:32:
                    a4:5e:c4:e4:20:57:8e:c7:d3:76:1f:d4:b6:9e:bf:
                    bb:04:a4:2d:82:7e:24:33:b3:44:87:04:f5:92:43:
                    a9:4a:df:03:3b:fa:d2:b4:47:3c:fc:62:6d:63:bf:
                    d2:40:fb:61:93:5b:bf:d4:49:c3:a4:68:62:7a:66:
                    0d:68:07:e5:13:d1:5d:ff:d7:36:e0:2e:d5:9a:32:
                    df:05:6b:88:4d:e9:7f:79:da:e9:07:30:5a:42:7b:
                    12:25:28:5c:d1:de:e6:2a:73:6c:15:17:60:e0:1d:
                    f7:12:c2:75:1b:02:52:34:8f:2b:f6:39:d5:11:4e:
                    74:4c:ab:6c:7c:8a:29:32:03:32:91:7a:b0:3c:b8:
                    d0:ba:53:04:3d:28:9a:bb:d5:b3:ea:78:a6:6b:90:
                    6d:f0:2c:c8:58:d8:16:c0:f0:26:3f:59:d2:09:b3:
                    7a:ce:bc:6d:ac:a3:2e:7d:fa:45:05:5a:7f:c4:46:
                    06:05:00:b3:82:48:7c:1a:1b:3b:76:a4:2b:e4:9c:
                    e0:99:68:fc:04:f3:d2:9c:a8:03:41:16:2d:02:ea:
                    c7:45:12:d2:43:d0:d4:3f:e8:9e:f5:bf:87:fe:a3:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:1B:CE:F3:0A:0A:8D:92:CA:8C:E6:F0:5B:35:0A:8B:FE:88:5B
            X509v3 Authority Key Identifier:
                keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:2e:87:2b:ee:7a:fb:7b:72:a1:a7:75:3a:00:45:49:63:
         43:36:b7:37:b5:5a:f8:41:70:33:d2:64:ee:c8:b3:7a:c2:7b:
         02:af:a9:a7:8d:2c:75:19:a3:eb:17:00:ea:a5:aa:da:2d:f6:
         71:75:b0:a7:9e:98:5c:90:0e:ef:5a:1d:a7:73:5a:3d:6f:1d:
         24:9d:75:80:b2:19:2f:aa:cc:ed:17:e4:3c:24:61:b4:a6:c1:
         67:3f:a1:73:a4:9c:52:77:a4:6c:77:19:36:94:ab:7c:07:e3:
         9d:e9:5b:7c:29:6e:c9:a4:7e:05:ec:49:ab:75:e3:44:fc:9d:
         50:ba:c3:01:60:ac:cd:9b:d3:66:d3:d2:03:44:6a:ff:42:f9:
         81:4a:9a:09:f3:26:bf:9e:5b:6c:cf:f7:ed:02:80:14:86:0b:
         73:ab:88:5a:93:98:0d:fa:13:1b:80:69:1e:5d:26:5f:77:00:
         52:c3:14:64:04:6f:45:10:ec:ce:af:22:fd:b4:b4:7f:98:80:
         16:e0:78:2f:d7:c9:57:54:37:5e:35:77:49:2b:c9:2b:f9:b7:
         b1:c4:32:fd:37:66:46:d8:1d:6a:01:ee:1e:e0:b6:c3:8a:91:
         00:c2:e5:54:a3:5e:32:a3:bb:dd:d2:a4:73:9c:7f:b9:cb:53:
         6b:9a:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:06 2026 by rpki-client