Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File:                     dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier:          PHB+CnTkonU4SstdeQv/mYzxdnY2zI5MiuobJikWSdk=
Subject key identifier:   6A:D5:99:2F:6E:5B:BD:D3:C3:F5:71:97:9A:FB:4F:50:03:14:15:FF
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer:       /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial:       019D2A04EF6DB74DB5FCE50B2947E73C5408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 12:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:59 +0000
Files and hashes:         1: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: AMGcpr/aNB0BvlgPX9Eet/1AahP2BpuZev/OzWp3JrQ=)
                          2: wpBz1cZtdv79Ar3akf9GaInWtzg.roa (hash: ite+6yHL6pp97dJQxSW2RVfxFWR32C053YIMvKgrigM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:ef:6d:b7:4d:b5:fc:e5:0b:29:47:e7:3c:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
        Validity
            Not Before: Mar 26 12:00:59 2026 GMT
            Not After : Mar 27 12:00:59 2026 GMT
        Subject: CN=6ad5992f6e5bbdd3c3f571979afb4f50031415ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:eb:61:c1:12:9d:22:2b:4c:97:e7:88:fa:36:
                    24:03:77:16:21:c1:fd:89:1e:bb:44:a1:da:cc:58:
                    cf:bf:0d:c4:6a:3f:92:0f:c5:35:4a:25:32:c0:dd:
                    54:31:ad:1b:c0:a7:82:2b:4a:0f:e7:86:d8:63:f3:
                    14:85:70:04:99:66:c8:d4:09:e3:b8:91:40:f6:13:
                    3a:77:38:64:be:80:2d:aa:f7:7f:70:3c:f2:c4:ed:
                    62:f4:7e:82:17:cb:53:5f:2f:e3:0c:69:89:26:be:
                    26:7e:95:29:3d:48:87:76:ce:a2:7d:f7:f9:aa:1e:
                    dc:1c:93:6e:de:2d:40:d1:ca:59:1e:09:79:d6:4c:
                    77:b1:b0:b7:32:e3:4c:6e:24:f4:1e:18:08:65:99:
                    ef:69:16:06:af:b8:bf:96:49:bf:81:be:02:9f:91:
                    68:a8:e8:f7:f4:74:31:78:3f:b2:ca:59:d0:aa:db:
                    32:ef:c5:b3:8b:6d:e5:8b:ba:7f:8c:c7:9e:1c:7f:
                    d4:cd:4b:6e:55:c6:40:d9:67:24:73:67:d1:6d:ea:
                    42:b9:51:66:d9:fc:0e:f1:31:07:3d:6f:59:88:2e:
                    36:97:66:b4:ea:48:bc:88:dd:3f:a3:c3:2c:ae:0a:
                    ef:f4:82:40:bd:fa:66:91:b5:1e:89:fb:45:20:01:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:99:2F:6E:5B:BD:D3:C3:F5:71:97:9A:FB:4F:50:03:14:15:FF
            X509v3 Authority Key Identifier:
                keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:58:9b:06:71:a1:61:eb:44:5a:f8:c2:61:5c:51:3b:8d:a6:
         70:54:de:e6:47:37:5a:1e:75:f9:bb:e2:48:0d:6f:84:f9:bc:
         a9:af:19:f1:a5:86:8e:1f:fe:0a:7e:52:bf:ab:c1:9c:6a:9e:
         88:a6:4f:ad:fe:df:bd:6f:7a:b1:2f:6c:e8:bb:41:16:c0:78:
         65:d7:7a:6b:c8:63:b7:64:82:9d:5f:65:30:0c:f0:3f:c7:eb:
         ab:55:7a:ec:6d:d5:f3:b8:30:4e:86:7f:8d:72:e9:00:fe:01:
         a7:3b:cf:f8:b4:f8:1c:b5:2f:80:e9:90:bb:ca:eb:78:60:b2:
         21:f9:15:17:9f:ee:1e:2d:49:17:c7:25:ce:8a:eb:84:ef:59:
         f9:3d:ed:66:68:8b:95:2a:23:6c:3c:86:2e:ae:9b:e5:d0:ca:
         ec:d7:f7:59:4b:3b:ed:c7:2a:46:06:92:b3:22:43:0c:c0:07:
         25:d8:7d:a9:d1:86:d7:62:2e:76:eb:53:66:64:61:5f:51:4f:
         a9:95:5c:3f:c7:f0:ac:6a:01:f9:96:a0:7a:d6:83:60:3f:74:
         4a:da:93:2f:58:7a:cf:33:eb:fb:0d:7b:6a:5a:80:e8:26:68:
         91:c8:06:2e:8b:22:4c:3c:ba:ea:82:3c:13:d5:91:58:49:1f:
         dd:ff:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:55 2026 by rpki-client