Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          /pzNYI2l3qL/A/OMCo20e9UYc8S5pfedgU9JNorqDLc=
Subject key identifier:   4A:CF:9A:EE:3E:84:36:5F:D3:57:5E:08:68:5C:88:65:6D:46:12:91
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019D265FBA967DEB4031609B35F0522BD4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          1597
Signing time:             Wed 25 Mar 2026 19:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:40 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: IDhxNSu0I509C18JjL1WuWDeC+AT34/KFErOK2J189c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ba:96:7d:eb:40:31:60:9b:35:f0:52:2b:d4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Mar 25 19:01:40 2026 GMT
            Not After : Mar 26 19:01:40 2026 GMT
        Subject: CN=4acf9aee3e84365fd3575e08685c88656d461291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:e5:2a:01:dc:66:61:e1:37:8f:50:1e:f1:
                    0e:9e:ad:d0:fb:83:6f:d2:ba:26:c6:b7:4f:ed:e4:
                    00:1c:18:28:f7:07:23:b7:af:01:b0:d6:c4:eb:2c:
                    b2:b0:6b:25:29:aa:f0:1d:5a:18:c6:96:ec:07:96:
                    af:21:32:3d:d8:92:a2:47:c4:3c:e4:13:90:a5:76:
                    02:5c:04:7b:68:e2:62:23:67:fa:fb:0e:bc:28:39:
                    18:cc:95:6e:fa:4e:f5:38:45:84:39:2e:94:d2:2c:
                    53:c0:a0:9b:ad:50:e0:20:63:91:0b:ff:d8:d0:ef:
                    5d:d4:8f:a5:8b:44:53:f2:48:c4:23:6c:8d:8f:dd:
                    e2:80:32:ef:2d:6d:36:12:a1:ef:39:dc:54:28:28:
                    d9:28:84:be:18:10:5e:7a:43:cd:3c:72:74:76:72:
                    78:69:5b:10:aa:50:09:05:9e:85:41:98:a2:78:bd:
                    ab:64:b3:b8:79:0b:bd:e3:dc:2c:af:13:33:17:18:
                    d5:7f:d8:36:81:d1:9c:ce:40:a6:a1:f4:99:b3:47:
                    8f:82:90:ce:fd:01:02:b2:55:0b:9c:62:5d:8d:f9:
                    95:8e:dc:a6:52:d7:9d:22:60:64:ab:90:bf:d3:73:
                    94:8d:36:9a:f9:8e:8d:2a:00:3c:4d:ca:07:15:3e:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:9A:EE:3E:84:36:5F:D3:57:5E:08:68:5C:88:65:6D:46:12:91
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:40:28:03:73:74:2e:2d:69:aa:6f:21:ae:ee:2c:99:82:82:
         e9:49:28:43:6e:62:2a:9d:8b:a9:43:23:af:93:a5:6a:e0:b7:
         3f:c7:08:6b:3f:a4:ab:31:a2:38:b1:15:04:8c:f5:cd:3a:b4:
         12:a4:a0:2e:05:5a:f8:4a:8f:e0:4e:b8:70:94:6a:3e:d1:ac:
         56:1b:3c:e5:3d:a1:17:e8:24:89:39:ed:92:49:71:09:3b:0c:
         c0:5c:9d:0f:a8:f5:e7:b5:25:72:a9:a4:63:05:a6:9d:18:2b:
         25:87:fc:f6:44:c1:00:9a:f0:41:d6:2d:49:06:ae:0b:01:41:
         36:ed:c6:8d:f2:52:37:25:a4:d4:2e:b9:59:a0:7a:5a:28:cb:
         bb:0b:0b:08:67:1e:df:6f:8f:09:a4:18:af:37:fc:e4:7e:3e:
         02:60:ec:78:8a:ac:2d:c2:c4:7c:ad:ab:39:16:bd:dd:bd:21:
         d6:60:ed:5f:06:be:ca:58:a9:da:ca:b1:08:53:c3:48:a0:b1:
         69:c7:d5:eb:a1:00:28:d9:e7:1b:09:fb:e9:13:ca:ee:37:96:
         3f:cf:31:05:de:cf:89:9f:49:88:af:09:d6:01:c8:02:cf:ef:
         87:fa:6a:7b:4a:ea:38:7e:78:81:c1:10:91:99:a4:b5:fa:3f:
         8d:96:b9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7qWfetAMWCbNfBSK9S6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4
NzdiNmYwHhcNMjYwMzI1MTkwMTQwWhcNMjYwMzI2MTkwMTQwWjAzMTEwLwYDVQQD
Eyg0YWNmOWFlZTNlODQzNjVmZDM1NzVlMDg2ODVjODg2NTZkNDYxMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKPlKgHcZmHhN49QHvEOnq3Q+4Nv
0romxrdP7eQAHBgo9wcjt68BsNbE6yyysGslKarwHVoYxpbsB5avITI92JKiR8Q8
5BOQpXYCXAR7aOJiI2f6+w68KDkYzJVu+k71OEWEOS6U0ixTwKCbrVDgIGORC//Y
0O9d1I+li0RT8kjEI2yNj93igDLvLW02EqHvOdxUKCjZKIS+GBBeekPNPHJ0dnJ4
aVsQqlAJBZ6FQZiieL2rZLO4eQu949wsrxMzFxjVf9g2gdGczkCmofSZs0ePgpDO
/QECslULnGJdjfmVjtymUtedImBkq5C/03OUjTaa+Y6NKgA8TcoHFT6+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErPmu4+hDZf01deCGhciGVtRhKRMB8GA1UdIwQY
MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt
YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx
LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkAoA3N0
Li1pqm8hru4smYKC6UkoQ25iKp2LqUMjr5OlauC3P8cIaz+kqzGiOLEVBIz1zTq0
EqSgLgVa+EqP4E64cJRqPtGsVhs85T2hF+gkiTntkklxCTsMwFydD6j157Ulcqmk
YwWmnRgrJYf89kTBAJrwQdYtSQauCwFBNu3GjfJSNyWk1C65WaB6WijLuwsLCGce
32+PCaQYrzf85H4+AmDseIqsLcLEfK2rORa93b0h1mDtXwa+ylip2sqxCFPDSKCx
acfV66EAKNnnGwn76RPK7jeWP88xBd7PiZ9JiK8J1gHIAs/vh/pqe0rqOH54gcEQ
kZmktfo/jZa5CQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:36 2026 by rpki-client