Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File:                     G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier:          t15HYagUaRuimO0LzZ5fbeyFE3Rjq+v1IFEKT0NVSFQ=
Subject key identifier:   74:5F:2C:3A:E5:12:ED:5C:1F:44:5E:95:09:22:93:88:A9:B6:A7:0A
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer:       /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial:       019D382E4AEB58221E6488D1C2C05D0BC56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 06:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:51 +0000
Files and hashes:         1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: xRxcggu7iEV200vsZPWpNiECLhnbPHMoCfas/7Fufew=)
                          2: deE75SevBPoLBBV-kYApKEjzkBY.roa (hash: iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:4a:eb:58:22:1e:64:88:d1:c2:c0:5d:0b:c5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
        Validity
            Not Before: Mar 29 06:00:51 2026 GMT
            Not After : Mar 30 06:00:51 2026 GMT
        Subject: CN=745f2c3ae512ed5c1f445e9509229388a9b6a70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:17:5c:74:61:e9:4b:46:e1:f8:b5:09:ef:
                    8b:c8:03:16:38:8b:f6:e7:65:f0:84:42:30:39:ae:
                    3e:43:eb:e4:11:f8:d6:9c:b5:d1:5a:91:ed:7e:f1:
                    aa:e3:d8:39:ae:2e:b3:ce:3f:4c:e8:e3:88:6d:b5:
                    c9:a7:6f:86:ae:98:00:89:ee:78:2e:57:f3:f3:fa:
                    6d:86:a1:2e:64:f8:01:4b:ba:84:0d:68:d0:07:d2:
                    3a:a2:76:b8:5e:51:9b:c2:76:fc:37:72:cd:8c:a1:
                    1b:eb:b4:97:57:5d:88:6d:41:f4:1f:7f:03:96:64:
                    0d:49:7b:af:23:10:53:5f:c9:0c:fe:59:47:3e:c7:
                    28:45:25:7f:b9:ab:b6:62:ef:a9:9b:74:79:75:8b:
                    af:3c:6e:5b:41:cf:57:5d:b4:1c:1d:da:f5:a3:c3:
                    32:59:64:ee:b4:48:81:f0:cb:04:56:6e:6f:19:76:
                    5d:63:d4:cc:77:ee:1b:c1:d8:05:66:72:ad:28:a2:
                    bf:93:9c:08:1b:ee:95:d4:a8:dc:f7:36:63:ea:2a:
                    2d:a0:af:22:ad:6d:f9:00:fb:70:9f:e1:b2:08:fc:
                    48:c5:4d:3a:de:09:cd:30:f9:4b:f9:d4:51:cc:bf:
                    b0:7f:09:75:0e:3e:39:2b:a0:0d:0b:d7:15:30:8d:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:2C:3A:E5:12:ED:5C:1F:44:5E:95:09:22:93:88:A9:B6:A7:0A
            X509v3 Authority Key Identifier:
                keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:50:82:27:31:1f:37:2a:cf:44:f0:f1:21:0e:ac:74:6f:9d:
         45:9b:42:96:9e:6e:8f:a1:1e:cf:97:3b:1f:c0:3c:b2:59:98:
         e9:54:14:d4:f4:03:2c:d1:08:20:b8:32:95:18:62:12:31:77:
         d1:3b:ac:44:13:ac:b4:bf:af:a1:cc:2c:2f:dc:30:26:c6:77:
         ea:57:a2:27:5a:84:26:70:cc:50:b6:6c:12:73:a6:42:61:71:
         be:41:a2:c4:14:cc:b8:d3:3e:6e:7e:8d:34:9f:9d:da:7b:b2:
         d6:b3:fe:b5:16:3a:d8:06:4f:61:0d:68:56:64:61:97:6d:ff:
         17:1f:85:26:79:c6:c1:7f:31:25:c0:0c:34:31:8a:83:e9:73:
         cc:ee:fd:ca:91:78:9b:bc:37:ce:2e:be:a7:be:c1:74:5b:63:
         44:fe:e4:ea:bb:25:71:97:c8:3b:27:d6:ee:5e:6c:cc:38:c8:
         2e:87:42:cf:b0:f9:90:04:0c:bc:35:37:ae:3b:81:e0:87:8b:
         d8:73:7a:3e:dc:35:78:6e:f4:30:89:9b:49:e4:5e:15:6c:da:
         bb:a3:c2:0d:4e:2a:5a:80:45:bf:f8:07:a1:2a:da:a4:49:a9:
         fe:90:93:22:66:6a:ea:de:22:65:6e:87:f1:0f:86:80:09:6b:
         67:a1:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:34 2026 by rpki-client