Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
File:                     _eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft (raw, json)
Hash identifier:          UNxPPaPUsw5EuKbr6luvb8TGSTP67jq63NUk+LoRgUc=
Subject key identifier:   77:81:C7:32:45:1A:5C:E4:51:37:05:4E:DD:D3:DD:50:4F:3C:D2:19
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Certificate issuer:       /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial:       019D3A53A8C20FB1EE98F674703E518F00AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 16:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:54 +0000
Files and hashes:         1: _eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl (hash: z8lJ1gqw84tfN6t+8ENYX8kxkQSOJbuJXTSpcNk9dhs=)
                          2: on30vP_7lhEk_ANI-hC7N7ncjQc.roa (hash: IwqyrOOuo/a85bmmWLflGufy3ZaNAVPI0XCwr1Nb6qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:a8:c2:0f:b1:ee:98:f6:74:70:3e:51:8f:00:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
        Validity
            Not Before: Mar 29 16:00:54 2026 GMT
            Not After : Mar 30 16:00:54 2026 GMT
        Subject: CN=7781c732451a5ce45137054eddd3dd504f3cd219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:82:15:08:cd:c9:ca:18:93:69:b9:40:cc:92:
                    66:6a:61:d0:f2:a7:67:94:a6:a7:c5:09:80:73:7c:
                    ef:69:84:e4:12:15:7f:c9:f1:a9:ac:8e:45:3b:18:
                    c7:a7:78:b6:8f:08:85:36:fa:75:c7:ce:07:d9:ff:
                    c1:9c:f8:0c:cc:d3:a8:c5:52:cd:8a:cb:ad:b8:cc:
                    41:05:4e:5f:64:44:1a:90:1d:f9:ff:09:93:c9:0e:
                    f9:e7:c1:d0:81:5e:b6:5c:0b:33:ae:00:fb:74:76:
                    a1:4e:45:3c:de:db:b1:d0:4b:15:59:58:cb:57:e3:
                    37:2f:97:70:e7:dd:50:82:40:b8:8e:bd:52:ea:02:
                    d2:70:a4:73:f0:f4:03:10:9f:33:2c:f8:f6:7d:d1:
                    20:4e:a1:ab:e1:07:12:23:46:a8:7c:3e:f7:14:30:
                    46:65:3f:7e:94:0a:8e:e0:dd:3d:11:7d:f2:d8:66:
                    77:fa:19:80:23:a6:bf:64:01:16:bd:85:87:dc:31:
                    d1:da:37:51:19:20:96:45:be:41:e9:75:8b:51:99:
                    b6:7f:bb:50:1b:ce:f3:4a:c4:15:35:3b:6e:a7:01:
                    90:be:a8:77:6d:af:77:b2:ba:fe:4e:07:f2:26:67:
                    13:be:d4:c6:29:d3:72:6b:ef:32:ab:67:d1:0d:2f:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:C7:32:45:1A:5C:E4:51:37:05:4E:DD:D3:DD:50:4F:3C:D2:19
            X509v3 Authority Key Identifier:
                keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:50:3a:c8:2a:91:a1:fe:5a:85:17:a2:38:e7:11:89:ca:
         52:53:b5:51:e4:fc:64:80:63:8e:e1:fe:6e:89:25:d1:65:65:
         52:bb:2b:76:86:45:50:fa:95:6c:8f:f0:fb:03:e7:cf:95:50:
         b8:14:c6:22:71:9e:38:90:12:74:f0:af:aa:13:80:6c:4e:bd:
         00:9b:e6:a9:3f:ef:76:c5:87:87:8e:5f:90:ca:7d:5a:74:61:
         14:cd:91:96:7a:c3:5f:16:5b:07:6f:c2:58:20:de:90:ad:1e:
         5b:09:2c:70:b9:aa:58:b2:1c:22:6d:44:b9:4e:d3:71:0b:4d:
         9b:91:63:59:a3:81:72:7e:e3:b2:a8:f4:03:1c:83:7f:5c:5f:
         c7:c3:43:dc:63:cf:40:4b:28:83:aa:7a:dd:3d:96:cd:c1:6f:
         fd:8b:5d:b4:86:5f:77:b7:6e:9a:ad:ec:2c:00:52:00:81:21:
         41:e1:c6:1b:2a:2d:10:90:fc:94:de:b0:f7:67:ba:45:c8:2e:
         04:dd:f7:0e:35:c1:15:c8:f2:de:57:bf:cb:c8:c4:02:83:53:
         89:64:9d:22:e0:62:d2:0c:28:68:64:3a:c7:70:72:ad:7f:0d:
         1b:50:c9:90:44:50:e3:cd:df:ae:bf:3f:02:56:c4:c1:0f:ec:
         06:97:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:18 2026 by rpki-client