Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
File:                     t-2iAv8dfzUSexHeodUPNn6i6Zo.mft (raw, json)
Hash identifier:          539Ej2pn1dKcAqTm7ZmxWf/l6gk5pv4Kif1U4hze8ec=
Subject key identifier:   2D:D5:FF:92:99:3B:88:69:6C:3A:AD:76:BA:12:51:48:3B:23:4C:DE
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Certificate issuer:       /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial:       019D382E0E9E9841675F1DC5E4AFEEF2510C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
Manifest number:          C7
Signing time:             Sun 29 Mar 2026 06:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:35 +0000
Files and hashes:         1: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (hash: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=)
                          2: t-2iAv8dfzUSexHeodUPNn6i6Zo.crl (hash: PiNem+idlOdzk5g4v/AuCHMOAfPfen8lLrvQI4NvpbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:0e:9e:98:41:67:5f:1d:c5:e4:af:ee:f2:51:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
        Validity
            Not Before: Mar 29 06:00:35 2026 GMT
            Not After : Mar 30 06:00:35 2026 GMT
        Subject: CN=2dd5ff92993b88696c3aad76ba1251483b234cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:b6:c9:03:47:b8:8f:dd:18:79:63:d7:09:
                    d2:8f:07:8b:e7:51:a5:ae:b0:83:83:69:81:2c:76:
                    57:50:b6:26:45:96:7c:8e:4b:59:58:08:45:c6:a8:
                    93:ad:3b:fd:03:fa:11:0b:0a:61:bc:bf:0c:1b:5a:
                    e8:45:e8:dd:2b:01:cd:77:18:a0:c1:8c:7a:bf:e8:
                    5b:a7:c6:40:4b:73:0f:1b:64:75:fe:2b:18:ad:8e:
                    63:ba:13:54:a9:81:75:89:b6:73:cb:78:5f:f8:1b:
                    9a:60:26:d3:f1:11:72:26:26:58:5e:2a:3d:1a:b0:
                    1a:04:2c:31:2d:05:0f:83:ac:ad:7f:fc:16:74:db:
                    06:f5:87:33:f0:e9:01:44:3a:6c:22:42:09:17:bd:
                    dc:fa:b3:b8:d4:69:40:2e:0e:c2:a2:88:ff:6a:1a:
                    a4:1d:c0:28:90:3d:09:9e:07:9d:bc:5e:d6:fc:a8:
                    94:08:0e:2d:e7:88:a0:79:57:e8:e6:3b:ff:62:f0:
                    bb:6f:b0:1f:d5:b8:2a:0e:6d:27:48:b8:f0:56:a4:
                    40:96:67:2d:90:64:43:ee:b3:98:24:da:2a:ad:5d:
                    f6:36:5c:1a:c9:8d:d1:ca:4a:3b:41:21:cd:60:9b:
                    11:e8:5a:d4:46:5c:52:af:8c:75:3f:96:6e:9f:fb:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D5:FF:92:99:3B:88:69:6C:3A:AD:76:BA:12:51:48:3B:23:4C:DE
            X509v3 Authority Key Identifier:
                keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:17:90:08:c0:67:41:8e:5e:5c:49:27:0e:5e:14:41:b6:2b:
         22:f4:29:a6:77:af:b4:4c:ec:92:fd:cb:3a:7f:54:93:da:af:
         41:6a:8a:2e:a3:7f:51:98:bd:c0:c7:f3:82:9a:e2:ae:d2:68:
         56:5f:2c:aa:5f:2d:04:c1:a0:ed:cb:84:18:df:db:6b:18:29:
         07:1f:93:db:b7:1b:4a:59:58:70:3b:e0:e9:b2:20:a0:5a:eb:
         8c:a8:27:cd:91:c9:43:92:af:92:fa:3f:76:a1:9d:bd:96:24:
         2c:4b:46:4b:0b:32:ab:c1:be:51:0e:62:cb:c7:2e:7e:ff:bb:
         73:10:a4:2e:b4:3e:24:fa:c4:32:31:0b:dc:73:0a:74:3e:a2:
         60:db:e8:d4:51:ec:27:db:ae:b6:95:b7:60:6e:92:fd:ac:a8:
         4a:b7:9a:8a:a8:b8:35:65:12:b7:50:28:e0:3b:3c:d5:75:30:
         03:2a:9c:71:04:9b:ad:f6:6d:ec:98:9a:e8:8b:d6:74:72:b4:
         e9:9a:2a:97:a0:4a:7e:91:02:df:e2:0c:9e:a5:e1:a0:54:80:
         ce:52:ca:d4:e8:0c:ad:7f:f8:b1:79:f0:d9:4c:80:9f:7b:9a:
         2b:27:47:4a:23:a5:78:05:39:c8:a4:0f:cb:e1:5e:5d:d4:ed:
         79:07:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:31 2026 by rpki-client