Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          OHb7nqXiTj3ezlxiwS41WZNexKe7lt8AXe+QcEN/6nY=
Subject key identifier:   C6:88:93:47:06:55:0F:F2:0F:27:02:0A:25:03:16:52:0F:79:49:71
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       019D39416CC56DD527FAF254361B419D814B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          1410
Signing time:             Sun 29 Mar 2026 11:01:22 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:22 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:22 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: KhBQSkjlYaJzOHDVt3djnmnn1Wf53I9+mI+hqbWagmg=)
                          2: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (hash: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ=)
                          3: if86lxu5nlPzs7hkWMJDZ9tMh_c.roa (hash: ORNVkMFl7t2RmENsppqBUHYflyrOzGV65xG9bRC2Ckw=)
                          4: pbc4SdtODYEUzlwKQZU-lgRu770.roa (hash: Aa4AR2Tswo+VpEELO6t1/gEy+JGa3NESKeediOsubQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:6c:c5:6d:d5:27:fa:f2:54:36:1b:41:9d:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Mar 29 11:01:22 2026 GMT
            Not After : Mar 30 11:01:22 2026 GMT
        Subject: CN=c688934706550ff20f27020a250316520f794971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:cc:d7:c6:82:7b:82:b2:2d:e5:d1:25:3c:
                    e8:fe:57:83:a4:0c:2e:03:ef:fb:3c:29:0f:6c:a7:
                    15:30:60:80:87:8e:ec:7f:09:f4:70:8c:57:e4:a2:
                    d6:27:c0:71:ff:36:b8:65:40:36:bd:20:6f:57:04:
                    fc:68:e4:5d:6e:ab:7f:57:9e:df:82:ab:39:e1:11:
                    e3:44:c0:6b:b2:8d:9f:b2:31:46:43:78:3a:f8:7a:
                    64:ec:6e:af:81:14:a3:95:dd:7d:b1:97:fa:0d:b5:
                    9d:7e:4f:db:7f:83:0c:a4:f2:d6:e8:d6:a0:b5:1c:
                    c6:71:4c:ba:42:b7:17:ea:bc:37:45:e4:af:7e:b7:
                    ad:81:88:7d:68:c5:42:f7:b1:46:9b:d9:69:15:80:
                    f1:81:71:48:30:f0:9f:08:de:90:ee:89:fd:6f:93:
                    8b:f1:1b:f8:50:a8:7e:9b:5e:f1:b8:37:06:97:8c:
                    48:35:3b:17:a5:a8:45:bb:d0:92:56:12:ab:5d:2c:
                    18:d0:4e:ba:d6:81:78:16:44:fb:45:cc:b0:57:af:
                    f0:0e:e7:4d:9c:d4:1f:63:18:78:d4:34:74:94:c2:
                    91:d5:e2:e4:cc:5e:d1:e2:69:8a:3d:80:b5:60:fa:
                    7b:e1:ce:cc:84:82:07:09:39:09:5b:d8:ac:c1:4f:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:93:47:06:55:0F:F2:0F:27:02:0A:25:03:16:52:0F:79:49:71
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:78:66:62:8e:e3:6a:cd:46:a7:f4:bc:60:4f:80:8b:d0:
         32:37:93:44:ba:3b:36:da:1f:54:f1:c5:77:53:8f:1b:cc:0d:
         60:14:d9:f4:d6:18:08:f3:b3:94:00:d5:4a:1e:39:49:36:ce:
         eb:b6:2a:2c:ff:93:93:7e:59:d7:e5:c9:af:bd:10:b7:fa:25:
         50:6e:d8:14:6a:5b:cc:07:c2:bb:ac:5f:c5:c6:13:f6:1c:b5:
         91:e7:e4:76:b7:62:fd:1b:2c:92:a7:28:a2:42:65:f6:b8:35:
         5d:d5:bb:a4:41:9e:ce:48:85:e4:6d:c3:5b:1f:46:16:ed:ea:
         2f:b6:85:d6:1f:e6:cf:f9:b2:eb:a5:d2:a4:c8:cd:66:e8:ed:
         59:6a:1d:d6:f2:cd:69:27:c3:16:2d:dc:1c:5e:6e:6d:52:43:
         79:50:8a:88:80:4f:3c:6c:f9:19:61:37:d7:b7:4f:c3:7c:4b:
         ae:56:f3:4f:04:f4:39:ae:9a:ed:e2:8b:6d:9b:9a:2e:e6:db:
         41:af:72:ed:24:69:40:2a:10:eb:e7:3f:09:5f:77:76:41:04:
         c8:34:00:e6:68:22:8c:6c:a8:6b:74:dc:5f:16:92:e4:22:fa:
         93:f2:f8:b3:df:78:34:4b:99:a2:f0:db:b7:c5:b8:80:2f:de:
         c0:3d:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:53 2026 by rpki-client