Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          KZkX3IXfn2zTbVeqx4aOXo/Q66NN0nymjeFXJnUgTlc=
Subject key identifier:   F4:35:B9:FB:15:9C:AD:7A:32:9B:9B:A4:D8:FF:8A:FB:5C:D2:90:DC
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       019D38D3B39641FED86519C72F52F0FFAA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 09:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:31 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: HZBtKavw5Wh2DD5rKqAQlolHUdKSdGbAaIR8K5PGm6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:b3:96:41:fe:d8:65:19:c7:2f:52:f0:ff:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Mar 29 09:01:31 2026 GMT
            Not After : Mar 30 09:01:31 2026 GMT
        Subject: CN=f435b9fb159cad7a329b9ba4d8ff8afb5cd290dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:f4:a9:d3:59:7b:eb:23:10:13:b4:61:43:
                    02:81:75:66:b2:64:9f:c1:b5:6c:dc:31:87:3c:fa:
                    1a:f4:09:59:93:59:05:49:16:66:60:60:7a:4b:f0:
                    0e:1d:c9:df:57:18:f1:ac:d3:e8:33:0c:de:cd:2a:
                    1b:ea:31:74:4e:74:de:27:45:67:c0:e4:7a:3c:ab:
                    8a:f7:27:f0:ef:fb:5a:93:6f:c0:cd:7b:c8:52:2b:
                    91:76:7e:fb:b4:d0:8a:28:9d:39:af:2c:21:9f:1f:
                    4e:31:1d:4c:44:dc:df:4f:fb:50:d4:7f:ad:70:8f:
                    fa:da:f1:fe:01:60:4e:85:fc:89:5f:01:37:55:cd:
                    04:a1:1d:0b:88:59:59:b5:58:f5:e7:b9:4a:78:5d:
                    9e:64:4e:7a:be:0e:d7:d1:25:e2:0c:34:5b:ce:0f:
                    a1:0c:56:38:be:55:12:a2:b3:54:dd:90:b5:be:a7:
                    6e:45:24:1f:f8:dd:c8:79:5f:95:9f:d6:f6:82:da:
                    0b:3b:7d:38:d2:63:f6:76:8f:94:b7:bf:35:31:62:
                    99:4f:00:13:88:7c:79:09:8b:7f:53:a8:98:66:83:
                    56:0b:8d:72:21:23:b6:4e:61:75:9c:48:e8:41:8d:
                    34:e7:6b:e5:54:b2:45:00:a0:b7:81:6f:5d:c2:f1:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:B9:FB:15:9C:AD:7A:32:9B:9B:A4:D8:FF:8A:FB:5C:D2:90:DC
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:42:82:cc:05:9b:9f:43:bd:df:7d:e8:9c:6c:a3:95:7b:
         d9:2e:94:8b:2b:a6:0e:d1:30:d5:4b:c7:bf:da:62:a9:30:6a:
         ca:0c:02:b8:22:90:4a:6e:b0:a0:84:47:e4:4b:41:7f:e1:d1:
         9e:cd:b3:e8:b3:82:88:ce:cb:23:0d:2a:de:1f:b6:8e:96:1c:
         26:24:df:80:19:89:79:ed:3e:cb:f4:bd:23:00:c1:d9:ed:66:
         69:a6:a9:16:72:94:7e:e7:0a:10:57:a0:c7:38:18:a7:94:7b:
         55:55:bc:d8:d3:20:f3:35:bd:4e:75:84:f2:1f:fe:d2:1b:31:
         fd:0a:4c:db:1e:1d:8c:2c:c3:5e:c0:8d:f6:ce:ff:bf:4e:ed:
         65:1e:0e:ec:ac:78:49:3e:d2:52:cc:45:3d:b7:d9:ce:ba:d4:
         7d:3d:2c:6a:36:4d:45:fa:65:78:47:8e:da:c0:cf:e7:a1:e0:
         46:8a:88:6c:e3:d9:47:b8:09:d1:03:2b:96:75:68:9d:04:2a:
         f7:7b:5c:07:4c:bd:11:6c:0a:03:6a:8a:b3:d1:97:e0:a2:c9:
         0d:a3:a9:4f:95:ba:05:a7:dd:48:aa:9d:42:96:c8:d8:bc:dd:
         d0:99:19:db:f3:60:47:d8:b4:2f:ae:c7:69:cb:8d:96:eb:88:
         02:9e:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:22 2026 by rpki-client