Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          PDWteV/LxhM9OFvTBssjvXJB/TEyEFvJ3sfVuExlSWE=
Subject key identifier:   6E:3D:70:40:AF:4F:78:1D:6A:02:02:22:DF:65:A3:54:5C:94:8D:50
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019D3A53B22C32E32F67F50C2A98BA560C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          124E
Signing time:             Sun 29 Mar 2026 16:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:56 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: KsR6sJKqiNrD8BQmYgF+GIY61zKV7FaESZWIJYJaie4=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:b2:2c:32:e3:2f:67:f5:0c:2a:98:ba:56:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Mar 29 16:00:56 2026 GMT
            Not After : Mar 30 16:00:56 2026 GMT
        Subject: CN=6e3d7040af4f781d6a020222df65a3545c948d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:66:f1:b2:88:06:9d:aa:13:59:21:18:64:
                    84:c4:9e:81:ee:96:64:51:4b:82:3a:2e:d2:c7:f4:
                    bd:e1:44:07:49:b5:ba:8d:cd:35:cf:33:c8:c5:11:
                    02:df:cf:dd:d3:86:c7:21:31:0d:e8:b3:e1:58:7e:
                    c9:fe:91:a6:d2:c7:47:3e:96:d6:27:c7:ac:c8:7c:
                    a0:7f:08:92:16:b2:33:bb:36:85:76:78:a2:ea:6b:
                    c2:f7:97:b0:ea:49:7f:7b:bd:dd:80:b6:f0:16:50:
                    d9:f6:a2:16:f8:ca:43:cf:52:8d:ae:88:1e:87:5c:
                    eb:f1:17:1b:49:42:67:d5:3a:9c:dc:da:82:12:61:
                    1e:58:c2:3b:d4:ff:df:2c:8c:c2:2b:e1:9e:24:83:
                    b5:d5:ef:02:0c:ec:11:91:8d:f1:4d:ff:43:44:e0:
                    c1:39:e7:d9:e3:e8:5a:38:c4:6e:0a:f4:75:1a:4f:
                    cc:ba:de:db:d5:22:42:94:a9:51:8c:38:a0:e0:bb:
                    e8:8f:f0:a3:06:e4:7e:7a:39:8c:bf:26:cd:68:5a:
                    14:9a:c2:9d:e2:36:be:4a:42:d0:3c:21:cd:bb:17:
                    61:2c:49:34:c0:bc:60:7a:e1:34:ce:9b:7e:bd:9a:
                    92:15:55:6f:1b:ec:42:43:dd:b3:de:d7:cb:79:e7:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3D:70:40:AF:4F:78:1D:6A:02:02:22:DF:65:A3:54:5C:94:8D:50
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:e1:e1:c2:ea:5a:3b:2a:b9:ad:96:41:08:63:0d:75:64:
         d4:4c:a5:21:03:eb:d0:a2:cb:0f:7d:2e:e2:21:a5:10:14:27:
         a0:aa:54:44:02:57:6e:e7:e2:66:41:71:6c:65:a1:96:8c:d1:
         52:3a:84:d4:ab:65:b6:bd:05:47:d8:f4:45:2a:e8:44:d3:03:
         42:06:02:7d:ad:53:0b:1d:a1:71:76:86:ca:ce:08:9d:14:aa:
         ba:a3:1f:ea:d7:a3:e7:32:7e:34:6f:a6:33:be:4a:22:a2:b4:
         df:eb:38:ad:74:b8:94:43:f9:37:f4:38:f7:d8:4a:f0:f0:4c:
         7e:e5:af:7a:92:0c:33:5e:0c:3f:35:7b:87:2b:f2:9a:62:cc:
         e9:8e:bb:b7:4e:85:53:76:85:ee:2b:d4:8d:cd:b3:e7:e2:d2:
         b0:c6:d9:16:98:d0:21:d6:75:d7:21:72:b8:23:5d:da:d3:67:
         c9:f7:ac:88:b3:96:f6:d0:3e:26:20:ee:0a:f6:11:5b:87:c6:
         87:06:00:02:e5:41:ca:26:58:75:ef:0d:91:3b:9f:bf:54:82:
         ca:11:e8:3a:97:68:d9:9a:cc:17:4a:b0:66:5f:46:ff:e2:7c:
         37:23:f2:89:c4:a6:d2:cc:d3:bd:f2:04:d1:f0:26:d2:7a:2b:
         85:92:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:30 2026 by rpki-client