Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          6FSqjLThnSWj4XqGTd7WEjxM6IM0GhcRokwG51gprfM=
Subject key identifier:   77:7F:AD:C3:87:4F:73:A1:C3:4D:D1:53:47:AC:92:67:71:43:A6:3F
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       019D382DF4B84F5E526E9DB0292B685F7B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          11F8
Signing time:             Sun 29 Mar 2026 06:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:28 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: YBmOzbHOUvPuCZ4WVGOQtAGJrubunX9litDcs5lxxJQ=)
                          2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:f4:b8:4f:5e:52:6e:9d:b0:29:2b:68:5f:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: Mar 29 06:00:28 2026 GMT
            Not After : Mar 30 06:00:28 2026 GMT
        Subject: CN=777fadc3874f73a1c34dd15347ac92677143a63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:18:0d:30:61:a7:f5:f0:6e:78:d0:68:aa:
                    b9:1e:bb:5f:88:3a:c3:f6:ea:0e:96:84:70:c8:f0:
                    31:cc:ab:64:9d:13:80:48:33:e3:4e:50:2a:ce:09:
                    1b:27:a5:9a:2a:ac:c5:ff:62:c6:8c:e0:c5:37:30:
                    ba:c6:69:80:7f:ed:7a:75:7a:f1:59:b2:5c:ef:57:
                    21:12:ca:d3:da:c3:4e:e3:e0:0c:84:3c:66:1e:8b:
                    4e:32:a3:6d:23:49:eb:12:55:be:cc:68:88:cd:c0:
                    c0:f3:4b:a3:c6:35:1f:0f:16:a1:9a:19:fc:79:96:
                    ca:ad:71:a5:6a:6c:85:92:ca:5f:ca:11:2d:dd:48:
                    bc:37:d0:a1:8c:dc:64:8c:68:7a:cd:df:35:76:e8:
                    97:e6:5c:84:0e:4a:7a:1a:53:0d:e0:3c:5c:64:a5:
                    1e:5c:1d:9a:c5:b4:cc:4c:b4:7b:56:ef:44:71:a3:
                    3a:40:11:0e:13:39:03:70:aa:1b:05:ab:fb:09:dc:
                    d1:ef:fd:e4:ba:83:b1:ba:e7:49:2f:02:10:cb:b9:
                    bc:66:80:34:0d:14:f7:8c:b8:a6:0c:ea:a3:a1:2a:
                    1d:63:1e:3e:46:8b:eb:a6:ed:28:f5:b8:8f:4b:fb:
                    b4:a6:f7:2b:74:b8:cd:59:d3:53:d5:33:ed:37:67:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:AD:C3:87:4F:73:A1:C3:4D:D1:53:47:AC:92:67:71:43:A6:3F
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:96:d0:8d:3b:8a:a5:10:b9:fc:13:19:fb:29:45:08:fc:
         fa:4b:4f:e6:01:51:3b:a0:8a:74:16:26:58:9d:0e:b1:8e:22:
         2a:ff:d0:2b:5d:40:ad:4b:7f:c6:41:0e:83:e2:12:bd:c1:e2:
         27:34:75:3a:6e:2c:0e:b6:b3:7d:64:64:2e:e5:94:77:ee:1c:
         72:23:1c:2f:ce:03:05:1b:02:e8:4d:85:ad:38:4a:88:7e:3d:
         a0:c3:90:85:d2:66:0d:f8:da:ac:88:af:54:f4:68:80:68:d0:
         0a:8c:b2:df:30:e5:67:3f:87:4a:5b:8e:54:3b:cb:5d:05:83:
         be:ed:0a:0a:8d:a2:43:c5:f7:76:b1:8c:e4:1b:c7:91:08:19:
         36:3a:e9:45:4f:1c:bf:b9:13:93:e3:8d:58:d2:4e:08:c6:c7:
         94:c1:64:b6:c4:6b:30:b4:16:c5:a7:f9:36:1e:83:b1:c0:56:
         bc:41:73:8f:f5:08:11:21:53:a3:64:02:47:e5:b7:f3:21:2e:
         c3:42:8b:61:fa:33:04:a3:c3:c8:bd:9d:9e:4e:7e:6b:25:cc:
         a9:49:a1:fb:1e:6f:71:95:d0:71:e2:54:4d:d3:d4:38:cd:6f:
         ce:99:50:3b:fd:3c:d0:f3:7a:97:6e:90:3d:cf:20:e6:e2:72:
         6a:dc:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:57 2026 by rpki-client