Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File:                     t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier:          x/2ueEFVnmvoPr2BkL/nIH1T3NMnqMYXmDLJerdcFSw=
Subject key identifier:   BB:6D:6C:F5:8B:5D:BC:F9:D7:2F:CB:E8:84:35:A5:AC:BB:1E:C8:6F
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer:       /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial:       019D37BFF71B7AD48D621F387B6FAE480F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 04:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:20 +0000
Files and hashes:         1: l2K815BrxnyKxX1Z80Pet8asKu0.roa (hash: Eu+brIQ4UCkAdjGsx7xGNJPQX039Fdi67RknQ8veG7g=)
                          2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: N0ARUXInWGOFrYbuH5oIsGWXQSXmiKxF4O+47F0sY9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:f7:1b:7a:d4:8d:62:1f:38:7b:6f:ae:48:0f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
        Validity
            Not Before: Mar 29 04:00:20 2026 GMT
            Not After : Mar 30 04:00:20 2026 GMT
        Subject: CN=bb6d6cf58b5dbcf9d72fcbe88435a5acbb1ec86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:8c:0d:de:84:c2:83:de:59:aa:1b:95:79:
                    d3:ac:f2:ee:9b:5d:af:29:39:ed:ac:83:cf:b0:8a:
                    92:e8:97:2a:fc:ba:bb:4e:0c:33:86:7d:aa:11:32:
                    aa:f6:2b:24:32:67:25:05:2f:46:8c:fe:7b:69:db:
                    6c:f8:e2:fa:39:10:c7:43:07:a2:e4:87:42:2e:be:
                    9b:91:4f:f5:86:b9:cb:67:c6:14:65:0a:21:46:06:
                    bb:2c:98:fd:f8:3e:26:e1:34:03:3c:da:f8:32:ac:
                    d1:0c:d4:f0:12:d9:6b:51:66:68:96:70:c0:19:03:
                    f0:18:0c:ca:05:af:9e:54:7b:67:07:f6:10:39:d6:
                    30:7c:4a:3d:dc:9d:53:21:ee:17:81:00:61:1f:29:
                    de:7b:67:7e:36:9e:a1:d0:93:bf:f9:ae:d7:e9:61:
                    81:2d:31:66:ee:4e:cd:dc:ce:f9:7d:8f:a2:41:ff:
                    00:a2:65:39:73:59:d7:ad:5b:e9:2c:30:a7:d5:ce:
                    f8:1a:51:f5:db:90:4b:ec:af:2d:b7:17:97:c5:2b:
                    d4:ae:55:ed:4c:4b:67:53:1d:10:2b:f7:61:7e:9d:
                    fc:c0:06:e5:32:52:45:cb:04:55:02:63:97:26:21:
                    ae:e0:a2:b6:c5:a0:37:f6:6b:03:b2:55:d8:41:99:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6D:6C:F5:8B:5D:BC:F9:D7:2F:CB:E8:84:35:A5:AC:BB:1E:C8:6F
            X509v3 Authority Key Identifier:
                keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:9c:3f:a3:ec:fa:46:10:fe:9f:2d:13:0f:f0:61:2e:22:
         5a:82:2e:b7:ae:23:d5:98:ed:9a:0e:0b:0d:c0:aa:56:4f:83:
         60:ad:43:ea:d5:8f:f8:bb:25:43:e2:b8:cc:e1:cc:d5:62:b4:
         29:b5:7e:48:86:7e:a4:87:e7:f9:3d:6d:aa:9b:48:77:ba:41:
         27:5a:75:53:73:8b:31:3e:fb:56:e5:3a:c3:a6:a1:a9:17:5e:
         9a:d4:57:3f:67:e7:e2:1a:0c:e2:31:ff:15:fa:b8:10:76:1c:
         2d:3c:ae:da:e8:48:87:f6:be:d8:b0:46:19:de:38:28:cd:7d:
         3e:4c:cc:04:70:a0:eb:e1:4b:12:01:8b:d3:60:a3:9a:99:7b:
         4a:9f:9f:49:ff:60:91:47:bf:e0:bd:62:67:e3:d6:ef:df:f5:
         73:91:71:51:5d:e9:0f:7e:9e:7e:11:a4:2c:56:fe:8a:27:9a:
         c0:eb:08:6c:83:95:2d:11:24:a4:28:24:17:3d:d1:a3:72:30:
         24:ca:c7:8d:be:9f:6c:c4:7a:66:b5:3f:ab:10:f0:5c:ba:1a:
         54:73:34:06:ae:9b:ca:fc:e4:2c:00:e6:ca:8e:18:21:a1:f1:
         2c:45:4e:cc:ad:df:a1:7e:ad:8d:29:5e:d3:8e:ce:14:f6:3f:
         84:c6:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:31 2026 by rpki-client