Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          JF3+pDsJibKjSgC2kLVaKCZwgxDpqgQzayEBkibQmmw=
Subject key identifier:   16:95:63:2C:93:0F:B4:6A:46:AD:C3:67:F3:AD:E0:FF:98:7B:12:C8
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       019D382EC755467A59454229CC29C117D44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0F5A
Signing time:             Sun 29 Mar 2026 06:01:22 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:22 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:22 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: 01QrbgAbyt4xKecTudggM1eiR0sqiQcfNIrbKC42KN4=)
                          2: Mt9Wz8CiJyE1vhw9jtbceg6H-ug.roa (hash: fJNiy9ne0mTwA4HHTmShZYQguekNk9G6a4WDwn5xHSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:c7:55:46:7a:59:45:42:29:cc:29:c1:17:d4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: Mar 29 06:01:22 2026 GMT
            Not After : Mar 30 06:01:22 2026 GMT
        Subject: CN=1695632c930fb46a46adc367f3ade0ff987b12c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:c2:7d:f1:ca:4d:1e:42:68:1d:da:49:8c:
                    69:c2:96:14:95:42:cc:84:ea:f1:7f:d7:ff:bb:8f:
                    ab:7a:8f:31:37:b6:47:02:ad:81:17:30:ec:a3:9b:
                    ba:dc:d2:d7:37:13:bd:6d:76:5c:a9:11:9a:7f:3c:
                    dc:8a:7f:54:19:50:32:2c:70:18:0a:7c:bc:a7:40:
                    a3:45:ee:99:5e:a6:c0:82:e2:4f:f6:33:75:a6:1f:
                    0d:b0:0c:99:15:78:e2:d4:7c:1d:78:6f:c2:38:64:
                    7d:64:e7:d0:f4:d7:35:55:19:ee:6c:9b:0d:b9:4d:
                    4f:39:e7:78:d7:0d:5d:8a:03:20:30:88:10:10:b3:
                    ec:09:5d:a1:3f:22:3a:69:08:12:2f:2c:b3:da:a9:
                    cb:b6:7c:82:03:9c:4c:ba:e5:35:15:62:e4:85:bd:
                    d0:2c:e4:d3:06:c1:7c:f5:d0:e7:e3:ab:60:82:8a:
                    9a:4e:91:64:d1:8a:79:55:14:5a:de:92:11:0e:f4:
                    e4:1c:7b:6d:77:9d:fb:89:ab:5f:5c:6d:2a:40:ef:
                    18:94:80:a9:c7:b8:c6:cb:95:0b:58:7f:b9:4a:2c:
                    f4:f0:03:0e:d5:42:21:5d:7f:e3:24:bf:00:65:08:
                    c0:b1:f5:12:94:fb:bf:af:a4:dc:4a:54:c9:fc:c9:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:95:63:2C:93:0F:B4:6A:46:AD:C3:67:F3:AD:E0:FF:98:7B:12:C8
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:c6:e4:1e:79:bc:f9:7d:eb:8e:aa:4f:ec:8d:c7:1b:01:
         fc:52:d5:38:9b:69:1b:e9:82:3e:70:74:ec:eb:36:1f:52:1e:
         36:4a:1f:df:be:99:6d:eb:6c:c4:9e:84:8d:76:5e:7c:f5:4a:
         04:c9:7b:48:68:b5:20:72:c5:8c:2c:0f:78:e6:b8:30:bf:f8:
         8e:d8:d5:ee:00:b0:a4:ab:b1:45:63:0f:57:7c:50:f2:a3:e1:
         f1:fd:7d:0c:cc:44:54:09:c6:15:a3:71:9d:eb:3b:10:ae:1d:
         a3:9c:b6:fe:f8:7e:b7:85:ff:e5:64:2d:e5:3a:bb:ec:45:9d:
         da:2e:7d:57:e0:8e:40:5f:db:1e:31:25:16:49:fa:79:03:cc:
         4b:6a:de:ae:f2:25:37:25:f8:67:7c:fe:e6:20:0f:b1:d3:fa:
         b1:63:72:07:e6:7c:c6:22:da:83:ca:af:4c:16:fd:09:f3:42:
         44:9e:ac:a3:39:d5:67:01:3c:96:cb:cb:77:16:0e:99:0b:3b:
         fb:a4:04:df:23:f4:42:3d:52:02:2a:cf:0f:44:ab:b2:c2:69:
         b2:50:45:08:fe:54:47:e3:a1:34:8c:b2:fd:45:97:4e:4d:41:
         1f:d6:03:97:71:13:42:b2:75:3c:9a:35:ea:90:fd:71:19:cc:
         dd:7f:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:45 2026 by rpki-client