Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          KKu+PUtXJ8PQfAR3OJuJmZeVHvxOcjqG+Nq8XrLNCMc=
Subject key identifier:   26:39:9A:B2:47:68:A0:9E:F0:98:94:8B:92:21:D7:0F:52:43:64:CD
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       019D37C117371D1403322AFC876454C9CDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0B83
Signing time:             Sun 29 Mar 2026 04:01:34 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:34 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:34 +0000
Files and hashes:         1: 31QlpWk52MbnjJPL8duGjgcTV1M.roa (hash: ewibnVQxq4nFBFXckvW0i2H7kBIgzqodfcTWUNT0n/g=)
                          2: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: DOYkRremD/Rwr9bfAl4tUIwbM79U1jn7bZhWpgh+CQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:17:37:1d:14:03:32:2a:fc:87:64:54:c9:cd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Mar 29 04:01:34 2026 GMT
            Not After : Mar 30 04:01:34 2026 GMT
        Subject: CN=26399ab24768a09ef098948b9221d70f524364cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:d3:c8:a5:f5:d7:a5:07:43:74:99:62:53:
                    d0:14:bb:21:18:dc:b0:9b:fb:26:83:b5:19:04:63:
                    6e:18:e5:f0:7f:68:44:18:83:08:b2:3a:e7:06:4d:
                    65:ff:75:ef:5d:97:11:0e:2c:a5:02:26:33:89:35:
                    6c:2b:13:f0:51:1d:f6:d6:5c:a3:15:88:70:37:66:
                    18:6b:7b:ea:2e:56:7f:ab:36:97:af:44:3a:07:7c:
                    a5:0b:57:c0:75:d3:f4:2d:cf:7e:de:1e:6c:c1:af:
                    f8:b7:c8:4d:3d:c4:09:45:aa:ba:c1:49:bb:dd:3c:
                    03:1e:74:fa:40:4e:63:f7:0b:7f:6d:ac:dc:ab:5b:
                    75:24:6e:a4:a5:7a:55:b6:cb:8b:25:b8:a1:e8:04:
                    05:71:06:76:63:63:3c:42:5e:f4:b8:23:db:04:78:
                    99:23:53:5f:c5:5e:93:aa:d3:70:3d:ec:f5:ee:6f:
                    51:6d:98:65:a8:f9:9e:da:1e:32:54:27:1e:2f:64:
                    f8:fb:02:66:c4:ad:2e:a2:71:8f:6a:cd:53:ea:32:
                    ef:71:fa:94:cf:22:4b:de:a1:52:fe:37:d8:67:89:
                    a8:0f:19:cf:7f:bf:ca:b3:4f:a7:20:16:f6:11:51:
                    fa:5d:39:0a:cc:b9:73:e1:c9:5c:79:b5:5e:2d:a3:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:9A:B2:47:68:A0:9E:F0:98:94:8B:92:21:D7:0F:52:43:64:CD
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:36:53:f5:c8:03:e7:a5:72:8d:6a:ee:aa:5c:e2:d7:4b:
         18:20:8b:53:89:a7:3b:96:8e:ec:5c:12:d2:d0:f8:84:c2:80:
         64:8d:57:47:3d:3a:57:fd:ef:1e:d1:ce:a3:c0:76:4f:d2:32:
         e5:ed:0c:9b:b8:70:79:a3:20:1b:d0:14:2e:12:5a:63:f4:e1:
         a9:8c:8e:b5:4d:73:a1:41:b5:77:cb:b6:41:cb:c3:1f:5d:f0:
         d7:eb:0f:b5:c5:bf:a4:57:2e:bb:2e:76:61:f4:f7:eb:22:29:
         c2:75:5e:68:10:39:1b:d4:71:02:6e:73:d8:e7:24:ea:b1:33:
         19:79:c4:19:11:07:fc:fb:c1:fc:33:4c:93:a7:98:b9:83:22:
         e7:22:1c:3f:b5:75:ed:05:06:19:eb:0e:34:e1:db:69:f0:95:
         e6:e0:ce:f3:a1:b8:68:e8:14:35:68:9f:d0:ad:44:ee:63:e1:
         b2:3e:8d:e1:a7:67:13:74:fa:62:3e:34:e0:2f:de:f0:f5:07:
         f2:ed:1f:63:02:1a:a5:53:94:c1:c3:f7:57:c7:05:e3:b0:0e:
         9f:59:a9:58:88:8e:e3:2b:67:9f:76:b4:82:73:64:f4:be:84:
         3a:22:3a:2c:5b:37:a0:93:6d:22:37:25:54:ff:49:34:90:80:
         ce:70:d1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wRc3HRQDMir8h2RUyc3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYjMzODJjMTZhMGE1NjE1OTkwZDRiY2U2MzRkYzUxNjgy
ZjJlYWEwHhcNMjYwMzI5MDQwMTM0WhcNMjYwMzMwMDQwMTM0WjAzMTEwLwYDVQQD
EygyNjM5OWFiMjQ3NjhhMDllZjA5ODk0OGI5MjIxZDcwZjUyNDM2NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/TyKX116UHQ3SZYlPQFLshGNyw
m/smg7UZBGNuGOXwf2hEGIMIsjrnBk1l/3XvXZcRDiylAiYziTVsKxPwUR321lyj
FYhwN2YYa3vqLlZ/qzaXr0Q6B3ylC1fAddP0Lc9+3h5swa/4t8hNPcQJRaq6wUm7
3TwDHnT6QE5j9wt/bazcq1t1JG6kpXpVtsuLJbih6AQFcQZ2Y2M8Ql70uCPbBHiZ
I1NfxV6TqtNwPez17m9RbZhlqPme2h4yVCceL2T4+wJmxK0uonGPas1T6jLvcfqU
zyJL3qFS/jfYZ4moDxnPf7/Ks0+nIBb2EVH6XTkKzLlz4clcebVeLaMQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY5mrJHaKCe8JiUi5Ih1w9SQ2TNMB8GA1UdIwQY
MBaAFHuzOCwWoKVhWZDUvOY03FFoLy6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEt
OTU1NGE1YWMzNmJiLzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEtOTU1NGE1YWMzNmJi
LzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP002U/XI
A+elco1q7qpc4tdLGCCLU4mnO5aO7FwS0tD4hMKAZI1XRz06V/3vHtHOo8B2T9Iy
5e0Mm7hweaMgG9AULhJaY/ThqYyOtU1zoUG1d8u2QcvDH13w1+sPtcW/pFcuuy52
YfT36yIpwnVeaBA5G9RxAm5z2Ock6rEzGXnEGREH/PvB/DNMk6eYuYMi5yIcP7V1
7QUGGesONOHbafCV5uDO86G4aOgUNWif0K1E7mPhsj6N4adnE3T6Yj404C/e8PUH
8u0fYwIapVOUwcP3V8cF47AOn1mpWIiO4ytnn3a0gnNk9L6EOiI6LFs3oJNtIjcl
VP9JNJCAznDRIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:25 2026 by rpki-client