Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          2JWN4tr0re+n5PgoxThFZ/ewiFtjtjWJi/OZXbqAz2k=
Subject key identifier:   72:14:73:B3:68:D8:DC:7B:70:12:F4:0E:FA:77:40:66:80:35:6B:C6
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       019D38D348BB82928C6EE07A9815B89BC049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          13E7
Signing time:             Sun 29 Mar 2026 09:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:03 +0000
Files and hashes:         1: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: uzIUOBiWg+xNkw5VMcgRIdiXmZZBpD5TDXOWOpzynQ4=)
                          2: yNYC7VNuITL88FuMRKTJoDt6hNg.roa (hash: 8JNp2jq6UQpWFc9nLRlegOYLaf507H8Zto0kp+p83oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:48:bb:82:92:8c:6e:e0:7a:98:15:b8:9b:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Mar 29 09:01:03 2026 GMT
            Not After : Mar 30 09:01:03 2026 GMT
        Subject: CN=721473b368d8dc7b7012f40efa77406680356bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:13:78:91:05:35:a4:9d:59:a3:ee:0e:7d:
                    a5:9c:07:4f:39:7f:5b:ce:1a:3c:38:b9:57:57:6f:
                    75:ed:dc:4f:55:e3:9f:b7:2e:9e:62:73:3e:21:48:
                    b9:d0:fc:f9:ee:93:2c:41:1a:0a:9e:0c:cd:54:cd:
                    54:c2:02:85:b6:68:05:ed:04:e8:2d:be:9a:30:d2:
                    dc:3a:5a:e9:43:98:d9:a7:04:da:e9:88:bb:f2:b1:
                    bc:85:25:ac:26:f8:8c:e0:98:6d:e2:67:de:9c:33:
                    5c:0b:d9:ba:e5:ff:ab:54:6a:42:3f:d3:8e:c5:2a:
                    66:c9:c6:32:58:1f:d2:b2:e9:5c:5b:f4:7a:a1:9b:
                    09:83:96:ee:63:f9:5a:61:ae:fc:46:73:2d:bb:e0:
                    02:cb:d1:6c:24:78:84:da:22:38:9d:8f:60:82:d2:
                    a1:40:08:50:1c:ce:f9:f7:40:ea:d8:8f:97:a9:8d:
                    b1:66:62:36:05:13:82:86:81:42:9f:fe:ab:95:93:
                    b3:65:ae:8e:4c:59:3a:ed:e5:8a:9b:30:63:85:31:
                    87:02:95:f7:42:b4:8e:89:6a:77:f4:19:02:0a:4a:
                    38:7d:42:3d:5b:7d:1d:1c:06:7b:3f:59:9e:3f:d8:
                    73:1a:06:e7:65:79:07:fd:02:92:f0:56:f5:bb:93:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:73:B3:68:D8:DC:7B:70:12:F4:0E:FA:77:40:66:80:35:6B:C6
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:7f:a3:d1:97:02:ae:0c:0e:14:ce:7f:d2:de:09:f9:8a:
         0e:5a:56:56:3d:fb:e1:4c:3f:da:9c:10:44:88:3d:79:fc:d4:
         d6:31:98:5d:fd:4e:b5:63:78:66:92:a3:fa:6f:33:f7:6d:2a:
         1a:4f:75:60:99:d5:18:66:63:2b:6d:a4:54:34:f9:41:44:63:
         d0:ea:cb:f3:47:54:ae:29:87:c5:d8:00:36:47:be:75:39:d7:
         e3:d8:7d:9d:ad:ec:a2:4b:77:9d:38:8a:40:7a:71:09:80:bb:
         b8:c8:77:c0:19:0b:9a:c7:80:58:16:09:fa:f7:e7:7d:c1:39:
         cc:72:f1:8a:ff:8d:77:0f:27:ff:d7:7c:57:7c:66:9a:cc:dc:
         6e:62:c7:c4:61:5c:d3:d7:31:c6:5b:b7:71:90:a6:e6:b3:97:
         63:94:3c:ff:62:8b:c1:14:48:5e:67:c3:e7:0d:ce:70:8b:0b:
         a2:86:da:b6:98:c5:fd:8f:e6:d8:c4:08:20:20:bf:c1:2d:34:
         ac:20:b5:35:d2:ed:0f:ed:31:ad:45:10:5d:84:39:a2:29:07:
         c1:e0:84:97:25:95:7f:fc:86:be:64:31:69:d2:e7:05:ed:fe:
         a2:6c:92:9a:92:e0:55:12:d2:c4:cd:97:61:4c:0e:7b:9d:a9:
         d7:9d:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:28 2026 by rpki-client