Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File:                     7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier:          ew1riEncwY9u83jGzkbA3WhTL80RMmxf2PSEFdv3GYk=
Subject key identifier:   20:61:DA:1A:20:BA:36:1E:96:EF:FD:4D:CD:9B:FC:71:69:30:E5:F2
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       019D3865A358FA1B5E7FB56A1D18AF5AF72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number:          17E9
Signing time:             Sun 29 Mar 2026 07:01:18 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:18 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:18 +0000
Files and hashes:         1: 5lUGS6oPTLGoWnxgew7D5MIxWOg.roa (hash: qhuiBd586lNm93JRE/rEDVYPTPi0gDSSOqw/SZXIEjw=)
                          2: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: lE4U0uCrv82+JZNO2whVH6AIeKd9lPcTHxDjTyKGbh4=)
                          3: cnwLlloknS4NzO_cT5MY_Xg6hzg.roa (hash: jwOUCHm51TjA2Yun8ez24YjXUJl7V7kT6HkgsG1J4L0=)
                          4: inAZqVvbiAHgmsVOQao9R4JbZso.roa (hash: zU0uu0t4HLwKrI9w1yyx4XrHakdpeUbRFtc2CbGyHCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:a3:58:fa:1b:5e:7f:b5:6a:1d:18:af:5a:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: Mar 29 07:01:18 2026 GMT
            Not After : Mar 30 07:01:18 2026 GMT
        Subject: CN=2061da1a20ba361e96effd4dcd9bfc716930e5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:7e:6d:4a:dd:57:8c:07:72:9b:1e:bf:42:
                    4b:0d:92:bc:4c:83:83:b4:67:17:2a:a9:b1:20:25:
                    58:a3:04:86:c0:82:e6:21:d7:1e:1b:8c:45:9f:f0:
                    85:5e:fc:7e:eb:02:9e:9a:e6:99:22:83:9e:08:f7:
                    3a:ed:eb:93:5c:47:2c:41:8b:ea:dc:c1:f8:b3:8c:
                    c7:80:35:8a:61:8f:ef:ea:ad:e5:23:de:45:e2:e4:
                    05:33:90:e5:01:8d:3f:1f:c3:df:71:cc:1a:d9:40:
                    2d:a7:ed:67:03:cd:d8:73:86:ca:d8:1a:7d:67:4a:
                    18:ec:1b:16:98:c6:fe:4b:e2:03:c3:7e:c0:38:b2:
                    26:e1:2f:12:75:ac:cb:6b:f2:c5:9f:c5:50:d5:52:
                    8f:c0:ad:89:86:40:b6:77:5b:98:ab:96:d0:85:bb:
                    38:7b:70:10:1f:94:64:e6:59:ac:19:a7:1c:98:13:
                    8e:e3:65:25:d6:37:d3:29:b9:20:30:a6:9c:03:f5:
                    be:ea:83:17:d6:cf:fe:10:4d:53:14:b7:ae:c7:5a:
                    fe:1a:90:36:30:80:03:63:be:a0:f9:3a:12:3d:c4:
                    5f:42:d7:b1:11:80:da:a1:7a:a1:01:8d:b1:f9:87:
                    af:01:a3:e7:0b:49:68:55:d6:ce:09:56:46:60:57:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:61:DA:1A:20:BA:36:1E:96:EF:FD:4D:CD:9B:FC:71:69:30:E5:F2
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:4d:0a:5e:b3:d8:72:04:43:fe:38:eb:e5:11:9f:17:a3:
         bc:6a:89:6f:e7:f1:c1:77:e4:09:01:b0:b7:52:7f:92:0f:b3:
         62:64:4a:13:f7:c5:a2:df:a2:e7:2f:e3:c0:44:d7:ef:e6:da:
         e3:05:12:e9:21:65:83:69:19:8e:ec:dc:89:8c:7c:3f:83:68:
         30:73:07:f9:5f:61:76:64:8c:8c:b1:58:aa:6f:7a:a5:cd:46:
         02:f8:32:6b:b9:ba:37:be:7c:76:25:b8:a7:b6:c7:fb:63:25:
         28:a9:27:1b:1c:aa:18:21:30:d2:26:85:c4:8b:68:5d:3f:56:
         e4:54:17:48:dc:2d:d7:97:b2:f0:1c:49:09:4c:33:37:72:ae:
         f6:b2:db:22:50:8f:dd:2b:8c:94:9a:1b:9b:be:77:b8:65:3c:
         96:25:0c:92:78:e3:ea:9d:7f:7e:d0:e8:95:2b:10:d3:9c:0a:
         52:a6:34:90:56:e0:97:8a:c5:d8:bc:d0:9a:e4:0d:ac:f4:6a:
         32:39:f3:dd:ba:39:cc:93:78:79:93:98:a8:16:87:4b:6f:0b:
         d4:a6:0e:fb:f7:bb:58:f7:4f:c2:27:bb:e1:11:15:74:5b:ad:
         c9:f2:2f:06:02:0f:df:70:62:ec:df:43:06:d1:8a:73:18:99:
         c9:e8:fa:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZaNY+htef7VqHRivWvcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTQxNjU5MDU4NWE1ZDM1MWRiYmNhMWYwYjNjYTlmNjJh
Yjc4NWQwHhcNMjYwMzI5MDcwMTE4WhcNMjYwMzMwMDcwMTE4WjAzMTEwLwYDVQQD
EygyMDYxZGExYTIwYmEzNjFlOTZlZmZkNGRjZDliZmM3MTY5MzBlNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYB+bUrdV4wHcpsev0JLDZK8TIOD
tGcXKqmxICVYowSGwILmIdceG4xFn/CFXvx+6wKemuaZIoOeCPc67euTXEcsQYvq
3MH4s4zHgDWKYY/v6q3lI95F4uQFM5DlAY0/H8Pfccwa2UAtp+1nA83Yc4bK2Bp9
Z0oY7BsWmMb+S+IDw37AOLIm4S8SdazLa/LFn8VQ1VKPwK2JhkC2d1uYq5bQhbs4
e3AQH5Rk5lmsGaccmBOO42Ul1jfTKbkgMKacA/W+6oMX1s/+EE1TFLeux1r+GpA2
MIADY76g+ToSPcRfQtexEYDaoXqhAY2x+YevAaPnC0loVdbOCVZGYFeqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBh2hogujYelu/9Tc2b/HFpMOXyMB8GA1UdIwQY
MBaAFO7kFlkFhaXTUdu8ofCzyp9iq3hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMt
MDc2YTc1MGI4NTQxLzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jNmFiOTQtNjViMy00NzFjLWIwOGMtMDc2YTc1MGI4NTQx
LzEvN3VRV1dRV0ZwZE5SMjd5aDhMUEtuMktyZUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMxNCl6z
2HIEQ/446+URnxejvGqJb+fxwXfkCQGwt1J/kg+zYmRKE/fFot+i5y/jwETX7+ba
4wUS6SFlg2kZjuzciYx8P4NoMHMH+V9hdmSMjLFYqm96pc1GAvgya7m6N758diW4
p7bH+2MlKKknGxyqGCEw0iaFxItoXT9W5FQXSNwt15ey8BxJCUwzN3Ku9rLbIlCP
3SuMlJobm753uGU8liUMknjj6p1/ftDolSsQ05wKUqY0kFbgl4rF2LzQmuQNrPRq
Mjnz3bo5zJN4eZOYqBaHS28L1KYO+/e7WPdPwie74REVdFutyfIvBgIP33Bi7N9D
BtGKcxiZyej6qg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:26 2026 by rpki-client