Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          OF3AyWuTHZ8grjtWLyVl8j1dICpyBxyjoIOmwshSMCs=
Subject key identifier:   00:C2:53:F1:AA:1D:03:48:01:5A:B4:A7:62:95:30:AC:12:01:CD:F2
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       019D3A1CEF457CC1F6BCF88701DC2A7B533C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          08AD
Signing time:             Sun 29 Mar 2026 15:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 15:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 15:01:07 +0000
Files and hashes:         1: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: zq+7N2J0gtBij1yH1cMcoVUN9jVTG64YlcDqgjAL8Mk=)
                          2: QSFo4SzW5Mxl0PfFRdNnIL_TgtQ.roa (hash: ihRbYBAqH4CF7W2NY5WPRwb0ldsVjq6C79woYjxyC0Q=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:ef:45:7c:c1:f6:bc:f8:87:01:dc:2a:7b:53:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Mar 29 15:01:07 2026 GMT
            Not After : Mar 30 15:01:07 2026 GMT
        Subject: CN=00c253f1aa1d0348015ab4a7629530ac1201cdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:7e:6d:c8:c0:48:f8:13:84:dd:04:bc:66:
                    8f:fe:32:35:db:02:04:4a:ad:03:99:42:1a:4d:26:
                    ab:f9:00:5c:2a:37:df:91:c6:f8:e5:d5:ed:17:a8:
                    53:20:00:f2:9b:d7:c4:30:e3:c3:c8:73:60:ec:ab:
                    bb:1e:a8:ee:14:92:96:33:c2:2a:ee:7d:29:2e:37:
                    9d:3e:e1:58:93:35:df:12:80:36:87:43:ea:51:b5:
                    2b:c3:ce:50:48:96:fd:24:8d:50:b1:53:91:78:8e:
                    01:a8:2f:b9:8c:a5:00:74:de:25:60:e7:31:33:12:
                    92:75:59:37:9b:3a:ae:18:bc:d2:a7:b5:ef:b7:63:
                    a1:f3:51:d7:d0:10:53:4b:09:7b:d8:de:ca:fd:13:
                    5a:e8:bd:1a:21:c7:8d:f1:d8:a7:09:a0:88:31:f8:
                    a1:9f:04:9d:82:1b:4e:23:42:48:8d:2c:62:5a:38:
                    12:cf:8e:a6:84:c9:da:3c:75:cb:00:da:72:59:5e:
                    d1:ed:47:21:1b:b2:a2:c0:6f:5a:d2:cb:97:72:1f:
                    59:34:f7:f3:b9:54:94:8e:9f:bc:91:bf:73:57:f4:
                    2f:90:3b:0b:a2:c6:67:40:55:ac:dc:51:71:6b:da:
                    51:cb:26:17:2c:06:44:49:fe:4d:0d:82:fa:10:3e:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:53:F1:AA:1D:03:48:01:5A:B4:A7:62:95:30:AC:12:01:CD:F2
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:1f:c1:54:62:c8:68:55:4d:b4:df:24:b1:dd:19:b0:8d:
         32:00:67:3a:4a:d3:31:09:e4:20:bd:ae:af:b3:23:b8:62:de:
         92:e7:d5:50:c3:5d:45:13:9a:4f:ae:d9:c7:cd:92:74:56:12:
         92:1d:dd:76:ef:d8:5e:7b:41:9b:d2:2e:95:05:a3:1f:7b:dd:
         a1:5f:b7:0e:38:22:b2:8d:f7:c2:f1:9b:2f:75:2f:ef:07:8b:
         05:ec:42:29:a6:33:21:96:bf:49:bd:77:75:bf:00:54:20:61:
         fa:6a:4c:67:ed:35:60:8e:26:e3:74:c9:78:89:12:1f:b3:8e:
         60:17:33:c2:50:92:fb:31:91:9c:1e:ce:d8:ba:8d:fa:0f:c4:
         a9:fe:1d:0e:a2:18:07:2d:12:45:c7:13:fb:a9:47:a9:46:87:
         60:fd:3c:0d:63:d8:67:41:83:d4:05:9f:51:84:a3:b4:70:26:
         ed:e6:57:8d:26:67:d2:77:b6:94:4a:d8:69:26:0b:7d:3a:d4:
         67:ce:81:63:71:5a:ac:09:d7:11:70:11:81:3c:9a:5e:d9:46:
         44:37:91:3e:12:52:05:c1:01:86:5a:7c:77:99:cc:49:f4:08:
         fc:d7:0c:68:24:c6:07:bf:fb:81:4b:7f:89:07:57:06:04:3c:
         41:9d:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:17 2026 by rpki-client