Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
File:                     7kmddBz3poj_wsl2gT23xR68R0k.mft (raw, json)
Hash identifier:          gUQFQFS8RZXnRHx1xdIbr0nMSdJKCEcb/FAnem9FDkI=
Subject key identifier:   C3:C0:A9:D6:B0:12:BC:43:FD:86:D4:BA:7C:C8:BC:E5:6D:0A:85:46
Authority key identifier: EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49
Certificate issuer:       /CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
Certificate serial:       019D37F74C3F1B75AE4E5BA7B0CC6035B9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
Manifest number:          0356
Signing time:             Sun 29 Mar 2026 05:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:46 +0000
Files and hashes:         1: 7kmddBz3poj_wsl2gT23xR68R0k.crl (hash: dpkUKLWvF9zlpTuiEn0NRCf2vJkZCG4FcS5G9oj09pk=)
                          2: wKnEgD4LUjzl3Xg9ixLbselaklE.roa (hash: bAjcEWUJ0poUNC9tIVnKtSJHHlCTwxmRLAJtIzNX1ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:4c:3f:1b:75:ae:4e:5b:a7:b0:cc:60:35:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee499d741cf7a688ffc2c976813db7c51ebc4749
        Validity
            Not Before: Mar 29 05:00:46 2026 GMT
            Not After : Mar 30 05:00:46 2026 GMT
        Subject: CN=c3c0a9d6b012bc43fd86d4ba7cc8bce56d0a8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:87:b5:74:58:39:2a:0e:cf:d9:a6:9d:07:
                    01:64:a9:cc:ac:47:be:d6:91:10:f6:ae:ce:fa:0a:
                    3f:15:0f:b4:ac:e6:80:1d:3e:25:07:24:4a:94:91:
                    3f:e9:59:96:ac:b5:46:f3:3a:8f:12:6d:42:96:9d:
                    0e:93:50:99:18:17:a5:7f:fb:4f:c4:6b:dd:f6:fb:
                    41:f2:9a:c3:ba:96:93:16:ac:21:66:0a:7a:57:fa:
                    20:6f:57:ac:e5:d6:49:0d:ea:de:d2:da:1b:d9:cc:
                    9c:18:7d:ae:2d:af:a4:5b:25:93:f3:6b:fe:b9:62:
                    7b:1a:02:9e:f5:ff:94:f8:5b:0d:99:46:6b:75:4a:
                    6d:d8:5c:56:be:e2:70:50:ca:e8:52:53:cf:65:d6:
                    54:79:21:98:b9:5e:3a:00:f8:83:17:2b:5b:97:bd:
                    50:26:d5:96:d1:f7:04:1d:c9:8d:5d:a8:80:a1:ca:
                    32:20:f4:0b:07:e5:20:34:a3:40:bd:6d:49:2d:e8:
                    df:a0:aa:e3:f7:c4:f9:bb:b3:52:22:6c:46:05:ab:
                    e8:ed:9f:a1:0d:a9:4f:a3:0f:b9:2d:ee:e5:a6:35:
                    1e:9b:29:21:43:c1:26:f7:c5:04:ba:30:69:77:68:
                    c6:92:5f:87:c2:6e:e0:36:57:9a:70:8c:4b:c2:f2:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C0:A9:D6:B0:12:BC:43:FD:86:D4:BA:7C:C8:BC:E5:6D:0A:85:46
            X509v3 Authority Key Identifier:
                keyid:EE:49:9D:74:1C:F7:A6:88:FF:C2:C9:76:81:3D:B7:C5:1E:BC:47:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kmddBz3poj_wsl2gT23xR68R0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/516412-5f5a-4b38-82b7-a6732dcd1398/1/7kmddBz3poj_wsl2gT23xR68R0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:0c:14:ec:7f:16:61:dd:41:9e:da:9d:83:7b:df:9d:79:
         cb:6f:ac:59:23:6a:15:a5:17:34:d8:21:89:e8:a0:13:93:d4:
         77:03:a9:f2:70:d4:58:dc:c8:06:f8:fb:a6:64:a4:9f:c3:07:
         17:09:27:5b:a6:23:00:57:8f:b4:74:84:01:3b:61:d3:65:a8:
         79:f0:21:b6:44:3b:fb:5e:c9:d8:b2:60:a4:e4:81:56:13:6d:
         fc:79:d6:8c:5f:91:48:95:ad:1e:f4:cd:b7:5d:9e:6c:4c:a7:
         20:e3:1b:6e:3c:fc:56:e2:ce:52:4b:21:20:08:d7:40:35:40:
         c7:aa:34:59:62:57:44:b8:21:6d:f9:d1:b8:f1:3b:1d:e8:ec:
         ae:fe:6c:56:49:fa:1d:13:25:b1:d5:27:3e:e7:1a:5c:b6:d1:
         81:44:5d:31:95:45:0b:d8:63:e6:e1:02:1a:68:0b:0b:61:88:
         35:90:be:b2:de:ca:e7:22:93:41:aa:0b:da:f9:7a:19:c9:e3:
         a4:28:30:74:91:54:e0:ff:0b:b5:c1:5b:af:be:7c:1b:ce:fe:
         5a:f4:a6:a4:77:76:15:5c:3c:c8:c2:bf:05:3b:88:89:a5:c7:
         3d:8f:c8:74:ca:8e:cd:04:9c:62:2b:93:93:c2:4f:05:5d:fd:
         f0:fc:98:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390w/G3WuTlunsMxgNbmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDk5ZDc0MWNmN2E2ODhmZmMyYzk3NjgxM2RiN2M1MWVi
YzQ3NDkwHhcNMjYwMzI5MDUwMDQ2WhcNMjYwMzMwMDUwMDQ2WjAzMTEwLwYDVQQD
EyhjM2MwYTlkNmIwMTJiYzQzZmQ4NmQ0YmE3Y2M4YmNlNTZkMGE4NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2OHtXRYOSoOz9mmnQcBZKnMrEe+
1pEQ9q7O+go/FQ+0rOaAHT4lByRKlJE/6VmWrLVG8zqPEm1Clp0Ok1CZGBelf/tP
xGvd9vtB8prDupaTFqwhZgp6V/ogb1es5dZJDere0tob2cycGH2uLa+kWyWT82v+
uWJ7GgKe9f+U+FsNmUZrdUpt2FxWvuJwUMroUlPPZdZUeSGYuV46APiDFytbl71Q
JtWW0fcEHcmNXaiAocoyIPQLB+UgNKNAvW1JLejfoKrj98T5u7NSImxGBavo7Z+h
DalPow+5Le7lpjUemykhQ8Em98UEujBpd2jGkl+Hwm7gNleacIxLwvIM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPAqdawErxD/YbUunzIvOVtCoVGMB8GA1UdIwQY
MBaAFO5JnXQc96aI/8LJdoE9t8UevEdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjct
YTY3MzJkY2QxMzk4LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MTY0MTItNWY1YS00YjM4LTgyYjctYTY3MzJkY2QxMzk4
LzEvN2ttZGRCejNwb2pfd3NsMmdUMjN4UjY4UjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD04MFOx/
FmHdQZ7anYN73515y2+sWSNqFaUXNNghieigE5PUdwOp8nDUWNzIBvj7pmSkn8MH
FwknW6YjAFePtHSEATth02WoefAhtkQ7+17J2LJgpOSBVhNt/HnWjF+RSJWtHvTN
t12ebEynIOMbbjz8VuLOUkshIAjXQDVAx6o0WWJXRLghbfnRuPE7Hejsrv5sVkn6
HRMlsdUnPucaXLbRgURdMZVFC9hj5uECGmgLC2GINZC+st7K5yKTQaoL2vl6Gcnj
pCgwdJFU4P8LtcFbr758G87+WvSmpHd2FVw8yMK/BTuIiaXHPY/IdMqOzQScYiuT
k8JPBV398PyYwA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:25 2026 by rpki-client