Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          L41ufURM8c1Y7plCbrPY0ac/R9nvUIUbDYatFJe2mz0=
Subject key identifier:   B6:C4:8E:42:EB:6B:2E:31:C0:12:3E:ED:FE:EC:13:85:EE:99:B0:40
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019D38D2C966D2EFBCA758EA6AEC7F475FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          1822
Signing time:             Sun 29 Mar 2026 09:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:31 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: jPWUFh85WzV0MSU1a/anRXPSYovcELsJnlPuzNBdsPk=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:c9:66:d2:ef:bc:a7:58:ea:6a:ec:7f:47:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Mar 29 09:00:31 2026 GMT
            Not After : Mar 30 09:00:31 2026 GMT
        Subject: CN=b6c48e42eb6b2e31c0123eedfeec1385ee99b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:66:01:2d:07:54:df:cd:d3:e2:01:e7:f9:
                    58:b8:97:0b:fd:39:9c:8d:b4:06:e8:db:6c:65:a4:
                    ce:48:da:83:96:7a:be:49:88:dd:58:9d:1b:77:7b:
                    2e:c7:ce:49:fb:0c:49:3e:27:8e:a0:cb:c9:62:54:
                    3a:b0:d0:99:ff:cf:94:87:e3:20:77:be:01:b8:f0:
                    3a:0a:a9:99:62:ef:3d:4e:01:2b:bb:51:f0:06:d5:
                    c9:d4:41:f6:85:78:9b:a7:33:39:f6:c9:00:c8:3a:
                    03:66:84:81:8b:40:8f:fc:d7:9f:f1:8e:df:a7:2b:
                    c4:a6:da:ef:b5:f6:82:dc:f4:29:57:30:ec:9d:df:
                    47:d7:99:f3:c9:9c:8c:b0:f8:ca:78:45:86:f7:bc:
                    c8:17:0d:b5:1b:a3:35:c4:d1:b7:1b:43:10:f0:18:
                    7b:03:ef:be:4f:f5:c9:ea:9c:78:be:b0:31:99:5e:
                    bb:7d:87:a6:c4:d6:da:a7:2b:00:c6:93:da:a9:30:
                    3d:d0:a9:64:37:f4:c3:c2:3d:73:8b:11:bc:fc:2f:
                    da:f7:de:69:22:1a:ba:2c:43:1b:42:89:5c:ac:45:
                    33:4d:7a:8f:05:8c:2a:6c:9c:dd:32:b3:42:8a:46:
                    cd:d4:02:a1:76:09:b6:11:30:de:d6:2f:76:c2:7c:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:8E:42:EB:6B:2E:31:C0:12:3E:ED:FE:EC:13:85:EE:99:B0:40
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:0b:84:ab:a6:41:13:07:2a:de:b3:ce:1c:21:1f:1e:e3:
         14:3b:c7:eb:c5:80:8a:d8:d9:df:83:d6:2f:a4:6c:da:43:23:
         33:24:e5:65:bc:be:82:e2:bd:8d:c9:f8:7a:b3:a1:b6:12:5a:
         72:c4:5c:c1:11:d5:75:0f:e4:a6:50:49:54:6c:a1:e1:6a:4b:
         96:f9:d2:87:7f:21:f9:81:c8:ce:7a:c5:e2:36:b0:c0:9c:eb:
         8a:c2:cd:6d:71:a3:af:33:33:81:16:ae:18:b5:d0:95:53:e2:
         39:4a:7c:df:af:2f:c3:42:2a:ff:5a:7c:cc:b6:b1:4b:41:9f:
         d3:86:ad:cf:04:d7:d8:2f:08:60:4d:44:01:40:fe:01:55:c3:
         3b:aa:fb:a6:3f:37:b9:d6:c8:40:d8:ce:37:2d:c0:fe:50:db:
         22:9d:89:aa:77:d5:d2:92:3d:92:99:13:56:67:99:ed:86:0b:
         34:6d:67:3d:26:ff:37:c8:a9:32:f4:c6:ef:52:55:e0:5d:f4:
         6c:7d:18:2d:03:bc:97:30:47:86:ab:fe:38:b3:e8:2a:f4:24:
         6a:a3:38:89:12:38:70:d5:a5:7e:34:0c:e7:0a:85:11:68:df:
         6f:f6:fa:9e:05:cf:3e:c9:8e:b7:01:53:65:b9:c8:e3:66:9e:
         5b:66:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:21 2026 by rpki-client