Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier:          85hzs43qF5kEJucc05JDl6kxxbC4p7cJlnvjD21ChxA=
Subject key identifier:   01:91:76:42:87:45:4F:77:B0:73:A7:2A:18:DD:0A:F0:31:AA:BE:09
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       019D37C047102FAF08337F665F72BED61419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number:          1821
Signing time:             Sun 29 Mar 2026 04:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:41 +0000
Files and hashes:         1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: gYDslbAcmo/cBS6TpNwW1NJXUN37WXYfbsT1SVhKUxo=)
                          2: kZTziAa0DgXcVz_jjt8ocyWshEA.roa (hash: k50z4fUJByZtjEgPsuwfKj4Iy/ObhXOJlHABsB/DwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:47:10:2f:af:08:33:7f:66:5f:72:be:d6:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: Mar 29 04:00:41 2026 GMT
            Not After : Mar 30 04:00:41 2026 GMT
        Subject: CN=0191764287454f77b073a72a18dd0af031aabe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:02:5c:5e:db:32:0a:e7:43:3f:3e:82:ec:
                    59:2c:9f:c4:36:ce:ae:c8:0a:ad:a3:e2:54:03:b8:
                    f8:83:15:3e:b2:c5:ae:12:ee:8f:b9:68:ef:62:7b:
                    09:f6:4d:08:c5:54:68:8a:11:c7:ff:3c:b2:57:32:
                    33:96:d3:ea:17:1c:25:06:f1:a0:d5:12:0d:c5:ea:
                    db:93:a4:42:6c:d1:56:12:e7:45:c0:7a:86:1b:29:
                    50:2a:08:00:b2:aa:4e:60:d5:64:2a:7d:60:65:4e:
                    6a:3a:02:b8:fd:da:08:77:61:6e:97:f0:1b:6a:27:
                    2f:de:b9:9f:75:8e:14:11:6a:6d:2f:e8:9c:e1:bc:
                    64:88:10:49:ea:35:e9:5c:9e:de:4f:6f:a2:71:9a:
                    32:dc:c8:a9:fc:83:12:4f:4b:bc:e8:14:b4:e0:f1:
                    a6:25:e6:18:df:f1:da:55:e8:f6:7a:56:3a:88:a2:
                    ac:a6:10:7a:7a:fd:e3:70:46:e2:33:8c:b0:dd:92:
                    aa:31:0a:af:05:72:bb:24:40:7d:86:52:84:81:53:
                    83:ca:56:c1:13:9c:5d:c9:b4:51:e8:f8:25:46:2f:
                    24:2b:1e:26:07:dd:c2:1c:b2:f7:18:ab:64:df:ab:
                    f4:e0:21:56:5e:54:77:13:2a:d0:4b:40:12:51:ea:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:76:42:87:45:4F:77:B0:73:A7:2A:18:DD:0A:F0:31:AA:BE:09
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:13:0d:99:ff:de:50:16:ae:16:c9:e0:6f:3b:b2:34:81:
         cb:b2:1c:1d:d2:b1:93:77:c0:8f:d7:54:d1:a1:95:02:5d:e2:
         b0:44:02:64:fd:18:41:b0:7a:8d:df:4d:58:c2:3b:06:03:b1:
         67:21:27:1b:a0:eb:9f:38:95:5e:a5:c6:4d:da:ef:78:3b:bc:
         a1:ad:c2:3c:87:56:3d:9e:87:18:2e:49:12:88:55:27:9a:56:
         f3:5e:81:dd:aa:e6:21:f9:31:71:ec:6b:fb:3d:68:8d:cb:55:
         1f:d4:99:8a:43:9d:71:62:ab:b4:9e:37:48:92:b2:ec:1b:b7:
         e6:cc:93:c6:78:88:d0:13:cf:62:71:09:3f:cd:13:4a:9b:fb:
         b6:6b:b9:7f:fc:3c:94:cd:a0:b0:9c:ac:88:e0:47:9a:b5:d4:
         a3:71:02:7c:2a:c8:4b:a8:f5:3c:11:30:6c:bc:a2:ff:45:d1:
         bd:bc:6f:75:c2:33:c9:1a:18:0a:f0:af:38:27:e3:2e:52:de:
         d0:67:1e:cd:3a:47:86:7f:ed:f4:47:2a:05:eb:bc:70:5f:09:
         6c:34:dc:93:c0:ad:59:a5:50:f8:3f:10:3a:71:25:cb:d6:fa:
         d2:33:a8:66:d9:6e:ba:31:07:43:25:1c:a4:d2:72:0f:31:bf:
         b4:4f:5d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEcQL68IM39mX3K+1hQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDQ4MmMyYmVlODQ2MDA0OGQ4MjkwMmNlYzk4NjcyMDUy
MjI5OTcwHhcNMjYwMzI5MDQwMDQxWhcNMjYwMzMwMDQwMDQxWjAzMTEwLwYDVQQD
EygwMTkxNzY0Mjg3NDU0Zjc3YjA3M2E3MmExOGRkMGFmMDMxYWFiZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjcCXF7bMgrnQz8+guxZLJ/ENs6u
yAqto+JUA7j4gxU+ssWuEu6PuWjvYnsJ9k0IxVRoihHH/zyyVzIzltPqFxwlBvGg
1RINxerbk6RCbNFWEudFwHqGGylQKggAsqpOYNVkKn1gZU5qOgK4/doId2Ful/Ab
aicv3rmfdY4UEWptL+ic4bxkiBBJ6jXpXJ7eT2+icZoy3Mip/IMST0u86BS04PGm
JeYY3/HaVej2elY6iKKsphB6ev3jcEbiM4yw3ZKqMQqvBXK7JEB9hlKEgVODylbB
E5xdybRR6PglRi8kKx4mB93CHLL3GKtk36v04CFWXlR3EyrQS0ASUepo0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGRdkKHRU93sHOnKhjdCvAxqr4JMB8GA1UdIwQY
MBaAFO3UgsK+6EYASNgpAs7JhnIFIimXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2Ut
OWQ5MDkxYmVkOGQ3LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2UtOWQ5MDkxYmVkOGQ3
LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2sTDZn/
3lAWrhbJ4G87sjSBy7IcHdKxk3fAj9dU0aGVAl3isEQCZP0YQbB6jd9NWMI7BgOx
ZyEnG6DrnziVXqXGTdrveDu8oa3CPIdWPZ6HGC5JEohVJ5pW816B3armIfkxcexr
+z1ojctVH9SZikOdcWKrtJ43SJKy7Bu35syTxniI0BPPYnEJP80TSpv7tmu5f/w8
lM2gsJysiOBHmrXUo3ECfCrIS6j1PBEwbLyi/0XRvbxvdcIzyRoYCvCvOCfjLlLe
0GcezTpHhn/t9EcqBeu8cF8JbDTck8CtWaVQ+D8QOnEly9b60jOoZtluujEHQyUc
pNJyDzG/tE9d3Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:01 2026 by rpki-client