Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File:                     7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier:          xOXE2dyY1IO8iCX/pV9Uh0/LvVDstC86juDl5UvudGE=
Subject key identifier:   7D:D4:A4:F6:47:DF:5C:8A:83:95:73:E6:BE:F8:27:CF:C2:65:9A:23
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer:       /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial:       019D3977F52594B3C19B8324992CB58B1814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 12:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:55 +0000
Files and hashes:         1: 3OMBkOzT06rmiiUnS5LEcdnXd4E.roa (hash: TjjnmhASdsxVvkkPJGFd8+LbQbz+nLBXswxcPbrOPCQ=)
                          2: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: p5KTS2p+M8YP2Fxq7gJscjAq2f2dhfIB4UzGqXxkMBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:f5:25:94:b3:c1:9b:83:24:99:2c:b5:8b:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
        Validity
            Not Before: Mar 29 12:00:55 2026 GMT
            Not After : Mar 30 12:00:55 2026 GMT
        Subject: CN=7dd4a4f647df5c8a839573e6bef827cfc2659a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:de:0b:07:46:54:83:53:7d:82:10:16:06:
                    66:ed:1a:b5:12:2e:97:74:37:3e:d7:e4:6d:e5:7d:
                    a8:76:ea:0a:51:15:4d:44:48:36:db:3d:2a:6a:bb:
                    62:79:57:94:65:c5:8b:0d:97:06:3f:cb:1b:9c:bc:
                    e5:e9:9c:62:97:a7:61:81:4e:57:c7:b9:4a:d0:14:
                    79:bf:65:16:21:2e:c8:c0:79:eb:ef:4b:1a:cb:7d:
                    01:e3:9a:d5:ce:c1:ef:db:c3:f1:62:3e:f8:29:53:
                    6c:db:47:88:11:df:03:2c:0e:b4:a5:f6:c5:d9:cf:
                    e7:01:d7:40:54:a8:fb:60:78:da:38:e3:15:94:95:
                    55:7e:8c:d6:88:f3:40:fa:09:12:cb:ab:33:d5:24:
                    9b:be:e5:1e:93:b1:72:ed:27:ce:41:12:96:50:68:
                    d3:b0:1d:57:9c:80:56:f6:a5:21:53:34:7f:62:cd:
                    2d:56:dc:4f:fd:6c:73:16:37:80:5e:3e:21:b4:2c:
                    b6:3a:31:05:8a:63:e7:22:5c:4c:76:c9:d5:07:62:
                    9f:46:c4:18:29:0c:38:66:bd:22:79:a0:2b:b3:e7:
                    a3:20:94:a9:f7:58:fe:6b:34:a9:fc:fb:86:87:c5:
                    a3:48:d6:09:63:c8:7e:b9:6a:97:56:71:32:f8:af:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D4:A4:F6:47:DF:5C:8A:83:95:73:E6:BE:F8:27:CF:C2:65:9A:23
            X509v3 Authority Key Identifier:
                keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:7c:67:e8:d5:e4:a0:31:fa:3a:87:5f:c4:ed:54:bc:81:
         0b:14:da:9e:ee:ea:01:26:3f:61:a9:a9:a7:48:3d:4a:cb:54:
         00:44:b3:dd:89:d8:0c:5d:2c:2a:ad:34:ca:e3:55:94:34:a2:
         88:bc:cb:04:73:fb:86:7e:b5:cd:40:92:cc:f7:0b:85:eb:99:
         b3:92:2f:2e:3b:cf:2a:6a:ed:5a:47:eb:df:d9:28:b1:09:3b:
         c2:9c:08:c1:87:99:00:39:40:73:5c:45:83:38:ed:5c:0d:99:
         25:fa:65:eb:8f:ca:3c:ad:f4:41:40:50:bb:09:19:85:90:fa:
         7e:2b:ce:0e:15:71:a7:f0:7d:68:ea:d7:70:2d:37:41:56:78:
         7a:52:3d:83:4e:13:a4:5d:e6:63:5a:0f:17:6e:7f:b9:e1:c7:
         82:3c:d1:fc:32:ce:a6:d5:bc:20:63:6b:dd:44:07:01:0c:c8:
         1c:ab:56:3d:d6:43:52:93:0a:33:91:25:20:c9:b0:36:9d:06:
         a7:5b:aa:78:b3:78:14:5c:cf:0d:65:93:a6:9f:7e:13:07:ca:
         f5:01:92:70:2a:60:cd:3a:d8:31:4e:fc:48:06:40:f1:42:e0:
         c6:52:9b:e7:c2:d4:27:1c:fc:85:35:16:b8:a9:3a:8b:9c:4f:
         5f:ba:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:08 2026 by rpki-client