Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          tq3/u0MYnaTrO26wwRd00ZsPTDxd/mf5v1Y9jV+j/cU=
Subject key identifier:   7A:DF:29:01:05:7D:9D:5B:3F:0E:E7:7C:00:E5:04:39:16:2A:D0:DC
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       019D397772E0C10F24B274F90BE237EB9D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 12:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:22 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: uqsAITd4u8emz7NKqt5o3fwZ6L+BkJs6hoao1m0mCJQ=)
                          2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:72:e0:c1:0f:24:b2:74:f9:0b:e2:37:eb:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: Mar 29 12:00:22 2026 GMT
            Not After : Mar 30 12:00:22 2026 GMT
        Subject: CN=7adf2901057d9d5b3f0ee77c00e50439162ad0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:35:cd:da:18:17:1d:a8:8f:2a:ef:ee:8d:
                    f7:e6:a1:d7:9b:50:33:1b:f1:98:ee:f4:15:99:bb:
                    ff:58:99:cb:ac:75:5f:89:2e:a2:da:34:91:62:62:
                    85:f8:70:78:dd:fb:97:13:05:a5:ad:1d:f8:6c:4d:
                    7b:ba:4f:8d:c1:9b:22:9d:c5:0e:24:16:6c:ca:ee:
                    5c:2c:b1:d9:3a:4e:8d:d5:97:58:41:2b:16:f6:b6:
                    0d:c2:05:f7:11:c8:d2:03:e4:58:a8:9e:06:a2:0d:
                    c8:92:09:d5:7b:d9:af:c8:70:35:00:73:c0:1f:87:
                    88:58:7f:ad:51:22:e9:d7:63:bf:00:ae:e1:16:b2:
                    8e:3e:64:b0:7e:aa:58:b8:f6:7d:e3:b5:59:1a:73:
                    f8:e0:8a:9b:25:8f:b9:9e:76:9f:c1:ac:6c:4b:0d:
                    41:b6:30:73:67:d6:34:13:40:a0:3a:2f:54:97:11:
                    72:0b:23:85:52:66:8a:c0:2c:28:d5:4e:84:a2:13:
                    c4:14:fa:7d:3e:0f:95:dd:e4:a5:89:67:11:61:66:
                    ee:08:8b:65:e8:13:9b:a8:2c:3d:81:45:a9:3a:42:
                    3f:f0:32:68:8f:d1:ad:8e:62:21:ec:70:b1:e2:be:
                    e1:0f:1f:41:76:d1:17:88:0f:d1:b6:47:66:04:c5:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:29:01:05:7D:9D:5B:3F:0E:E7:7C:00:E5:04:39:16:2A:D0:DC
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:c1:16:b8:63:ff:2f:c3:87:25:f1:5e:d7:a5:4f:a6:4e:
         0d:98:2e:89:5d:41:d9:88:4f:13:9b:74:93:aa:e3:9f:1f:e8:
         f3:c7:fe:da:bc:0b:1f:e1:0b:d9:82:3a:cb:63:4e:24:06:59:
         6d:76:17:52:bd:92:b6:11:dc:36:c2:be:9b:44:4f:4b:d2:80:
         81:8a:fd:32:2f:2e:75:e5:bf:e8:32:0a:cf:77:15:95:3b:f3:
         79:a3:96:a0:f5:be:ac:58:c6:a8:91:49:7a:5a:c5:68:d2:4f:
         ee:64:f7:a7:8f:91:ee:7f:69:a4:8c:22:7b:e2:99:02:10:55:
         43:3e:8e:3d:d9:25:1d:6a:5a:67:59:39:c9:76:77:54:2d:7c:
         ce:4d:1d:22:48:02:dd:a0:75:c9:bc:b1:1b:1c:f9:15:86:b8:
         d8:36:d4:e3:ba:7e:b8:4c:bc:b6:57:bb:7c:ce:18:e0:a6:07:
         64:1f:18:cf:08:0d:2e:35:8c:0d:e9:fb:03:b0:07:8f:33:0a:
         48:17:b5:6f:2a:ce:35:15:94:b0:fa:8b:8f:c0:78:bf:ed:69:
         aa:9b:da:80:f1:3d:43:5e:96:82:96:a6:48:39:6b:9b:b4:fd:
         10:8a:70:8f:13:ad:b4:c3:62:9f:b9:9f:00:76:3d:bb:60:75:
         3d:25:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:10 2026 by rpki-client