Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          Ey/p7T13mhesMB+04fghH+TgprrOsp+T59k8dgR9hbI=
Subject key identifier:   1F:94:98:97:5E:98:B8:8B:1E:44:48:06:72:A9:3C:E1:FF:3C:AA:CD
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       019D37533F947CDD9407C6409CE8558D6600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 02:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:35 +0000
Files and hashes:         1: 6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa (hash: h6bDcvlLQ2oWH39OehL7j4jN9y68+hpsxgqt/2oRmFc=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: Jxm+CnnFmdHLlNizThQLmDz1fWcxUAeoLpFTHtoykRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:3f:94:7c:dd:94:07:c6:40:9c:e8:55:8d:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Mar 29 02:01:35 2026 GMT
            Not After : Mar 30 02:01:35 2026 GMT
        Subject: CN=1f9498975e98b88b1e44480672a93ce1ff3caacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:38:22:13:68:3b:77:be:15:f8:6e:58:ca:
                    00:19:e1:9d:5e:4d:67:5e:db:56:a2:41:3d:e6:63:
                    ec:63:4f:7e:ef:dd:d9:21:32:10:34:79:96:48:0b:
                    b6:b1:e9:1c:d5:39:72:9e:45:b7:bd:0f:98:6a:fb:
                    56:24:4f:34:da:0a:23:86:8f:70:ab:ac:ec:05:63:
                    21:a9:8f:c7:cb:e4:4b:c5:82:86:a2:b3:e5:9a:43:
                    6e:bb:32:2c:4d:e1:a6:3b:3b:dc:15:f4:46:91:fb:
                    60:4c:93:34:f5:29:ca:32:bd:b2:26:f6:4c:4d:44:
                    cb:0a:22:45:ac:9d:55:fe:16:9f:d2:ce:db:5c:05:
                    fb:75:97:ac:cf:89:44:c6:cf:79:a4:03:c2:ef:3f:
                    28:f3:c3:24:75:1f:61:85:57:2e:d3:95:67:40:ae:
                    0e:73:26:6c:85:bc:2a:90:68:5f:c9:56:8c:f7:73:
                    6b:3f:c7:1f:59:5c:05:20:49:ad:4a:10:4d:6e:ba:
                    bd:4c:d9:81:c5:63:87:31:c3:c4:bd:8e:d1:d5:7a:
                    b3:e2:e8:e8:5d:07:16:ab:82:f0:02:17:8c:0f:c8:
                    7f:f3:d9:96:a6:0b:56:74:3a:63:45:a5:44:77:38:
                    a3:ba:1d:88:88:f3:1b:2c:0b:7d:d2:f1:c9:fd:b8:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:98:97:5E:98:B8:8B:1E:44:48:06:72:A9:3C:E1:FF:3C:AA:CD
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:68:86:82:0d:ab:dd:5e:a6:3d:3b:4e:42:c1:49:78:5a:49:
         3f:52:1f:a4:db:a5:72:5e:4b:3f:41:24:a9:5e:d0:be:ad:1b:
         62:f8:f5:2b:62:64:de:e7:44:eb:23:90:05:7c:0f:19:c4:29:
         4f:ac:2f:61:ff:cd:87:61:6f:4f:de:77:12:7f:a9:3c:12:a4:
         0a:db:2f:9e:98:db:5c:88:32:41:f3:8b:b6:ee:27:44:84:77:
         bc:85:23:46:da:02:e7:6b:bd:60:c5:e7:69:42:05:7e:00:c1:
         13:35:b3:dd:0c:1a:24:d9:b7:9e:f0:32:eb:d1:6d:9a:80:b1:
         25:43:82:90:e6:67:0b:dd:7d:c6:e5:78:df:47:0e:e7:a4:16:
         e9:6c:bf:53:fe:4e:17:e8:17:af:9e:0a:28:f5:14:2d:20:0c:
         03:f8:67:28:74:49:c6:fa:5b:66:d7:2c:6e:88:c5:79:1e:15:
         95:4c:e3:1a:92:f0:aa:c7:f5:cc:41:c0:dc:a2:6d:08:38:45:
         19:a5:05:b2:fa:b3:18:ee:10:23:96:38:d8:73:13:dd:aa:18:
         7d:dd:39:c7:d4:33:4a:3e:59:5c:df:15:c9:cc:6a:2a:24:4e:
         f7:e0:67:2d:01:e1:10:05:a7:13:1e:78:fd:d6:b6:6f:e2:d1:
         6a:6a:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:27 2026 by rpki-client