Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          5JsQ7wUk6fw1WQGEGtrE79kp5jWLxV+mQ29h+6Fvovg=
Subject key identifier:   2F:4B:2A:70:24:BF:63:88:A2:E6:D4:2F:4A:F0:67:34:02:B7:D2:22
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019CDCC4D69CD42B951E2C0C04179D39331F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          E2
Signing time:             Wed 11 Mar 2026 12:00:13 +0000
Manifest this update:     Wed 11 Mar 2026 12:00:13 +0000
Manifest next update:     Thu 12 Mar 2026 12:00:13 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: 3GaRl2jMLKi1s1ozfds7ajx9CqUQr56clolf2KVfJEo=)
                          2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:c4:d6:9c:d4:2b:95:1e:2c:0c:04:17:9d:39:33:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Mar 11 12:00:13 2026 GMT
            Not After : Mar 12 12:00:13 2026 GMT
        Subject: CN=2f4b2a7024bf6388a2e6d42f4af0673402b7d222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:e7:2d:d4:7c:3b:31:85:44:0c:79:ff:51:
                    ac:ab:d7:9e:84:fe:53:2d:f1:1a:59:f3:f3:a4:5e:
                    71:0e:3f:9d:75:5a:35:b4:57:26:d2:2d:bd:f8:8c:
                    f6:2c:96:36:ee:d3:6f:18:45:bc:0c:db:b5:bc:d5:
                    29:11:ea:ea:63:01:78:d4:03:48:30:ae:df:26:8b:
                    3c:09:cf:5b:c6:9f:89:83:6a:f4:ca:fd:8a:00:16:
                    70:bc:0b:e5:a8:73:83:5e:1d:9b:fb:c3:23:b4:13:
                    87:a9:d2:b0:01:9a:1b:b5:41:f2:78:36:79:97:61:
                    b0:5e:08:20:b7:03:78:08:6f:8b:2a:09:9c:63:42:
                    82:4e:2d:ab:b3:bf:c0:23:d6:d1:0c:8a:78:d9:69:
                    6b:fe:6a:b5:e2:72:5f:cc:49:f1:4c:6e:2c:1a:d6:
                    cc:0d:fe:3d:fe:8f:35:62:35:3b:03:5d:a1:d9:b4:
                    54:bb:0b:1c:15:1e:02:e5:90:70:c4:55:3f:44:eb:
                    9c:14:4f:cd:b8:a9:6b:d7:9e:c8:c1:d5:3d:c8:3c:
                    49:d4:2c:57:99:c0:5c:68:38:f0:9d:74:94:b6:bb:
                    77:ae:a5:7a:f2:14:49:92:46:21:00:90:fc:62:ab:
                    9c:ad:c7:ac:f9:92:01:a9:d2:b0:eb:e5:3c:7e:09:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:2A:70:24:BF:63:88:A2:E6:D4:2F:4A:F0:67:34:02:B7:D2:22
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3d:82:a2:ff:3b:fa:bb:35:3d:a5:e3:17:be:3c:b4:57:92:
         41:b4:67:a8:29:7c:57:30:c2:e3:a0:ed:09:af:27:0e:a6:d5:
         2b:0a:54:fc:71:e8:c3:5a:3b:26:33:b9:c6:c8:01:59:a7:a3:
         eb:81:de:40:e5:1c:e2:47:35:ff:5e:df:31:36:8c:f0:39:6a:
         05:c3:98:3c:e6:a6:71:15:82:b8:e6:0a:8d:b3:3e:92:7b:57:
         42:8c:28:e3:f3:da:82:42:33:1f:3d:62:79:4c:48:bf:9d:64:
         2b:09:b4:1a:70:1b:c9:d6:bf:ff:da:c6:dd:f5:bf:c4:7d:4d:
         ec:1c:60:d2:ce:a8:0f:5d:60:4c:76:ad:e4:3d:42:b6:ec:ff:
         70:36:0e:7a:8a:36:73:83:c0:e7:f1:4f:cb:21:b1:14:b9:bf:
         e0:c5:43:66:33:2e:82:22:f7:5b:38:7b:fe:f6:fe:75:6c:99:
         fd:f2:d9:e7:27:bc:71:0e:c4:3b:d7:77:65:08:ec:d7:05:14:
         bc:bb:77:c7:e4:84:02:19:e3:84:54:05:81:e9:cc:d6:9b:a9:
         0a:e6:53:31:55:5b:df:8f:9f:06:5b:db:b7:ba:2b:dd:e6:ba:
         8f:af:00:5a:42:60:ef:f0:aa:72:32:03:24:7a:d3:0a:59:96:
         eb:f9:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 17:12:33 2026 by rpki-client