Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          vI+OdcMwcHOE79XXmjIg/Rn52r8zo/OQUWj/tk5wINQ=
Subject key identifier:   34:6E:7C:E8:41:48:C8:AF:78:28:46:5B:32:6E:44:51:4D:54:72:CD
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       019D38D3C3E4C0809369F15B18D157191F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 09:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:35 +0000
Files and hashes:         1: 15EuThm1G7ihaW_kxeW7GjmrmYA.roa (hash: +6kJt1jbD/vQ5Fm6OPhzciur67EYasE2saqI/B+/SW8=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: 4Bb/LmqXdOTsKGe5FjjYIsVn+uIHb2azpnnu0jfbKgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:c3:e4:c0:80:93:69:f1:5b:18:d1:57:19:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Mar 29 09:01:35 2026 GMT
            Not After : Mar 30 09:01:35 2026 GMT
        Subject: CN=346e7ce84148c8af7828465b326e44514d5472cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:08:ed:3a:a4:fe:de:2e:31:52:cb:d3:ac:
                    59:82:98:0b:6a:17:9d:ab:aa:eb:75:21:42:0d:f9:
                    90:9e:65:c7:e3:08:d0:2e:c7:30:09:e2:53:89:4d:
                    f2:c0:e6:3c:e0:28:11:52:57:8b:5a:87:1a:63:58:
                    f5:ac:b7:6d:46:77:be:1e:eb:19:c8:7a:83:e0:dc:
                    48:25:c7:5b:88:d9:74:8d:98:1e:78:84:d4:cf:77:
                    27:0f:a6:5d:71:7e:77:5a:48:ca:05:09:00:0a:08:
                    d6:e0:31:3b:43:d3:70:a0:88:b4:bd:15:b6:f8:1e:
                    f0:55:a4:87:de:48:5c:8e:9f:64:0a:a3:e8:17:c1:
                    f1:72:57:d8:2a:b0:fd:f1:f0:b1:8c:87:24:87:4a:
                    7a:cd:26:32:6d:d7:cd:3b:12:cd:53:0b:e2:68:d1:
                    88:6d:73:f8:46:05:ee:22:0e:ed:f1:e9:7c:8c:55:
                    c4:44:43:b6:0d:c6:c4:c3:c5:c7:77:5f:65:a3:58:
                    8c:0b:cd:ff:1e:93:ff:57:32:a0:1e:fe:5e:f8:6e:
                    1e:d9:fe:fb:1d:76:16:de:7c:b1:10:bb:b0:8a:85:
                    58:0f:74:6b:24:f7:24:54:f0:15:1b:6b:ac:8a:e3:
                    6a:7c:2c:5d:50:dd:47:c2:9c:f6:7b:93:fe:04:e1:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:7C:E8:41:48:C8:AF:78:28:46:5B:32:6E:44:51:4D:54:72:CD
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:83:fc:7c:85:14:1e:2a:27:cb:48:35:5b:79:d5:95:80:fc:
         17:f6:7c:98:33:20:f2:8a:22:a1:a4:9f:08:f4:06:44:e8:0a:
         95:49:a7:4d:47:89:84:2e:2e:21:e2:d0:86:c9:e3:e6:e0:33:
         d4:30:de:37:da:f0:1a:c6:9e:9e:58:fd:06:d1:47:93:d2:18:
         35:4d:66:c0:74:8a:7a:ac:dd:3f:18:b0:1e:55:44:72:f1:42:
         a8:b8:5c:1f:1c:46:b5:e7:f4:06:4d:55:25:ca:06:80:26:28:
         61:07:fa:bb:02:a3:54:cc:bc:b7:dd:05:e1:17:09:e7:3b:bc:
         b7:46:27:93:1c:36:a8:af:84:50:ad:61:e8:4c:dc:6e:d4:4a:
         a8:d7:55:c9:e8:2a:9b:1c:e5:e3:48:0a:a2:e2:05:5f:ba:07:
         60:6a:50:7d:21:42:09:eb:b4:20:8b:de:b7:df:29:05:35:32:
         fb:df:4b:70:be:a7:50:1d:98:09:f1:b3:7e:44:ca:ce:5f:e0:
         de:58:64:8b:0a:47:2e:35:2f:d4:fb:25:eb:0e:8f:24:31:1d:
         d7:0e:95:c0:1e:1b:e3:af:98:a3:21:22:e6:f5:ce:4c:64:a8:
         ea:11:c1:14:16:c8:1d:f9:c2:0b:42:d3:48:e2:19:bb:b7:a3:
         c5:97:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:05 2026 by rpki-client