Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          uOgR1dhEhs5i0nZyks/w2SgFExQtCKpOIsqi2MVKA1Y=
Subject key identifier:   1C:F8:97:0B:12:54:11:4B:79:94:69:F4:40:70:37:EC:3D:53:B6:5F
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       019D3789806DB297D6AA82811DFACE73B0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 03:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:51 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: VBjXJDCG4kJ5L85Yn6O3kgxHSLWTmOwO3TTR3U9mro4=)
                          2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:80:6d:b2:97:d6:aa:82:81:1d:fa:ce:73:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Mar 29 03:00:51 2026 GMT
            Not After : Mar 30 03:00:51 2026 GMT
        Subject: CN=1cf8970b1254114b799469f4407037ec3d53b65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:25:2e:d3:73:3b:75:99:66:10:44:2d:86:
                    7d:1f:8c:bb:d9:31:5e:c0:fa:d3:9b:78:ac:fc:f3:
                    83:9c:aa:7a:bc:dd:20:1d:c1:72:d6:b0:1e:97:1f:
                    5b:cc:e2:f1:f0:6a:07:31:43:68:5a:9b:aa:62:07:
                    af:c7:f7:19:ec:80:71:e1:72:39:9a:95:25:b9:ff:
                    70:56:f2:4c:c1:c8:4a:c8:56:2a:4c:4b:af:09:bf:
                    6e:b7:2d:1d:9c:5e:3d:29:5d:cf:a5:ac:e0:38:19:
                    60:58:ae:e4:99:96:49:40:8a:d9:3c:47:3b:64:5c:
                    47:b6:e6:98:20:8f:21:a0:5c:32:9f:95:d3:f4:a6:
                    83:16:05:dd:68:28:c9:c2:df:3e:a0:c5:91:07:37:
                    90:98:e3:fc:dc:44:8d:c8:77:b7:c5:8b:3d:7f:ab:
                    f2:4c:db:c5:17:0d:db:83:10:06:28:86:ca:a7:2d:
                    8e:a6:da:e1:14:9e:3d:2d:c5:17:3f:a1:51:1e:5a:
                    9c:e9:01:b2:bf:c1:1b:fa:81:94:d5:b6:7f:45:e0:
                    97:53:13:a4:45:ce:e2:84:d7:a9:94:c2:45:cc:66:
                    63:3f:0b:35:c9:e2:7a:5d:20:e1:c5:bd:2d:01:e4:
                    56:cc:43:bb:e7:55:30:f0:49:8e:31:61:01:e7:dc:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F8:97:0B:12:54:11:4B:79:94:69:F4:40:70:37:EC:3D:53:B6:5F
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c5:8a:46:1f:67:a2:4b:c2:bc:2c:31:cb:2f:a0:e6:89:13:
         f8:ae:ea:19:b3:8e:90:5a:59:9b:c3:5c:69:7a:6f:bc:7d:54:
         2c:03:f0:f1:34:64:24:26:00:be:83:25:59:df:cc:b3:3f:9f:
         7a:ed:30:2c:21:33:c1:7f:3f:dd:19:1f:e8:e4:64:33:93:5c:
         a9:c7:a6:15:47:ff:a6:02:10:c6:1f:10:e1:57:4e:c6:65:cb:
         19:b0:5b:37:29:f9:91:c2:a3:02:aa:da:cf:dd:96:c5:0e:90:
         40:2d:78:a3:af:6b:f1:5d:a3:a9:70:52:d3:c3:df:1f:8c:e0:
         ab:fb:86:17:bc:e2:12:0b:d9:4f:20:da:d8:ee:55:59:50:c9:
         e1:a0:99:2a:24:60:d8:19:00:5d:1b:ff:45:f9:a9:c3:e4:fb:
         b7:7c:47:3f:38:22:3a:31:b9:40:65:d3:f5:34:37:c8:e0:2a:
         92:fd:7b:ca:0d:e4:d1:a8:96:e2:b0:de:93:7d:70:cd:e3:1d:
         c0:15:62:92:58:83:d9:1d:28:65:2f:e4:6c:72:bf:29:0e:4c:
         ae:5d:a6:09:86:f7:6d:a6:ec:2a:03:98:47:74:1f:12:41:d8:
         73:65:21:d6:75:82:18:c4:89:4a:c0:d4:55:ef:57:3f:f2:b6:
         13:4e:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:22 2026 by rpki-client