Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File:                     7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier:          aI3pcnB8OEZO0CPJqyQBwv/j9ECCkFtcBqJWXtyGkAE=
Subject key identifier:   75:37:A5:08:D1:6A:2A:22:57:64:87:47:57:00:CD:8F:DB:63:7D:25
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer:       /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial:       019CAB349E227ECC547926F8942E60199BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 21:01:18 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:18 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:18 +0000
Files and hashes:         1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: o1XpDhom73bjChia7NnN7QGAExeiAWF2DOMidHL3VXw=)
                          2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
                          3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:9e:22:7e:cc:54:79:26:f8:94:2e:60:19:9b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
        Validity
            Not Before: Mar  1 21:01:18 2026 GMT
            Not After : Mar  2 21:01:18 2026 GMT
        Subject: CN=7537a508d16a2a22576487475700cd8fdb637d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:7b:fb:de:dd:6d:34:38:c5:bc:b2:3a:c6:
                    db:05:0f:93:ca:f8:eb:11:fd:46:52:75:73:89:3b:
                    63:3c:2e:04:20:16:ae:26:54:5a:ea:23:c0:02:e6:
                    bf:54:dc:e9:e6:a4:08:97:41:4e:22:e1:4d:1d:17:
                    5c:2b:22:db:16:a9:d3:19:4b:57:06:9c:a6:bd:b8:
                    3f:b9:09:f2:74:4c:9a:06:7f:53:2a:b8:25:a8:9a:
                    b7:e2:a7:13:d0:2e:1a:70:95:1b:56:f9:4e:1e:57:
                    c9:16:f1:72:0b:a5:7f:60:ad:09:cb:98:b9:f2:f9:
                    8f:50:fa:e9:11:bb:d8:6b:75:51:d9:26:2f:32:b2:
                    76:2b:d6:72:d0:b5:d1:aa:85:88:f9:ef:32:c5:17:
                    6a:1f:32:bd:b0:a6:7f:26:dc:a6:0e:b3:ab:0c:fa:
                    2d:f5:98:60:98:9c:6a:33:4f:c3:0c:83:55:85:b0:
                    d7:80:e2:19:ea:29:a1:b1:cd:c5:bf:35:85:02:5b:
                    25:38:88:59:2d:fb:26:c6:27:18:85:f9:14:89:b0:
                    25:45:f9:c5:51:b6:3e:27:7c:b9:7b:77:57:cd:50:
                    a5:84:95:cc:e0:75:a8:4b:cc:50:53:9b:17:c3:56:
                    29:58:15:81:14:81:7e:fa:a5:25:da:dd:23:8a:c9:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:A5:08:D1:6A:2A:22:57:64:87:47:57:00:CD:8F:DB:63:7D:25
            X509v3 Authority Key Identifier:
                keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c4:e6:d8:f6:eb:c1:62:d6:be:0d:97:4f:61:8c:84:9c:ca:
         01:92:18:7b:e0:d0:3a:fb:8a:2d:35:1d:1e:2d:2b:f7:cd:5f:
         ae:7b:c1:5b:82:d7:81:da:b6:aa:7a:87:00:d1:e2:76:46:fd:
         16:d7:97:28:54:9a:f9:ad:4d:69:34:9a:04:2b:73:27:51:af:
         77:9b:80:69:9a:f0:a6:a1:88:92:c2:7c:26:b8:bc:be:77:2b:
         6f:27:f3:d4:3f:96:64:8e:21:c0:5e:34:bc:b6:08:7a:4d:1a:
         be:d6:b0:d5:38:ff:34:a0:79:f0:55:e6:cf:41:d0:a7:9e:60:
         82:f3:92:fc:31:6f:a3:5c:a2:80:c5:9b:06:e7:57:ef:bf:94:
         bd:2a:e3:57:6a:f5:0c:3d:06:37:b9:07:32:04:44:92:bc:0b:
         f4:80:1b:52:02:27:46:a9:9e:21:73:94:e7:59:94:18:f1:40:
         60:f5:68:2e:b2:e2:4a:a0:ec:15:51:93:c7:d4:a8:9a:7c:8e:
         2e:9b:2a:11:34:ea:d6:72:5b:95:24:72:91:f5:17:53:10:24:
         db:43:ba:9d:f6:77:4f:50:dd:fa:f7:59:27:69:f4:17:65:0e:
         38:3d:80:42:91:13:98:9c:bf:0f:93:7f:a8:bc:5a:4e:4d:17:
         00:df:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:54 2026 by rpki-client