Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File:                     7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier:          ReHbJQ0ngb5g3LS1FXREwAPC+2OddJsT2JSSeysHmiI=
Subject key identifier:   BD:3F:44:D0:1E:A7:E1:C8:DF:B4:97:6C:5D:4B:27:42:53:EA:05:C9
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer:       /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial:       019CAAC6DF0048E9806212AD34912FEAD1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:25 +0000
Files and hashes:         1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: sJQknfJKW0ZogruGDvQE+EnhFc12HEO0lJw9oXdlR0E=)
                          2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
                          3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:df:00:48:e9:80:62:12:ad:34:91:2f:ea:d1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
        Validity
            Not Before: Mar  1 19:01:25 2026 GMT
            Not After : Mar  2 19:01:25 2026 GMT
        Subject: CN=bd3f44d01ea7e1c8dfb4976c5d4b274253ea05c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:4c:1f:6b:fa:b0:13:99:61:cc:3e:70:41:
                    fd:5b:29:fb:2e:a8:73:b9:d0:52:e9:b9:4b:8f:6e:
                    f4:eb:74:a5:7f:0d:ea:64:85:05:57:20:8a:90:93:
                    9c:cf:41:6e:07:0f:4e:79:12:4b:ab:4d:d8:f7:8a:
                    94:50:0d:64:26:8e:ca:46:8d:36:22:21:80:ee:00:
                    24:18:d3:2d:79:88:c8:97:16:0d:4b:d0:c1:14:2d:
                    47:fd:df:80:8a:fd:4e:cb:c6:10:57:89:7a:52:e2:
                    1d:b6:57:7e:42:f9:f4:f9:16:ee:e6:8e:f3:62:e7:
                    94:29:4b:1f:50:1b:cf:a4:d7:62:cb:75:c9:27:43:
                    41:02:5a:5b:c6:98:7e:ff:a5:1b:7e:b2:70:1e:60:
                    c2:ab:4c:8f:85:68:00:a7:aa:9a:7c:3a:1e:70:2b:
                    53:1d:d4:a3:0e:77:f5:d9:a9:9a:13:4a:20:45:7a:
                    18:36:d4:87:68:02:37:af:65:57:bc:31:7e:94:46:
                    20:1a:40:bc:68:99:f7:11:fb:e2:88:76:f1:76:8a:
                    c0:6b:05:34:3f:b4:da:ac:b9:3e:39:ca:4c:04:4b:
                    72:dd:18:dc:b6:14:a8:ea:5b:fd:83:25:8f:e3:a9:
                    2a:9c:08:16:fd:7a:b0:7d:7d:25:a8:15:d5:3e:f2:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:44:D0:1E:A7:E1:C8:DF:B4:97:6C:5D:4B:27:42:53:EA:05:C9
            X509v3 Authority Key Identifier:
                keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:51:dc:a3:3b:ee:81:30:7f:9e:f3:2c:f7:1a:62:75:33:96:
         6b:69:6e:c3:93:cc:9b:0c:79:e4:dc:e6:7a:ae:8c:40:36:c8:
         e2:5d:5a:4a:9e:a1:44:75:4a:6c:64:7d:c8:f2:ac:95:3a:70:
         8e:04:08:c5:e4:e4:23:54:87:49:17:b6:7b:84:92:2b:d9:2b:
         fd:73:4b:5f:e6:3a:69:74:ed:1e:df:18:c3:0b:a1:4a:f7:49:
         f6:a5:17:7e:c3:3b:42:06:b5:33:2d:0c:af:3a:4d:75:a4:7d:
         5f:5d:de:2d:49:85:b3:3a:b9:6f:6f:9a:9c:83:0b:6e:96:cc:
         6b:87:d4:b3:59:e2:97:72:da:7f:38:31:a7:b3:de:2e:9a:67:
         89:75:c7:a0:f7:02:66:cc:d2:f3:da:8b:b4:d6:f1:01:a9:22:
         82:f7:dd:39:b2:a8:92:27:e8:d0:36:3f:46:18:c7:ec:96:8f:
         63:d0:7f:fd:fe:94:df:31:d2:e3:9d:87:a6:da:33:9b:6e:96:
         8e:dd:d3:0b:ca:1d:d0:bd:eb:2c:22:c2:91:f7:77:3c:6b:5d:
         54:f0:8b:b9:1c:7b:fe:eb:50:b7:aa:8e:23:a0:ac:f5:5e:8b:
         93:27:3b:81:89:45:56:65:ac:0d:3c:0a:a2:b7:70:2f:1d:f8:
         3f:69:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:32 2026 by rpki-client