Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier:          49opMVWQ9xtAUvW0oYMqCfAwQrIQ0htU7FAjz/xSkfg=
Subject key identifier:   35:0A:E5:EC:A7:CB:61:C8:07:C7:BA:80:88:B3:0C:A6:B6:9B:6E:D7
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer:       /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial:       019D390A32B679A3B2BBFBDB9DC83D87714C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number:          118F
Signing time:             Sun 29 Mar 2026 10:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:02 +0000
Files and hashes:         1: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: RRUsZMn/nOrYRKoql+sWWZPq/IB2SwwLMQsjOZyM9lc=)
                          2: z3yszCqzwzJ9Jw2O0rZj44UQN-8.roa (hash: DJhyA7Sgz3SzUiJuyMTiypAx1/FaY4spXUbShFBqPpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:32:b6:79:a3:b2:bb:fb:db:9d:c8:3d:87:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Validity
            Not Before: Mar 29 10:01:02 2026 GMT
            Not After : Mar 30 10:01:02 2026 GMT
        Subject: CN=350ae5eca7cb61c807c7ba8088b30ca6b69b6ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:9e:10:2a:55:da:d5:cf:5b:96:44:78:5a:
                    70:49:e5:e5:3c:c1:da:30:ca:fc:96:8f:7f:b1:55:
                    a0:71:1b:f5:6a:dc:19:83:f3:40:d0:17:ba:79:8f:
                    fb:90:8f:8f:eb:7f:ab:33:13:2e:0e:b2:06:54:00:
                    d6:ab:38:a6:04:0c:08:d7:7f:92:61:37:79:15:d8:
                    c2:25:42:1c:a5:23:14:55:6e:f0:7f:e4:e7:44:b5:
                    c0:5e:6f:c0:d7:87:17:53:a8:e3:16:56:50:80:bb:
                    0f:6c:ef:97:2b:b3:f0:48:c5:dd:a2:00:d4:c0:0b:
                    6a:e1:87:72:e6:b8:f5:7f:64:b1:cb:be:97:d1:bb:
                    a0:82:43:3c:6e:f5:1e:4b:ad:fc:25:92:71:e9:fc:
                    38:e2:f3:0b:9c:74:57:53:69:47:d6:b6:a5:67:ff:
                    e3:aa:09:39:0d:ae:29:32:2b:aa:1a:7c:d2:95:89:
                    2f:6d:7a:44:42:b3:50:99:b4:b8:c7:91:14:27:9e:
                    64:7f:0a:21:b1:4c:e7:93:9d:ce:73:cf:5a:56:11:
                    3e:f7:a6:f0:ec:74:6e:1a:ae:60:c3:65:fc:df:fd:
                    d4:b9:e0:88:16:65:a0:6b:21:22:d1:6a:22:10:70:
                    8a:87:0e:0d:b8:86:22:27:82:58:d6:f2:b4:b9:7d:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0A:E5:EC:A7:CB:61:C8:07:C7:BA:80:88:B3:0C:A6:B6:9B:6E:D7
            X509v3 Authority Key Identifier:
                keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:be:03:f8:30:f6:36:ea:be:a2:87:a7:92:9d:6b:a7:fc:
         8b:7c:d7:1c:4e:98:3f:d6:ca:db:d8:11:a6:fa:bc:af:95:50:
         76:16:cc:25:71:1b:f5:88:77:64:1b:cd:5a:2b:86:10:39:0b:
         3e:9b:76:35:31:89:b4:4c:de:f1:2e:3b:4f:77:22:75:75:8c:
         74:18:58:f1:fc:00:9e:9d:3e:93:99:a5:97:51:76:45:2a:9a:
         e0:ee:42:74:44:e1:5d:77:21:6a:e8:67:74:12:0d:f0:17:cf:
         67:06:fc:06:46:73:90:21:00:1d:ea:8f:5d:ac:b3:05:ae:ff:
         9e:03:af:1a:c1:d9:8a:d4:2e:83:56:9a:76:6d:41:ae:f8:2e:
         cb:a5:63:10:52:83:6a:e4:b6:e0:5b:72:2c:c2:2b:d3:d1:17:
         52:ea:8e:e4:1f:7d:af:7c:d2:8b:06:8f:27:a5:87:b1:6e:f0:
         58:29:04:1a:b0:14:33:c2:fd:23:44:24:cf:62:ef:2f:55:51:
         ea:53:14:b2:a8:e9:be:86:de:07:0d:db:7d:44:8c:65:68:30:
         42:cf:39:d9:34:fb:fc:6b:05:51:17:b2:9c:73:45:bd:79:85:
         e1:f5:3b:3b:46:ce:1f:af:54:3e:0e:17:25:f0:2e:cd:bb:ff:
         42:da:95:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CjK2eaOyu/vbncg9h3FMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjk3MzQ3YTQwZDNiZGY1Nzg3Y2M3NTNhYzI0MDJkMDgy
NGJmY2IwHhcNMjYwMzI5MTAwMTAyWhcNMjYwMzMwMTAwMTAyWjAzMTEwLwYDVQQD
EygzNTBhZTVlY2E3Y2I2MWM4MDdjN2JhODA4OGIzMGNhNmI2OWI2ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUaeECpV2tXPW5ZEeFpwSeXlPMHa
MMr8lo9/sVWgcRv1atwZg/NA0Be6eY/7kI+P63+rMxMuDrIGVADWqzimBAwI13+S
YTd5FdjCJUIcpSMUVW7wf+TnRLXAXm/A14cXU6jjFlZQgLsPbO+XK7PwSMXdogDU
wAtq4Ydy5rj1f2Sxy76X0buggkM8bvUeS638JZJx6fw44vMLnHRXU2lH1ralZ//j
qgk5Da4pMiuqGnzSlYkvbXpEQrNQmbS4x5EUJ55kfwohsUznk53Oc89aVhE+96bw
7HRuGq5gw2X83/3UueCIFmWgayEi0WoiEHCKhw4NuIYiJ4JY1vK0uX3VMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUK5eyny2HIB8e6gIizDKa2m27XMB8GA1UdIwQY
MBaAFHopc0ekDTvfV4fMdTrCQC0IJL/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQt
ZjhiNDM5ZDA2NjQ1LzEvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQtZjhiNDM5ZDA2NjQ1
LzEvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqO+A/gw
9jbqvqKHp5Kda6f8i3zXHE6YP9bK29gRpvq8r5VQdhbMJXEb9Yh3ZBvNWiuGEDkL
Ppt2NTGJtEze8S47T3cidXWMdBhY8fwAnp0+k5mll1F2RSqa4O5CdEThXXchauhn
dBIN8BfPZwb8BkZzkCEAHeqPXayzBa7/ngOvGsHZitQug1aadm1Brvguy6VjEFKD
auS24FtyLMIr09EXUuqO5B99r3zSiwaPJ6WHsW7wWCkEGrAUM8L9I0Qkz2LvL1VR
6lMUsqjpvobeBw3bfUSMZWgwQs852TT7/GsFUReynHNFvXmF4fU7O0bOH69UPg4X
JfAuzbv/QtqVzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:09 2026 by rpki-client