Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          BPkGOSqrQyqOrvhCBRrt1WyqK91V0nYx25CiHogRVz4=
Subject key identifier:   30:B7:39:62:38:B3:16:5C:70:2C:FE:D4:81:6D:FE:B4:1A:72:37:15
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       019CCA5240C95BA876F0BA6C04FD5C2631A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1360
Signing time:             Sat 07 Mar 2026 22:01:53 +0000
Manifest this update:     Sat 07 Mar 2026 22:01:53 +0000
Manifest next update:     Sun 08 Mar 2026 22:01:53 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: dH/2ZyYuxaBPxt3XA/s20ZQZu2jFOp8jHoOyENfBt9s=)
                          2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:52:40:c9:5b:a8:76:f0:ba:6c:04:fd:5c:26:31:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Mar  7 22:01:53 2026 GMT
            Not After : Mar  8 22:01:53 2026 GMT
        Subject: CN=30b7396238b3165c702cfed4816dfeb41a723715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:8e:f5:f1:9c:c4:20:02:1d:41:0e:54:e1:
                    ae:f4:4f:2e:2d:77:8c:00:01:13:f9:1c:27:5c:50:
                    87:88:0c:05:ed:cb:7f:94:36:a3:0a:0c:64:1e:0d:
                    1c:4b:5b:b6:3a:28:9a:30:4a:c5:64:f5:0c:f8:38:
                    b7:ae:72:24:e5:15:62:6d:45:81:bd:f8:8b:f1:41:
                    e5:2e:4a:e4:c4:d8:6b:5e:99:c5:e9:36:8c:14:b5:
                    06:6c:e7:e9:f2:69:d1:6a:ab:d4:26:e5:82:20:d6:
                    db:bd:61:46:38:19:f9:96:65:82:5d:f1:2d:46:27:
                    d7:81:2d:54:15:28:02:40:ae:6e:c8:07:f2:0e:36:
                    e2:d9:b4:10:ae:2a:43:ad:f3:b6:8a:19:b4:ee:cd:
                    6e:3f:22:de:d1:ea:f5:a5:9a:68:53:1a:4e:63:5b:
                    d9:5c:8e:20:95:48:4e:a2:d4:da:17:9e:8d:21:f2:
                    3b:40:f2:e5:6b:6b:c6:49:08:d0:3a:05:2b:eb:90:
                    14:20:c3:9b:b0:79:73:b3:8c:4f:29:68:b1:31:aa:
                    dc:74:4b:9d:03:65:a7:32:c0:de:dd:2e:3e:47:0b:
                    e4:ff:3f:68:34:17:12:e8:df:de:8a:64:fa:71:26:
                    7b:9e:21:79:a2:7f:5b:28:f8:91:dc:ce:42:26:54:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B7:39:62:38:B3:16:5C:70:2C:FE:D4:81:6D:FE:B4:1A:72:37:15
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5c:3f:cd:57:57:1d:23:52:5c:5a:53:87:79:ee:e1:5d:e9:
         a8:ee:8e:e1:ec:15:ef:f2:cf:78:51:ed:1a:70:03:5f:c8:3c:
         a8:0f:09:a1:07:fa:69:05:d7:1e:9e:9b:16:b6:be:47:c7:58:
         c6:f1:d0:a3:d6:85:32:b4:98:d7:8a:b6:ac:db:bf:4e:18:ee:
         80:06:8e:a2:24:ba:5e:e2:96:a1:ac:62:26:49:83:19:fc:7e:
         43:34:61:8b:df:9e:7f:a1:a6:cb:ce:3d:45:de:3a:1d:38:7f:
         50:3b:e0:c7:5d:2c:fd:4d:0b:b0:47:37:6f:91:92:d1:d5:cc:
         dd:26:c9:1e:6f:e4:65:5e:a8:02:26:e1:ee:87:fc:79:62:72:
         d4:ac:09:b5:a6:b0:06:4a:ba:7d:9d:b0:f6:55:27:b1:08:3b:
         42:7b:4f:76:58:26:57:d8:8d:f8:f2:93:15:8d:7d:99:ff:39:
         fa:77:c0:26:e9:d2:1e:e9:35:90:82:46:2f:35:80:03:d7:ea:
         6a:c9:7a:15:d3:aa:b4:91:43:fd:4b:c8:81:ae:49:0b:75:ab:
         ba:55:e5:57:23:55:6b:3f:da:7f:ab:28:b5:69:2a:cf:90:38:
         a3:88:4b:f9:5c:78:59:88:73:da:c5:9f:5b:da:0d:45:25:b5:
         3a:73:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:02 2026 by rpki-client