Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          Tlod1VNfAoem2CetqVQJMBp7yPTkqgmHIfIvBEQPu+4=
Subject key identifier:   36:20:22:97:59:29:45:98:A5:1C:29:AA:18:58:5E:D5:D6:04:15:BD
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       019DCF74EC9EF41ABDEA640D4C599BCF115A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          179F
Signing time:             Mon 27 Apr 2026 15:00:39 +0000
Manifest this update:     Mon 27 Apr 2026 15:00:39 +0000
Manifest next update:     Tue 28 Apr 2026 15:00:39 +0000
Files and hashes:         1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: cRmAEpUSz1+Gooc7H3zORrsMH1Etc1JHL0AL2jtp2eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:74:ec:9e:f4:1a:bd:ea:64:0d:4c:59:9b:cf:11:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Apr 27 15:00:39 2026 GMT
            Not After : Apr 28 15:00:39 2026 GMT
        Subject: CN=3620229759294598a51c29aa18585ed5d60415bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:cd:c1:e2:3e:f9:9b:61:05:04:4e:2f:3b:
                    01:0d:77:6e:67:cc:c0:21:96:1f:2a:94:b7:0b:41:
                    da:57:4b:02:11:e9:6a:c5:81:d2:45:e4:ea:de:e8:
                    14:da:37:53:29:d7:0f:02:d2:fc:77:74:bd:dd:5d:
                    0d:91:a3:39:bc:65:2f:19:e0:2f:27:af:b6:b8:a9:
                    33:bb:39:eb:cb:19:f9:1f:66:c5:db:33:c5:9b:64:
                    d0:da:9c:1a:0a:dc:b2:3d:33:26:2a:b6:80:16:cb:
                    b2:39:c1:79:1a:34:80:c7:50:00:68:6f:89:3e:9d:
                    1a:cb:f4:53:91:6f:84:37:7e:89:e1:65:cb:6e:3d:
                    c0:7d:68:03:ad:70:b5:86:73:7b:9b:e8:d2:57:b7:
                    29:8e:c6:d0:d1:4e:a6:1e:4c:f3:4b:28:42:03:ba:
                    67:70:56:85:4f:f3:2f:d5:ba:9f:e9:da:44:7e:f8:
                    e1:71:9e:2d:52:13:da:a7:39:46:e2:d5:af:fc:3c:
                    b2:58:02:5c:0e:04:f3:cd:42:07:12:92:d3:57:24:
                    94:4e:7f:dd:90:94:0a:81:0a:8c:96:c8:c0:34:51:
                    85:dc:36:df:37:dc:76:2b:a0:ca:d1:47:32:d2:e5:
                    9a:7b:b8:6f:8a:f9:89:88:21:ad:6b:4a:6a:e2:a2:
                    d8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:22:97:59:29:45:98:A5:1C:29:AA:18:58:5E:D5:D6:04:15:BD
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:61:39:b2:71:d7:41:93:6d:e3:34:71:f6:84:6b:ad:20:
         2d:51:af:09:32:c0:bd:66:93:2e:68:33:fc:da:8d:6e:8b:ee:
         ea:bc:31:90:a9:0d:99:f4:19:cd:d4:70:34:bc:c4:88:fe:2f:
         55:77:40:e9:61:4b:0d:d6:73:b9:f9:05:b3:da:a1:10:e7:b3:
         3a:1a:43:16:e7:3f:ee:42:fe:95:1d:c1:95:08:ce:76:92:8e:
         28:6e:ad:12:c8:0b:86:c1:51:0b:53:25:68:a2:c5:40:7d:3a:
         0b:1c:a2:f4:6a:62:71:15:49:2a:b4:d8:3f:fb:5e:67:4f:30:
         b8:f3:49:d6:b0:f6:54:1d:8c:9f:41:41:47:cc:6b:56:f2:88:
         50:22:4b:45:f7:da:d7:4b:ae:95:b2:e6:48:25:eb:68:22:5d:
         04:89:c3:9f:e9:88:aa:d3:91:cf:3a:d1:aa:e8:b1:6b:97:b6:
         08:0e:c8:12:10:ef:7a:84:84:01:85:24:13:7b:97:83:f3:37:
         46:51:6d:17:69:b3:07:f2:d5:85:35:7c:5e:7c:a4:cf:23:33:
         44:c1:bc:29:df:60:01:00:1e:fd:75:62:b3:16:f6:8c:e8:51:
         e0:9f:b4:08:7f:63:52:ac:a8:9b:0c:8d:21:6d:d0:29:d5:af:
         1b:31:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:49:09 2026 by rpki-client