Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          4SA2onZzb3MHFit+zyUoO2xroePw3CYu1GevowZVsMk=
Subject key identifier:   41:1F:28:7E:E5:8A:80:03:BD:DE:BB:86:59:47:26:CB:56:5D:77:F0
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       019CE749AD68B2228A0AC0DC46625B3A005B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          1021
Signing time:             Fri 13 Mar 2026 13:01:31 +0000
Manifest this update:     Fri 13 Mar 2026 13:01:31 +0000
Manifest next update:     Sat 14 Mar 2026 13:01:31 +0000
Files and hashes:         1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
                          2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: OVWsFtb+gHoSxhMPCUsfFUs2gePAC1LYepg32JVBEJc=)
                          3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
                          4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:49:ad:68:b2:22:8a:0a:c0:dc:46:62:5b:3a:00:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Mar 13 13:01:31 2026 GMT
            Not After : Mar 14 13:01:31 2026 GMT
        Subject: CN=411f287ee58a8003bddebb86594726cb565d77f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:06:91:38:92:96:4e:8c:33:cb:52:0f:dd:
                    02:d2:5b:0b:99:3f:af:95:88:2a:e4:f0:59:e2:68:
                    68:f1:20:21:63:e4:29:c0:ec:a1:aa:4a:fd:8f:d2:
                    5e:88:17:98:62:96:5f:45:31:c4:6f:21:27:3f:03:
                    e5:7c:19:49:c0:3b:1b:72:59:57:14:ea:19:27:5c:
                    0a:d2:4d:ea:41:fe:d2:66:6b:d8:ec:ca:7d:5a:61:
                    ae:1b:7a:85:d7:5d:d7:c1:5c:4d:e3:85:2d:84:57:
                    bb:df:ab:98:f7:59:15:84:4e:c6:31:9b:cd:28:6d:
                    be:bb:b8:5c:0f:b5:a9:c4:b4:2b:33:a0:24:06:e6:
                    b9:ec:ba:34:b5:1f:21:38:74:d7:a3:57:55:33:8e:
                    9f:a9:20:76:5c:b7:d0:19:d3:7f:87:ae:d7:2d:e7:
                    a3:db:4e:c6:36:21:b0:8b:de:a7:29:07:49:ca:aa:
                    52:94:ae:ce:3b:30:0a:98:b0:65:cc:ae:06:9b:9c:
                    fc:ef:ac:f4:66:93:93:31:38:6c:e6:ca:33:44:ff:
                    06:fe:22:3a:17:86:61:f4:9f:4f:d1:bf:cd:88:59:
                    f3:d0:6b:aa:8b:87:db:8d:86:ef:60:3a:b5:f3:41:
                    cb:4c:33:52:71:58:a1:53:20:ba:57:7b:2d:34:bd:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:28:7E:E5:8A:80:03:BD:DE:BB:86:59:47:26:CB:56:5D:77:F0
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d4:09:13:36:d3:cd:d4:2a:48:55:bd:56:f9:d0:bc:fd:5c:
         e1:0c:59:c3:bf:55:a0:0c:c3:0d:ed:5b:57:a4:50:b2:f1:9f:
         90:d4:2d:71:f5:ed:76:2a:2a:3a:d4:c3:ef:4c:e7:a2:77:c4:
         52:b5:0e:ef:dc:b4:5c:9d:5a:7d:1f:14:0b:35:3d:71:16:72:
         75:77:35:64:eb:3f:9f:b5:9d:4a:fe:95:20:fc:76:7d:40:56:
         15:e3:6b:f6:5c:fe:26:19:b0:1f:02:30:d5:26:46:48:7a:bb:
         bb:be:e2:79:73:14:15:24:b5:0a:a9:b1:4b:58:c5:41:62:40:
         e8:a6:92:65:b0:fa:e6:ec:54:50:09:d0:e8:d7:11:05:c4:26:
         0b:55:c8:e4:b6:79:63:7a:80:82:eb:45:c9:b7:ef:f8:cd:fd:
         14:6b:52:b9:a3:ca:55:52:34:8a:63:b4:d4:c2:85:0b:7b:05:
         cf:75:b6:6d:22:dd:f5:55:bf:c3:91:a0:fb:28:1c:9a:7d:f2:
         f6:ba:b7:b4:01:72:fb:05:35:5c:98:4a:a1:72:2a:94:a9:dd:
         2e:b7:a1:4f:9a:9d:b1:f3:69:6b:c1:77:a6:24:8f:76:a3:55:
         7f:56:4e:ff:d9:13:f1:ff:f0:56:41:3a:06:87:91:94:77:0c:
         aa:59:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:58:58 2026 by rpki-client