Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
File:                     euqoSGZHGIMRqkvfkdXt554qE9A.mft (raw, json)
Hash identifier:          rUDkmTmx5li3Z7rxw/0PZ/5Qh1T0C4k4wvofxZzr7yI=
Subject key identifier:   3B:EC:1F:90:E1:AD:86:63:D0:A8:94:A9:10:CB:C3:14:59:4A:6B:67
Authority key identifier: 7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0
Certificate issuer:       /CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
Certificate serial:       019D389C5304E5511C46320C67399B343165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
Manifest number:          8F
Signing time:             Sun 29 Mar 2026 08:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:02 +0000
Files and hashes:         1: 4-x_b7YAPW0lqNsX2mQE72BLwNU.asa (hash: sqBEB26cGuqkuCnuPuobcaPqsCX12+bqK2ZHJ9suv/U=)
                          2: euqoSGZHGIMRqkvfkdXt554qE9A.crl (hash: URo27FR5KF+V0Y8Op/Im/DQuTcBcktiwOkAqMQBs+Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:53:04:e5:51:1c:46:32:0c:67:39:9b:34:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
        Validity
            Not Before: Mar 29 08:01:02 2026 GMT
            Not After : Mar 30 08:01:02 2026 GMT
        Subject: CN=3bec1f90e1ad8663d0a894a910cbc314594a6b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:87:89:fb:c9:1c:54:ca:d1:ca:23:5a:19:
                    8d:88:20:a5:ae:c4:3b:30:de:23:4f:03:64:17:03:
                    e7:b7:c9:63:ad:15:ad:cc:8e:d7:64:a2:28:f3:a1:
                    5a:fd:cc:95:9b:65:3b:c9:bf:cf:5b:f0:70:8c:a0:
                    05:16:02:78:8f:ab:11:4c:83:eb:17:de:df:ad:af:
                    e4:ea:c5:ac:06:55:03:37:a5:81:f9:06:4b:d9:7b:
                    b1:33:8f:53:b6:43:f7:2a:db:74:02:13:d9:15:9b:
                    ae:e2:e7:c6:97:c7:bd:35:34:b9:45:60:bc:d5:4c:
                    32:51:5c:57:18:58:cf:26:38:97:ab:4d:84:3c:74:
                    1d:0d:65:c9:47:a2:d2:70:63:5b:f5:8e:75:8a:4e:
                    83:a8:5b:02:af:35:82:4a:0d:f1:14:71:66:d5:19:
                    9f:7a:e3:ba:6a:d2:f3:0c:ee:9f:8b:ab:d6:2a:30:
                    42:24:c0:e0:40:34:05:42:22:90:2e:d0:ce:69:4c:
                    a5:c5:13:e6:9b:5e:a8:69:bb:4e:1b:f1:15:69:cd:
                    30:1f:05:c7:9d:9e:6b:7c:cd:62:b7:e2:90:c7:03:
                    40:4b:94:f1:a8:ea:7f:c3:08:b0:dd:12:e4:f7:38:
                    c9:db:6f:ee:7e:43:6f:a4:33:9d:ff:a5:0e:40:e5:
                    3c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:1F:90:E1:AD:86:63:D0:A8:94:A9:10:CB:C3:14:59:4A:6B:67
            X509v3 Authority Key Identifier:
                keyid:7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:00:d6:49:e6:d7:11:98:42:9e:56:60:0d:d3:00:d9:a2:51:
         d5:d2:72:a2:ff:bf:d8:e6:c5:4e:4e:10:68:65:21:01:52:9a:
         2e:64:11:ca:aa:98:2d:e1:32:85:12:d2:b8:28:ed:e4:82:f9:
         fa:38:12:fc:ff:4e:6b:cc:21:09:18:fe:c8:a8:de:ab:d8:78:
         2f:1e:6a:f9:2b:79:7f:22:4d:f8:19:24:8f:3e:1c:78:7d:37:
         86:4f:b3:34:30:80:94:c3:c6:d0:b1:5d:2c:77:99:15:c1:d4:
         51:84:a4:74:1f:9d:4e:55:d4:ca:7b:1b:73:b7:4e:a6:c9:3e:
         dc:cb:c4:85:12:72:c1:23:c5:5f:58:69:38:5a:71:8a:78:be:
         a0:07:38:76:6f:5b:96:35:b3:3c:a9:8e:59:1c:5e:9a:db:05:
         38:de:11:08:cc:7c:ad:18:bd:6f:a2:59:93:ad:66:75:10:9f:
         68:44:20:1a:ae:8f:9e:a7:ae:58:a0:73:5a:67:1b:a1:8b:ee:
         e8:b2:40:d4:a4:de:6b:71:49:7e:cd:12:f1:35:29:58:ac:50:
         66:e5:0d:ae:c2:53:fe:fc:01:f0:30:1e:48:2d:29:f8:1a:12:
         65:98:74:1e:c5:8b:2a:cd:c1:ac:b6:68:49:ef:11:e8:a8:33:
         af:85:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:18 2026 by rpki-client