Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File:                     eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier:          QgDZCyTbwapIy+BX16wv4jj0G5RUbzVA0wmW5Z58fn4=
Subject key identifier:   20:2A:9E:26:FC:25:3A:C4:12:94:A7:7C:5F:5C:53:51:DD:05:62:78
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer:       /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial:       019CC373BE99FB934FF5576B525BA449B7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number:          1853
Signing time:             Fri 06 Mar 2026 14:01:08 +0000
Manifest this update:     Fri 06 Mar 2026 14:01:08 +0000
Manifest next update:     Sat 07 Mar 2026 14:01:08 +0000
Files and hashes:         1: 1-gfSrWkkPBhxthfW3JrHoJC9spI.roa (hash: Rnl0mmrjcLaqzVvTvP650dcar9MAaD9eI+jcraf6cdQ=)
                          2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: PRRmYweqbbah21gTqaGDwpEHFMRtSIHyKLXvraGGg/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c3:73:be:99:fb:93:4f:f5:57:6b:52:5b:a4:49:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
        Validity
            Not Before: Mar  6 14:01:08 2026 GMT
            Not After : Mar  7 14:01:08 2026 GMT
        Subject: CN=202a9e26fc253ac41294a77c5f5c5351dd056278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:94:65:1a:43:a9:24:d5:82:17:e5:1a:0e:50:
                    cb:cc:d3:d1:75:f1:b9:2a:71:00:93:7b:a0:1a:ac:
                    e0:9b:28:f6:c6:fb:f8:c5:f6:e5:00:fe:28:f0:96:
                    d5:e3:ca:25:a9:43:59:34:d9:3c:32:4d:d9:ea:7d:
                    ba:33:7a:84:fe:99:7e:c4:f8:69:8e:60:24:8a:50:
                    ce:f5:91:9d:1c:e5:18:99:30:d0:ea:1d:c8:6b:af:
                    49:b7:cd:86:cf:d7:c9:82:e7:4c:43:8d:00:36:8c:
                    6e:35:9b:d7:bc:0e:c3:e9:b9:ec:89:4d:4b:b0:bd:
                    4f:4a:33:06:24:b6:46:e3:93:be:93:09:07:3b:4d:
                    87:d7:52:ce:43:59:07:34:3e:ab:d9:4d:d6:f8:cb:
                    02:81:25:1a:1b:9f:dc:57:1b:b8:23:b9:8f:6a:ee:
                    05:9b:31:ca:4c:f2:9b:74:f1:be:8d:e9:3f:5d:a5:
                    fb:3f:69:eb:24:65:9c:21:23:04:fe:b3:f0:7d:6e:
                    d7:5e:79:a8:fe:93:22:04:d5:ed:c9:fa:f1:15:a4:
                    73:be:14:72:95:98:18:42:2d:7c:13:36:c9:53:36:
                    63:d9:60:11:b1:5e:59:1b:eb:e5:83:36:d3:f0:d5:
                    83:8e:8a:33:70:6f:25:01:11:8b:d5:bd:16:b6:4e:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2A:9E:26:FC:25:3A:C4:12:94:A7:7C:5F:5C:53:51:DD:05:62:78
            X509v3 Authority Key Identifier:
                keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:66:cd:5c:ec:76:17:78:f5:5f:83:61:b9:0c:eb:1e:14:15:
         96:2e:f7:a7:0f:9f:b2:4a:9e:67:7d:65:39:3b:b3:63:1c:e9:
         23:05:37:68:71:9d:3b:6b:7d:ea:36:12:63:94:ad:e9:c7:dd:
         79:b3:89:ab:e2:9d:ef:83:69:af:cf:5d:f3:90:3d:ea:de:3c:
         22:8f:f3:d5:81:cf:39:e5:4a:3c:29:9d:c5:f4:dd:d6:54:92:
         02:9d:76:66:cf:86:5b:74:f7:e5:86:0e:a3:8e:f0:a0:12:28:
         b2:41:f1:0b:74:c7:54:10:ea:df:76:0e:a3:7d:8f:ac:5b:b9:
         73:b7:de:9c:3f:30:7f:e5:c0:85:99:84:26:cd:c9:c3:7b:ba:
         b1:f5:b4:f4:b1:18:66:90:16:c1:a5:96:97:ce:f8:57:43:ad:
         d6:a9:aa:c1:9c:5a:fa:93:f1:07:b3:34:84:b3:c9:f2:53:92:
         20:3e:fe:28:f5:09:33:45:bf:29:34:5d:a3:b5:53:9f:b0:95:
         84:30:65:61:25:ff:f5:0d:d8:12:18:48:59:df:3b:73:c8:e7:
         d9:c4:fa:f2:72:a9:b4:af:4f:e4:5e:e6:82:42:37:78:a6:58:
         dc:3b:84:d5:fa:62:99:a3:f5:d1:11:df:1c:27:e1:89:0d:a8:
         df:66:cf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 16:56:21 2026 by rpki-client