Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
File:                     EuKAOWRtzDLs61hCj5fMmUuZhXc.mft (raw, json)
Hash identifier:          4t0Hrol3K6V2P1t4WDVzfZSlaDjx/e0dgUL5selumGQ=
Subject key identifier:   4B:70:C6:01:C9:AB:13:D7:5C:F6:16:2F:33:C9:CD:F4:81:26:BB:99
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Certificate issuer:       /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial:       019D389C0BF0451477FBD40DF4CCE24B44C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
Manifest number:          0198
Signing time:             Sun 29 Mar 2026 08:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:43 +0000
Files and hashes:         1: 3pfKAfOgCjCuMnTS6UNkSvzgdXg.roa (hash: fX97IURxx4aVv6kLYDjuvYCpszHdrjfoIHpuOJ1G1Q8=)
                          2: 7ctbrqVxCRbHrUzJk44x6mMUfjw.roa (hash: hwOpHB+DpLevykjKwsf5ChWyNAUq7TbSytnqlDGmM0c=)
                          3: AQhcS-k2oK3bxQWS20M2leCjNhA.roa (hash: aNhFqj72CW3EXnrLF0fWAMHOsCvh/EfcGLmpjcOZo1U=)
                          4: EuKAOWRtzDLs61hCj5fMmUuZhXc.crl (hash: SzAO18nN5ReUxAIJJtwPwDVjQQtwMyYMrHyTGBCy4oA=)
                          5: YppEuD63kZ31TGnLRIN3xiqWGBI.roa (hash: felosXDJ6ap80oigDicxv12faJJwG7IilFVsyq10QVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:0b:f0:45:14:77:fb:d4:0d:f4:cc:e2:4b:44:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
        Validity
            Not Before: Mar 29 08:00:43 2026 GMT
            Not After : Mar 30 08:00:43 2026 GMT
        Subject: CN=4b70c601c9ab13d75cf6162f33c9cdf48126bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:6a:ad:00:40:26:54:60:4c:12:81:a6:2b:
                    fc:e7:d3:c5:a8:76:f2:3e:94:42:42:84:66:9e:50:
                    4a:8c:99:56:c7:83:a7:c0:80:91:0c:ad:a5:b2:b9:
                    17:38:6b:e1:19:b3:63:70:60:fa:67:f0:a3:4d:ec:
                    e2:8e:2d:cb:12:19:51:21:6c:86:ad:fb:f5:2c:af:
                    92:51:85:7d:b3:a2:31:1d:cf:29:3c:7c:b5:79:7a:
                    c9:8f:43:14:d8:50:89:59:0e:91:17:9c:5e:79:75:
                    bb:1a:19:55:9d:de:d5:ff:cd:03:4b:7c:58:59:61:
                    2a:a8:24:ad:8f:b7:4a:b5:43:89:57:fe:85:a2:2a:
                    ad:ac:33:fb:00:1b:6c:6f:5a:3e:80:ed:fd:31:6c:
                    02:19:9e:50:92:d6:aa:70:48:e6:49:19:70:29:6e:
                    00:6f:4f:66:7f:2e:03:7e:3c:91:ec:a8:50:db:0a:
                    a0:6b:97:02:41:16:5f:1b:9c:97:28:89:8e:a9:78:
                    49:7c:c4:72:b3:71:11:4c:74:2a:12:c6:05:ab:01:
                    25:63:fc:17:d1:68:b5:37:a4:0c:8a:0d:a3:c2:8b:
                    9c:7b:ba:dc:16:d4:43:ac:16:ae:17:c6:5c:85:ef:
                    cd:4b:48:d0:16:f1:52:73:d0:0b:12:50:2c:95:ea:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:70:C6:01:C9:AB:13:D7:5C:F6:16:2F:33:C9:CD:F4:81:26:BB:99
            X509v3 Authority Key Identifier:
                keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:b0:fa:b4:30:87:33:5c:f3:8d:06:bf:57:5c:ef:b3:2a:
         2c:08:7f:10:6b:6c:16:c0:47:6f:b9:57:65:09:4c:1b:7f:4c:
         7f:fb:70:ba:01:48:7c:a8:12:2e:31:39:ab:84:20:c3:f8:26:
         e0:fb:61:7f:d5:6a:81:6e:9d:0a:7e:2d:b1:79:40:48:19:82:
         14:aa:ee:77:d1:db:ce:bf:03:ab:85:30:26:d4:72:e1:72:c6:
         2d:c4:fe:78:cd:84:93:b0:1e:34:4d:9f:39:fc:b3:80:0b:22:
         81:24:3e:24:8b:60:3b:47:ec:a8:5b:b2:6c:64:dd:13:e4:56:
         63:2d:13:4a:f4:17:96:62:17:6d:8b:7a:b5:fa:1b:86:43:b1:
         88:c2:d7:cc:51:5b:ba:03:96:47:fd:66:1b:c5:47:82:27:f9:
         c3:94:6b:ea:b8:1b:2a:cc:1f:8c:05:cf:6a:ad:8b:dd:4b:8c:
         51:21:9f:35:d4:6b:5c:da:fa:d5:12:3b:8a:f1:e2:df:1f:a5:
         ba:b1:ba:10:e8:3e:6b:dd:ea:01:7e:aa:75:1f:c8:6e:45:f9:
         bb:87:30:b0:2b:01:89:52:c9:e0:9d:10:36:2a:c7:ba:68:ee:
         c8:f6:4b:c7:c9:c1:c6:83:d9:19:62:ee:be:15:7a:0d:2e:e4:
         a3:2f:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:09 2026 by rpki-client