Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File:                     EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier:          FgpUNbzHu0+3Rz/wsFi/gQQjW8rTF62jnfqnBX3/GF8=
Subject key identifier:   B6:9D:3B:4F:91:B3:56:6C:8A:E4:2B:47:69:50:80:BE:14:D0:29:63
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer:       /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial:       019D389C3C2715FF6A0BC23DA7C67748829E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number:          01F4
Signing time:             Sun 29 Mar 2026 08:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:56 +0000
Files and hashes:         1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
                          2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: whOe848jyXUxh3crVFsShZRlHxL14MCQR1P43Cqb/2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:3c:27:15:ff:6a:0b:c2:3d:a7:c6:77:48:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
        Validity
            Not Before: Mar 29 08:00:56 2026 GMT
            Not After : Mar 30 08:00:56 2026 GMT
        Subject: CN=b69d3b4f91b3566c8ae42b47695080be14d02963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:58:ad:fa:e6:4a:19:af:d1:f0:51:40:a2:
                    5e:0f:e6:d0:f1:85:de:d1:4c:93:b4:60:b0:75:a2:
                    df:f3:e7:19:e6:1d:62:fd:f1:66:db:b2:41:65:32:
                    e6:03:ca:45:87:4d:90:66:f1:cd:73:80:bd:ba:94:
                    6e:af:45:22:bb:47:05:dd:0c:d1:90:70:9e:49:1e:
                    7a:66:8b:b3:a3:16:2f:03:ac:9a:93:aa:50:20:74:
                    c1:30:8e:dc:b6:37:1b:3f:b8:56:48:1b:5e:08:d9:
                    3b:32:29:8a:80:cc:6d:97:1e:ba:a8:bf:99:62:db:
                    99:b4:a3:34:b1:b0:07:2e:63:ab:ce:f7:51:4a:7e:
                    12:0a:8f:9d:f2:0d:cc:f2:51:c5:50:b8:32:22:44:
                    9b:d5:06:22:2a:77:a1:89:03:92:b7:5b:87:fb:8e:
                    d0:61:64:bc:9a:8d:9a:08:26:1d:14:0c:17:b0:a2:
                    6d:6c:3d:af:29:7e:e8:1e:51:45:43:19:48:a0:33:
                    26:94:e8:35:3b:ed:93:98:cc:b6:ac:68:48:71:25:
                    a3:66:4e:69:e6:73:8b:93:c0:23:39:e6:6d:77:c8:
                    53:d2:68:11:22:fe:3c:bd:87:48:2f:d6:9d:5e:54:
                    25:b3:91:c2:b8:78:6e:e5:da:17:e0:77:e3:58:fd:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:3B:4F:91:B3:56:6C:8A:E4:2B:47:69:50:80:BE:14:D0:29:63
            X509v3 Authority Key Identifier:
                keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:70:15:ee:3a:2e:13:fe:38:80:76:d1:9b:76:b5:ce:9a:42:
         62:16:57:1d:e2:c2:58:fc:7d:a8:a7:e0:43:96:50:cd:6d:08:
         a8:ab:32:fb:20:39:11:7b:88:a3:89:dc:43:55:10:8d:eb:72:
         7a:69:cb:fd:4d:85:aa:fe:cb:16:e1:90:5c:d8:05:8e:3d:70:
         9f:83:e1:02:db:8d:c9:25:c8:04:11:a3:91:ba:5c:3a:b7:7a:
         cf:2c:60:15:b5:26:4e:6c:6e:60:c8:ef:f2:4d:c8:d3:c0:55:
         20:7f:96:14:2a:6a:14:45:5e:d9:34:f2:55:5b:0d:a9:34:46:
         c8:1a:37:df:55:a3:34:0c:93:c2:5e:e5:b4:cc:09:a3:aa:fe:
         a7:8f:e0:38:a2:4c:af:cd:d0:ab:f5:e6:71:4c:a7:16:5d:d7:
         e2:02:cd:8a:c3:cb:8e:cf:90:71:17:b0:e1:9f:7e:ab:b0:91:
         31:5c:e6:3e:7c:3a:68:94:d0:03:52:c3:dc:99:f9:e2:5e:08:
         f6:24:95:95:43:6d:42:a3:40:d8:7c:c8:1a:dd:18:2f:ba:f5:
         78:8b:d9:5a:d1:d9:4f:c7:07:f4:ab:5d:70:0c:62:96:0b:6f:
         2c:38:d8:ff:78:d2:59:98:28:7f:c3:21:0d:8d:fa:64:34:f1:
         bf:0d:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:44 2026 by rpki-client