Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          26TQHDfIYENEjjSk1wLgU4twABaLbS5xWPzPFevzdJ4=
Subject key identifier:   E2:6A:88:12:95:B8:62:08:71:57:82:7A:80:AE:94:42:76:02:72:21
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019CE5C875D8F34EEA59BE299FF00DD1ABEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 06:00:45 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:45 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:45 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: UA4xOMGABgO7tiSKoMeJdeyQwNwLi0Rttc4HGIXrJu4=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:75:d8:f3:4e:ea:59:be:29:9f:f0:0d:d1:ab:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Mar 13 06:00:45 2026 GMT
            Not After : Mar 14 06:00:45 2026 GMT
        Subject: CN=e26a881295b862087157827a80ae944276027221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:6a:81:c6:77:c9:ae:dd:0f:3c:be:04:e9:
                    a5:54:c6:06:06:e0:1a:b3:98:9a:d8:20:08:79:35:
                    d2:fe:f4:20:01:92:ba:31:62:43:17:6c:21:44:33:
                    38:64:7f:8a:53:27:ee:7b:9f:9c:9d:39:27:2a:a5:
                    4a:3c:71:97:e9:39:20:74:8b:9a:b0:e7:de:78:27:
                    6f:3a:4c:c0:a1:2e:ee:a2:8e:0a:3c:f9:70:93:8f:
                    18:10:dd:f3:29:b9:bb:eb:f8:a0:1a:57:14:78:77:
                    de:fb:00:f4:7f:6a:f2:e4:63:9d:7a:3e:b6:49:b8:
                    e6:26:0b:cf:cf:aa:96:65:7b:97:74:3f:13:69:5c:
                    79:40:92:05:75:af:59:8b:9b:81:34:9d:b3:b2:9f:
                    05:6a:85:0c:61:3d:01:cf:f1:a5:da:64:3a:72:11:
                    88:03:cf:17:f7:46:f4:28:54:29:12:54:aa:e7:c0:
                    f3:20:67:3d:23:98:13:d9:cc:84:cf:3f:ca:d9:ee:
                    41:12:72:f1:e9:12:81:57:00:f9:ef:13:aa:97:80:
                    14:73:ac:9e:6b:f0:27:ab:7c:40:79:71:f3:2c:2d:
                    1f:53:6e:ff:61:13:21:d6:4d:23:da:5d:e6:a3:39:
                    4d:a1:48:10:5d:83:4e:c6:3f:7a:b2:db:49:d2:57:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:88:12:95:B8:62:08:71:57:82:7A:80:AE:94:42:76:02:72:21
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:20:16:8f:28:45:1b:8e:ec:43:47:41:3a:c5:59:db:5d:
         73:74:6f:81:6c:3b:73:fb:11:a8:88:b0:85:a3:d8:01:cb:68:
         04:4a:0a:ab:ca:4b:1a:ae:84:70:e0:09:6a:7a:30:0c:19:9b:
         8b:66:32:59:b8:6d:fa:58:31:13:50:62:18:d3:95:fe:ee:94:
         c7:f0:b7:dc:cd:da:90:3b:8a:d2:e7:6b:f0:9c:00:d9:cf:8a:
         39:e0:39:93:90:57:4a:e8:76:5c:cd:ef:e5:b8:5b:61:b3:49:
         ad:7f:a9:60:39:a5:9e:90:34:98:2e:e1:f0:26:35:e9:e0:f6:
         e8:ac:1e:7a:f5:1c:29:6f:5d:23:e8:98:88:c3:18:97:44:4d:
         be:8a:39:86:34:a5:8a:af:20:74:5d:2d:75:0a:c5:70:6f:0d:
         98:0f:f8:c7:0e:67:55:46:15:fc:15:1b:a0:b5:c3:91:9b:cf:
         61:1d:db:7e:4b:27:d3:62:61:51:f9:46:2a:a0:0c:d2:65:30:
         1b:82:9e:6b:59:ef:1e:66:42:bf:8e:fb:14:0c:e8:e3:ba:05:
         23:8e:7b:22:56:ab:00:8a:21:ba:a2:2a:55:d6:57:17:8e:3b:
         66:ee:ec:f7:83:6c:1d:cf:9a:d1:cd:90:96:54:a3:6f:75:06:
         b0:39:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:22 2026 by rpki-client