Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          l+IovbZFV7kyMbBQLM5horxRaud6ARAmg1JHxfKXGdk=
Subject key identifier:   8B:74:F6:86:25:E9:86:6E:35:E3:28:49:CC:05:E0:1B:2D:08:BE:04
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019CE3A3485097A3D7F67DD093D6E2AA600D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          07B5
Signing time:             Thu 12 Mar 2026 20:00:54 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:54 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:54 +0000
Files and hashes:         1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: hamVsN1+bnuQBd1UbMfjTiIEey2XkXvXIa272ZbaBtg=)
                          3: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          4: QgtZQ0805OCM2cokT2qKD6cPctM.roa (hash: DavE4PxcjRUDAkMRKuUWGBvO9WpwG+932yjIkhXYMNA=)
                          5: SPPjM71nmOX7eNj2-mIx6bdne7g.roa (hash: 249oKopn9OQM2f/WdGlFxfhN6nAjP3z88ppnooYTHME=)
                          6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:48:50:97:a3:d7:f6:7d:d0:93:d6:e2:aa:60:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Mar 12 20:00:54 2026 GMT
            Not After : Mar 13 20:00:54 2026 GMT
        Subject: CN=8b74f68625e9866e35e32849cc05e01b2d08be04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:01:ee:61:1a:ca:51:57:53:5b:45:f4:cd:
                    fd:4d:80:3c:96:f4:d5:b4:95:de:cf:c7:fd:70:18:
                    44:df:f2:27:6f:0a:5d:ad:2e:af:ed:63:0e:0a:f9:
                    6d:85:fa:e1:fe:2e:8d:1e:d2:f6:84:f8:ed:c0:16:
                    ce:db:17:c7:8e:fb:17:8d:d6:3e:c2:93:ac:15:13:
                    86:18:c9:93:b0:96:a7:4b:96:f8:b9:30:3d:64:f0:
                    97:c7:f2:49:75:22:1d:af:d3:c7:42:e9:43:25:da:
                    18:ae:5c:8b:5f:69:c6:de:57:69:26:9f:b1:4c:f9:
                    ff:6e:21:6b:36:74:ee:26:8d:b6:49:91:9f:ec:ea:
                    a3:8b:d4:5d:e7:c9:b3:c2:1f:e8:38:3d:07:22:5d:
                    90:e0:0a:6f:53:74:d9:64:ab:7e:41:2e:0b:fd:02:
                    cd:0f:79:51:08:db:50:c2:95:b4:20:1b:15:04:e8:
                    e3:57:7d:15:5f:9e:86:17:19:e8:37:7e:b0:2a:9b:
                    07:e1:a9:b4:ce:d3:f0:e4:92:d9:d6:54:dd:cd:bd:
                    e3:6f:3e:0b:9d:25:5c:f4:28:7a:70:54:19:c3:e3:
                    b2:6e:70:d0:b7:cf:31:ff:fc:1e:1f:16:d9:c0:d0:
                    9e:2f:3b:ad:5c:d6:e6:24:cb:60:a8:40:68:c3:ca:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:F6:86:25:E9:86:6E:35:E3:28:49:CC:05:E0:1B:2D:08:BE:04
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:65:44:c6:d7:c1:92:5e:b5:fa:bd:9f:d6:61:b3:9d:22:
         0d:f1:ea:9c:e2:b9:6f:21:2e:80:cf:79:ca:83:02:16:33:59:
         59:70:ab:68:34:e2:ec:60:a0:a0:3f:c6:93:c7:37:6f:d2:a9:
         93:53:03:a3:e6:6e:f8:06:80:28:31:f3:68:81:dc:05:f6:41:
         d6:d4:1f:51:0b:d2:f8:58:9d:fe:d5:c1:9e:dd:6b:9d:e3:23:
         f6:9c:8e:22:c0:8f:e2:a0:7e:82:55:e4:c3:1e:61:aa:8f:5a:
         c1:fc:10:4c:3f:33:a0:6b:40:f8:a8:08:b2:3e:c8:bf:95:e8:
         d0:de:f0:f7:ab:76:a4:4e:ca:7f:f3:e8:bd:3d:cf:ca:6b:2b:
         a3:6f:e6:b5:f8:c9:6c:02:9c:2b:6a:17:d6:a0:33:fb:0a:b2:
         10:98:5d:bf:f5:4f:3a:8b:6d:a9:23:7f:9f:e7:b0:53:47:c7:
         e8:9b:76:e0:d2:ce:1d:68:8b:ae:fb:56:c9:8d:dc:4c:68:1d:
         6e:1f:20:fb:70:51:e8:ca:6a:81:62:9c:9a:46:77:4a:2b:0f:
         f7:8f:8e:eb:1b:93:05:75:25:63:14:87:f9:e3:5c:1e:d7:fd:
         d3:e9:4e:57:ca:48:e8:d1:f2:46:92:04:76:da:ca:4b:6b:22:
         1c:c3:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjo0hQl6PX9n3Qk9biqmANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4
NDlkMTcwHhcNMjYwMzEyMjAwMDU0WhcNMjYwMzEzMjAwMDU0WjAzMTEwLwYDVQQD
Eyg4Yjc0ZjY4NjI1ZTk4NjZlMzVlMzI4NDljYzA1ZTAxYjJkMDhiZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgIB7mEaylFXU1tF9M39TYA8lvTV
tJXez8f9cBhE3/InbwpdrS6v7WMOCvlthfrh/i6NHtL2hPjtwBbO2xfHjvsXjdY+
wpOsFROGGMmTsJanS5b4uTA9ZPCXx/JJdSIdr9PHQulDJdoYrlyLX2nG3ldpJp+x
TPn/biFrNnTuJo22SZGf7Oqji9Rd58mzwh/oOD0HIl2Q4ApvU3TZZKt+QS4L/QLN
D3lRCNtQwpW0IBsVBOjjV30VX56GFxnoN36wKpsH4am0ztPw5JLZ1lTdzb3jbz4L
nSVc9Ch6cFQZw+OybnDQt88x//weHxbZwNCeLzutXNbmJMtgqEBow8r7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt09oYl6YZuNeMoScwF4BstCL4EMB8GA1UdIwQY
MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt
OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm
LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVZlRMbX
wZJetfq9n9Zhs50iDfHqnOK5byEugM95yoMCFjNZWXCraDTi7GCgoD/Gk8c3b9Kp
k1MDo+Zu+AaAKDHzaIHcBfZB1tQfUQvS+Fid/tXBnt1rneMj9pyOIsCP4qB+glXk
wx5hqo9awfwQTD8zoGtA+KgIsj7Iv5Xo0N7w96t2pE7Kf/PovT3Pymsro2/mtfjJ
bAKcK2oX1qAz+wqyEJhdv/VPOottqSN/n+ewU0fH6Jt24NLOHWiLrvtWyY3cTGgd
bh8g+3BR6MpqgWKcmkZ3SisP94+O6xuTBXUlYxSH+eNcHtf90+lOV8pI6NHyRpIE
dtrKS2siHMNSfA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:26:02 2026 by rpki-client