Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File:                     eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier:          K6BRyHj9DPzqttAHjEzfskD6K081hUzYkN5ZkqdHAIY=
Subject key identifier:   06:87:6E:03:5A:30:FD:E3:F5:00:43:E7:4D:94:BD:B7:1F:55:3A:85
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer:       /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial:       019D3A1CA7E391655E9F572697C2D49A58E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number:          081A
Signing time:             Sun 29 Mar 2026 15:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:49 +0000
Files and hashes:         1: _rvy-296w0a-j-Nw33bBfHPQ78Q.roa (hash: Bg8gLL5anRmVsyv6lsSlg5Xf04g+qeE2nvlaXoMSo6g=)
                          2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: jVWaN1zEdJLeocGIBk+oruXhZAywD+PpiVwAVwM92ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:a7:e3:91:65:5e:9f:57:26:97:c2:d4:9a:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
        Validity
            Not Before: Mar 29 15:00:49 2026 GMT
            Not After : Mar 30 15:00:49 2026 GMT
        Subject: CN=06876e035a30fde3f50043e74d94bdb71f553a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:54:07:3a:8f:30:7c:9a:f2:e7:c0:d9:55:
                    b5:e6:2d:af:27:b5:62:67:04:a8:0e:63:76:44:1b:
                    65:cf:43:1f:c2:14:fd:39:51:12:f7:a3:3e:34:5b:
                    53:4c:0f:50:c2:b0:76:75:bc:23:b1:ee:b1:d5:74:
                    8d:0d:b4:af:1e:79:d6:47:b6:44:39:41:02:26:1b:
                    1b:bc:c6:93:51:6a:82:d1:ce:8a:6c:4b:0c:2b:ad:
                    58:f4:4b:e8:8a:67:7d:1e:7d:bd:0a:64:1d:06:49:
                    eb:6f:67:13:85:23:4f:f8:9a:cb:fa:32:af:44:52:
                    d8:20:7d:d7:ff:f4:cf:4a:a4:88:98:5e:56:f3:68:
                    0a:b7:88:fa:ba:9f:88:b2:d3:a7:ec:b8:21:fc:c4:
                    6a:58:d2:b9:94:09:e7:d0:21:ec:51:25:cd:7f:7e:
                    c8:bc:04:b5:70:d5:73:44:fd:99:84:05:34:42:c1:
                    1c:84:ab:3e:fa:91:5d:20:42:21:b1:7b:23:16:fd:
                    c9:7b:5a:45:94:05:8f:35:d6:2f:31:ff:e3:82:98:
                    c7:10:0e:10:98:8c:70:0b:b8:d5:a1:04:4e:41:eb:
                    91:18:fc:68:ed:dd:55:48:da:ff:de:02:3f:e3:2a:
                    bd:9f:9e:8c:78:c9:0a:52:88:5b:cd:0f:37:99:e6:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:87:6E:03:5A:30:FD:E3:F5:00:43:E7:4D:94:BD:B7:1F:55:3A:85
            X509v3 Authority Key Identifier:
                keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:ba:0c:32:09:26:b5:21:b2:cf:9a:c6:ed:62:a2:a6:c9:
         94:40:d4:c1:40:5b:5f:81:08:cd:86:95:d6:02:05:b2:c0:4e:
         0d:8f:bc:ea:e9:8e:fa:06:62:88:00:df:8b:6c:d8:e4:e7:ae:
         27:67:fd:01:7d:da:68:b0:a6:6d:0b:66:37:50:3a:46:f0:89:
         14:c3:48:7c:53:73:09:77:9d:0a:9f:3e:3d:af:74:b4:5f:ef:
         8d:d0:3f:be:cf:84:99:1f:ab:7d:7d:0c:2b:f2:c5:75:46:39:
         54:dd:4a:0a:c0:d4:0b:76:85:44:aa:1d:ff:51:76:02:74:25:
         d1:22:c1:e3:f5:1f:f1:06:cf:16:7c:36:f9:76:b6:e8:56:cd:
         76:3e:e6:a3:33:f6:ab:3a:f4:08:24:83:75:54:ae:a3:06:ab:
         a8:15:62:01:f0:83:7a:12:6d:b9:20:49:0e:e9:d8:d6:9d:a6:
         d6:f0:e4:ef:4e:01:34:3f:86:95:e0:92:a7:59:77:ea:85:1f:
         24:0c:70:df:6f:fd:80:87:68:08:53:60:3b:5c:ca:c2:78:12:
         aa:dc:f1:e8:50:fb:f7:ce:78:95:e0:8c:30:06:8f:b7:b9:48:
         82:eb:d0:41:fd:62:a9:b4:a9:f8:86:a3:17:3c:39:54:b3:c0:
         59:9b:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:25 2026 by rpki-client