Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          xN+4gfwRcR7QLNuFF/ELD2ruwpcXWbvUk8yCr4V1LmE=
Subject key identifier:   36:4D:CE:2E:58:51:E8:54:26:B5:E0:26:4C:F1:5E:AA:BC:17:3B:3F
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       019D386616BFC8BFB31728B37C7E05BDCAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0E45
Signing time:             Sun 29 Mar 2026 07:01:47 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:47 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:47 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: 3k+f+3JesF4luxHZRPHc208Cr6MzaATvZToHZOrL7t8=)
                          2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:16:bf:c8:bf:b3:17:28:b3:7c:7e:05:bd:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Mar 29 07:01:47 2026 GMT
            Not After : Mar 30 07:01:47 2026 GMT
        Subject: CN=364dce2e5851e85426b5e0264cf15eaabc173b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:5e:01:e7:20:f4:f1:60:4a:6f:b6:59:f4:
                    13:19:4b:0f:d0:4c:92:b6:6e:51:36:7e:38:c9:fd:
                    a6:39:da:23:b1:08:7f:f7:90:2c:4c:58:8b:4e:6b:
                    8d:77:68:26:64:2d:16:d0:2b:b4:a4:3c:1f:4d:dd:
                    fe:46:df:be:52:8a:6e:75:41:06:51:ed:19:c3:31:
                    03:0a:3c:4b:da:eb:d2:2d:03:75:53:bf:c0:5a:ce:
                    3b:8c:a7:7a:d6:4d:d6:18:29:0d:9d:a4:2d:57:66:
                    27:4b:cb:b7:51:39:34:28:55:8d:da:cc:b9:0b:ff:
                    58:ee:18:14:9e:95:13:00:41:e6:9b:cf:4a:fe:02:
                    f5:eb:d3:aa:eb:89:88:df:50:0c:0d:58:7b:59:d1:
                    e0:12:c9:33:4d:70:67:fe:9a:32:2d:d7:71:31:62:
                    87:5a:e0:e1:fe:cf:97:8c:26:75:17:90:16:80:2a:
                    66:7e:81:ec:1b:41:66:e3:63:f6:1b:70:b1:da:70:
                    91:b8:3e:37:2a:8c:df:15:40:71:2e:a6:24:93:f2:
                    be:73:83:34:9f:a8:e2:5f:20:4b:bb:39:c1:ad:fe:
                    5d:d9:47:13:05:b3:6f:88:88:36:a0:4a:45:ef:1b:
                    d3:a0:96:d9:51:d9:e5:f3:5b:82:95:4b:24:40:6a:
                    4e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:CE:2E:58:51:E8:54:26:B5:E0:26:4C:F1:5E:AA:BC:17:3B:3F
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:20:e9:97:b4:42:00:32:a8:60:ef:26:1e:19:de:d2:0e:c9:
         0f:30:f1:95:d2:37:cb:5d:79:63:27:48:de:9d:7a:dc:c5:3d:
         8a:3c:db:46:65:14:53:fd:c4:63:b0:a4:c1:f9:42:e5:2c:44:
         21:a6:33:f2:aa:a1:18:0d:2c:5f:40:6f:bd:89:51:70:e5:2a:
         ee:49:77:5f:bb:dd:6b:bb:d2:a7:3a:81:4b:1f:30:4d:b8:89:
         a7:69:69:3d:dd:f8:bb:49:83:20:fe:9b:14:a2:27:42:ab:1b:
         f6:16:76:4a:7d:54:45:ce:af:2b:6c:08:7a:f8:38:80:e0:02:
         8c:a4:44:6a:45:92:b8:85:6d:cb:64:a3:6a:08:42:8a:1e:fd:
         63:0f:5b:ba:36:1d:90:34:2d:b8:19:1e:ab:b1:41:6b:52:2a:
         34:54:59:e1:37:05:78:40:8a:6e:42:a4:83:3d:8d:98:fa:c7:
         c1:6c:b5:f4:61:f7:de:e1:01:3e:6e:d1:bf:e3:bc:7a:c8:0a:
         94:6a:92:2b:f8:01:05:b8:6d:4b:5a:1a:b0:de:46:1a:19:82:
         7d:2a:08:26:63:78:c7:7c:f9:3f:4b:4a:a4:38:1f:13:fc:2d:
         83:c6:85:43:c0:a6:65:a7:9b:f5:09:71:29:cc:8e:61:92:b1:
         e0:43:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client