Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
File:                     eNo_c5yggv_oh_cDBuf8dIRgbOI.mft (raw, json)
Hash identifier:          PQpHoIJk+89jujAep2r3RHUSyP5YsOOEB/ueOICWbI4=
Subject key identifier:   66:EB:69:A0:5E:36:4D:0B:A5:5D:6B:CB:28:A6:10:A2:2B:38:9F:9E
Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Certificate issuer:       /CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Certificate serial:       019CE3DA1D488511884E9ECD7422BBDC4523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
Manifest number:          0591
Signing time:             Thu 12 Mar 2026 21:00:48 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:48 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:48 +0000
Files and hashes:         1: eNo_c5yggv_oh_cDBuf8dIRgbOI.crl (hash: sNj7a3Ss1vmVc2jxlQsMe26MHu5iyMhb06Kn4oLko40=)
                          2: gbp6iOfei7hEPDEdinLokXxWs2s.roa (hash: G2slnlwUdUEpu2ieOsRYLInvVHszrpyRr4yu7J67evc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:1d:48:85:11:88:4e:9e:cd:74:22:bb:dc:45:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
        Validity
            Not Before: Mar 12 21:00:48 2026 GMT
            Not After : Mar 13 21:00:48 2026 GMT
        Subject: CN=66eb69a05e364d0ba55d6bcb28a610a22b389f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:31:19:49:5d:03:98:a9:6b:45:01:ea:7b:
                    dd:bf:ee:e6:c4:b5:8d:8c:9c:cf:7a:39:ff:2f:9b:
                    ba:fb:76:f8:70:68:21:53:c6:1c:d6:cc:ee:b6:f1:
                    31:44:bd:74:1e:cb:f6:7c:d0:bf:48:94:92:10:11:
                    7f:e7:1d:66:99:fe:cb:49:ca:c6:53:1d:8a:58:a5:
                    15:cd:a3:31:64:69:51:25:43:21:bd:c0:6d:7a:31:
                    42:ec:90:0e:bb:df:f5:70:72:6b:13:9e:67:78:bb:
                    9b:8c:a4:26:fc:f9:a0:a4:5e:4f:74:9d:28:e6:1a:
                    ed:27:34:7f:5f:88:20:41:12:31:df:88:ae:1d:b6:
                    cf:50:88:ad:b5:d5:49:6a:ad:9b:cb:11:c5:5a:80:
                    ad:31:f1:e1:f5:4f:89:e0:57:bc:3d:ac:60:ea:e7:
                    49:ec:5c:52:83:b8:1f:6b:0d:a9:59:96:36:41:8b:
                    98:1f:70:06:d0:77:77:30:64:40:a1:8f:26:39:24:
                    bf:87:fd:b7:0d:4f:12:28:a1:a3:9f:aa:4a:ad:73:
                    0f:38:74:14:12:06:0d:bd:43:71:c7:c5:83:d9:d0:
                    6a:c1:7f:01:1f:48:e4:63:0e:21:e8:b8:c0:b4:dd:
                    40:00:de:cb:df:fc:52:00:d7:3d:5f:17:42:b2:c5:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:69:A0:5E:36:4D:0B:A5:5D:6B:CB:28:A6:10:A2:2B:38:9F:9E
            X509v3 Authority Key Identifier:
                keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:86:9e:9e:71:ca:3c:43:e3:83:fe:eb:8c:a2:4a:21:e0:
         aa:fb:ac:24:3f:b5:29:8c:5a:5f:5b:6e:0d:76:80:b8:1f:90:
         2d:52:34:1f:de:b0:7c:13:36:0c:83:b8:dd:c3:27:14:e1:c9:
         51:3a:06:69:e2:40:69:6f:b4:4c:58:69:ad:12:7c:25:93:71:
         17:2c:03:b2:ad:79:8b:92:85:b9:5e:06:12:79:a1:93:e9:58:
         8d:f6:4f:ce:0f:22:5c:7f:db:a2:55:b0:62:9b:a1:7f:35:b1:
         d1:0b:26:46:e4:1c:58:f7:61:00:30:2b:94:16:b4:aa:8c:db:
         7c:48:70:0a:a4:c0:2f:f6:38:3d:e4:27:f3:81:9c:45:5c:71:
         18:f9:6b:13:ff:d4:fd:39:fe:a9:a5:b5:da:4c:60:ae:a5:d6:
         66:70:4a:47:7d:fc:73:14:1e:17:2e:65:d6:84:fc:2e:dd:9a:
         f2:96:6a:2c:3e:0d:c2:f8:c6:10:fb:81:0f:b5:8e:82:48:e2:
         f4:bd:d8:76:65:0b:34:ed:16:c3:a9:80:e8:b3:82:65:b6:b4:
         64:4c:99:6e:bb:d3:0d:40:77:f2:36:b1:00:50:1b:c9:7e:e2:
         fa:7c:dd:be:e0:f9:13:09:cc:29:68:57:07:c6:d7:39:11:a8:
         30:87:2c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2h1IhRGITp7NdCK73EUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZGEzZjczOWNhMDgyZmZlODg3ZjcwMzA2ZTdmYzc0ODQ2
MDZjZTIwHhcNMjYwMzEyMjEwMDQ4WhcNMjYwMzEzMjEwMDQ4WjAzMTEwLwYDVQQD
Eyg2NmViNjlhMDVlMzY0ZDBiYTU1ZDZiY2IyOGE2MTBhMjJiMzg5ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTkxGUldA5ipa0UB6nvdv+7mxLWN
jJzPejn/L5u6+3b4cGghU8Yc1szutvExRL10Hsv2fNC/SJSSEBF/5x1mmf7LScrG
Ux2KWKUVzaMxZGlRJUMhvcBtejFC7JAOu9/1cHJrE55neLubjKQm/PmgpF5PdJ0o
5hrtJzR/X4ggQRIx34iuHbbPUIittdVJaq2byxHFWoCtMfHh9U+J4Fe8Paxg6udJ
7FxSg7gfaw2pWZY2QYuYH3AG0Hd3MGRAoY8mOSS/h/23DU8SKKGjn6pKrXMPOHQU
EgYNvUNxx8WD2dBqwX8BH0jkYw4h6LjAtN1AAN7L3/xSANc9XxdCssXAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbraaBeNk0LpV1ryyimEKIrOJ+eMB8GA1UdIwQY
MBaAFHjaP3OcoIL/6If3Awbn/HSEYGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMt
MWJmYmUxMGQ0ODQ5LzEvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMtMWJmYmUxMGQ0ODQ5
LzEvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYqGnp5x
yjxD44P+64yiSiHgqvusJD+1KYxaX1tuDXaAuB+QLVI0H96wfBM2DIO43cMnFOHJ
UToGaeJAaW+0TFhprRJ8JZNxFywDsq15i5KFuV4GEnmhk+lYjfZPzg8iXH/bolWw
YpuhfzWx0QsmRuQcWPdhADArlBa0qozbfEhwCqTAL/Y4PeQn84GcRVxxGPlrE//U
/Tn+qaW12kxgrqXWZnBKR338cxQeFy5l1oT8Lt2a8pZqLD4NwvjGEPuBD7WOgkji
9L3YdmULNO0Ww6mA6LOCZba0ZEyZbrvTDUB38jaxAFAbyX7i+nzdvuD5EwnMKWhX
B8bXORGoMIcssQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:28:28 2026 by rpki-client