Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          tJ4EOk031nRCkf2rf+/AT/YaGr5WfBhM2KZIQsaPS+Y=
Subject key identifier:   30:C7:DC:D4:98:DD:25:72:20:57:89:9C:77:D7:3C:30:14:3B:5D:22
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       019D37C0AA9E0CE45EED8B26EFBD6484C7DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 04:01:06 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:06 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:06 +0000
Files and hashes:         1: VzaJRpkfGV8ksiy395nPBGdmpqo.roa (hash: B/HImlbnA+P1Pd7oVL6uWttamYm0OW3WVOv4Cpsd9x4=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: u+2lwJ9Q6oA+5p9SDh8V2VZzI0jAwQ/Vhkql44OEwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:aa:9e:0c:e4:5e:ed:8b:26:ef:bd:64:84:c7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Mar 29 04:01:06 2026 GMT
            Not After : Mar 30 04:01:06 2026 GMT
        Subject: CN=30c7dcd498dd25722057899c77d73c30143b5d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:28:38:f8:b3:ac:53:ec:73:0f:76:1d:e4:
                    4f:2f:13:a0:8a:c7:ab:da:a9:30:b6:da:39:09:aa:
                    e6:5d:25:dc:ac:fb:0e:f8:95:98:ae:07:de:7e:f2:
                    33:e3:3e:6a:52:65:3e:2d:30:d8:16:91:4a:62:dd:
                    b4:3c:79:52:d3:6b:5b:79:cf:78:75:56:ba:bb:89:
                    9c:b7:15:49:f6:90:a4:4f:2b:df:e0:65:c2:8e:40:
                    57:54:3c:ba:0e:69:de:05:39:b4:17:7d:13:4c:38:
                    40:74:94:6f:eb:bb:89:5b:7b:8c:74:d3:8f:6d:91:
                    af:0c:8f:68:fd:2c:45:08:76:b3:3f:38:70:35:b2:
                    6c:e1:2d:fb:27:2e:26:88:f3:f8:33:44:b8:17:43:
                    71:eb:a9:ff:0b:c6:19:7a:07:83:4b:ff:1a:9a:90:
                    07:ed:1e:1e:c7:f5:32:73:f9:4f:68:c3:5f:94:65:
                    52:3a:aa:e6:cd:d5:29:42:04:79:7a:2e:d5:f4:9e:
                    84:f1:46:59:f5:c7:e3:aa:82:0b:2f:0d:07:27:4d:
                    ba:a1:19:1e:77:75:46:3c:88:18:e5:a2:0e:37:54:
                    4f:73:a9:11:06:99:66:d1:2f:bf:0f:21:c8:1d:1a:
                    d4:56:8c:a4:2f:3d:d8:bc:64:24:b6:49:69:e5:1b:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C7:DC:D4:98:DD:25:72:20:57:89:9C:77:D7:3C:30:14:3B:5D:22
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:01:88:58:73:6b:05:8e:83:97:43:06:dd:22:ea:9e:ab:
         fd:6b:36:af:1e:f9:0c:d2:5c:6a:7a:90:65:d0:27:c4:4b:22:
         fb:46:8e:16:0f:67:c2:4d:45:8d:dd:6b:a6:f5:33:70:73:ae:
         39:2d:b6:2d:6b:89:87:0e:90:5e:01:93:b7:9f:e4:85:5f:3b:
         da:7d:70:db:6d:b5:99:b2:fa:57:88:1f:46:87:05:68:e6:b4:
         84:ef:a3:fc:e6:01:33:65:bb:89:6b:f4:5b:83:9a:34:5f:06:
         82:87:de:b7:b7:ed:5c:b0:ae:46:2d:d3:95:d4:c5:1f:bc:3c:
         27:5e:6c:73:72:fc:ec:ee:7b:6a:8b:62:7c:6c:f5:c4:1f:b6:
         22:8b:bc:a8:a7:3d:bb:a5:ff:cb:78:05:c8:26:8a:88:c1:88:
         fa:4e:4a:c9:42:61:9d:86:7f:ca:5e:19:d6:34:64:f3:57:ac:
         60:4d:6d:fd:65:76:fd:0e:06:f7:04:1d:6c:81:e8:01:10:10:
         eb:70:eb:ea:af:92:56:91:ca:05:be:6c:ea:ff:56:54:35:98:
         07:1b:b6:f9:2c:80:ec:60:43:4a:7e:40:51:d7:0b:48:02:53:
         ff:ff:e7:fc:27:12:cd:46:cb:1a:f4:b6:22:7a:27:55:b1:f2:
         fd:02:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:41 2026 by rpki-client