Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
File:                     eqYGEXu19-QWDvJo-fSqBFc4BEE.mft (raw, json)
Hash identifier:          bYky0ZrrFgSmToPLJpMRtucpOm6X3p/3EK7cxJQ85A0=
Subject key identifier:   82:7F:FD:9F:FA:D8:5F:1B:BF:62:76:9A:A2:6D:A5:8D:00:AA:75:5F
Authority key identifier: 7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41
Certificate issuer:       /CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
Certificate serial:       019D3909BD191F4B5707FA6CF0E9CD153355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
Manifest number:          15D7
Signing time:             Sun 29 Mar 2026 10:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:32 +0000
Files and hashes:         1: HWRDZohiGFE-KL7arNIUmyOXGnE.roa (hash: jfQXsNULzuLDLljy4yMpYSp5u+k5kfSY92RZrU+SYas=)
                          2: eqYGEXu19-QWDvJo-fSqBFc4BEE.crl (hash: 52uj6PzYBX9/UdvtT9CZg41WiE3dt9vdHtR1jgOmojU=)
                          3: rm-HZiLom0qdEh62FCM64ojvrhQ.roa (hash: +CME2X+o88w6bjQVgNVCnq5Fn9Oc1RgYy1B4OnpIasg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:bd:19:1f:4b:57:07:fa:6c:f0:e9:cd:15:33:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa606117bb5f7e4160ef268f9f4aa0457380441
        Validity
            Not Before: Mar 29 10:00:32 2026 GMT
            Not After : Mar 30 10:00:32 2026 GMT
        Subject: CN=827ffd9ffad85f1bbf62769aa26da58d00aa755f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:af:f7:66:a1:da:f0:6c:24:16:b7:64:d2:
                    b7:f4:2a:a3:f7:c8:6c:50:1c:91:0f:85:f0:6a:c5:
                    e8:aa:30:e8:30:5f:c6:82:b0:a1:de:30:ab:3a:61:
                    63:c2:e0:96:11:97:eb:af:4d:98:df:5a:8a:a6:11:
                    b4:64:df:47:62:b9:50:a5:4d:a7:f7:de:2a:e4:4f:
                    83:81:77:90:98:7a:ba:75:6e:a8:b1:78:bd:3a:40:
                    d1:61:91:c2:33:fc:52:04:c4:39:f1:8a:48:9f:81:
                    3b:82:00:80:f0:be:0c:9b:50:aa:42:ce:a8:9f:4d:
                    2e:51:f6:16:c1:37:e7:7a:bb:6c:15:08:8c:cd:e6:
                    fd:7e:82:4e:53:0d:4f:7d:bd:1a:d0:f5:f8:c4:c3:
                    f6:b1:6d:46:c3:cc:e0:da:cb:87:9b:e4:60:cc:0b:
                    59:14:cb:7d:34:16:59:e6:c7:4f:35:6f:47:58:ea:
                    8f:27:55:61:d2:7b:50:a6:d3:4b:c3:a8:ed:38:19:
                    07:1c:cd:a5:a2:1c:f2:19:ad:94:7b:75:7d:ea:2c:
                    24:b9:42:e3:37:93:93:62:5b:4c:b8:7e:71:5f:0a:
                    0f:9b:c5:42:4e:51:0d:15:53:b0:d2:28:b1:47:51:
                    2e:d1:47:21:22:37:a9:82:71:67:c8:45:9a:9f:62:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:FD:9F:FA:D8:5F:1B:BF:62:76:9A:A2:6D:A5:8D:00:AA:75:5F
            X509v3 Authority Key Identifier:
                keyid:7A:A6:06:11:7B:B5:F7:E4:16:0E:F2:68:F9:F4:AA:04:57:38:04:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqYGEXu19-QWDvJo-fSqBFc4BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/23bdd0-5bf1-4d44-b4aa-a06136b2dc72/1/eqYGEXu19-QWDvJo-fSqBFc4BEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:fa:b0:33:14:6a:f6:6c:e9:92:c9:c7:af:96:70:33:24:
         1d:82:5f:b3:0a:51:95:20:dc:45:1c:7a:ee:c9:1e:56:4e:ab:
         cf:c2:8f:48:01:25:39:1e:36:8a:90:a9:d3:77:8e:eb:de:d5:
         b8:ea:ea:6a:ab:27:5a:c4:15:b1:c5:82:9f:03:36:04:b3:29:
         5f:d2:4d:4a:ac:f8:f7:c2:31:85:cd:8a:1f:6d:cd:a4:f3:10:
         31:90:55:43:96:45:79:be:3d:84:77:46:c3:24:28:2f:12:99:
         92:cf:09:59:ea:10:c3:d6:13:2b:f2:df:a6:9b:56:be:f9:0b:
         45:9a:74:b3:88:fe:b7:ca:6e:c1:d2:6f:64:8f:95:de:a8:89:
         df:9f:03:48:0d:95:39:2e:32:97:52:4b:7f:f7:ec:1a:41:59:
         38:81:b0:51:51:ab:0d:f8:0c:26:a2:ef:39:c5:df:da:13:d2:
         c8:12:dc:c6:5d:dc:19:a4:40:ea:06:08:00:11:93:3e:2c:ac:
         84:39:02:31:9e:cd:5e:3c:b1:5b:47:91:68:fa:24:07:f8:5e:
         d9:db:d8:8d:49:cb:91:49:f6:07:be:f7:18:ff:21:fc:5a:49:
         35:6a:fe:f7:bb:7e:88:61:f6:a9:01:da:9a:9e:44:6b:8f:04:
         ee:0a:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client