Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File:                     eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier:          d2t6eSp2rlZ3thnSUQwI0f9ueaGsexz11I15NtBsl0c=
Subject key identifier:   57:71:AD:61:73:EA:D4:A8:95:D8:5D:E6:46:60:4F:7E:E2:72:6F:1F
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer:       /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial:       019D3977C6B6ADC56AA2A68E1EB1C92CD6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number:          0D35
Signing time:             Sun 29 Mar 2026 12:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:44 +0000
Files and hashes:         1: 40-CHxhmMzV3x6IivUs8SRJDN6k.roa (hash: gJaTDTJyLHFCd6XAz4N6c1KU5ewn+eKdpcXn2PlsHgg=)
                          2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: VyisK6+diBkXK1y2O8CWQ9z6vnGmoyGB5ao0XZcmhmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:c6:b6:ad:c5:6a:a2:a6:8e:1e:b1:c9:2c:d6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
        Validity
            Not Before: Mar 29 12:00:44 2026 GMT
            Not After : Mar 30 12:00:44 2026 GMT
        Subject: CN=5771ad6173ead4a895d85de646604f7ee2726f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:fe:98:16:fe:21:3a:48:bf:4d:a0:47:15:
                    46:5a:ee:07:e9:1a:0c:99:92:b4:9c:00:db:96:c2:
                    bc:49:29:e6:47:09:86:3b:69:6a:44:b0:85:74:e0:
                    a3:3f:58:d0:0d:1c:8d:be:92:1f:97:d3:34:47:8b:
                    06:31:3a:49:4e:d8:f8:5f:16:0f:bd:21:c3:ad:dd:
                    85:2c:d6:4b:15:55:2e:ce:1a:ec:c8:a2:97:76:1b:
                    15:5f:83:b8:95:7b:04:8d:a9:45:22:1f:b2:db:a2:
                    00:f4:a0:81:d9:cd:53:b3:ce:a9:01:eb:a5:4f:60:
                    e9:fc:df:c7:bd:c9:b1:ec:86:c6:fe:46:b4:99:5d:
                    24:78:c1:ad:7b:e9:62:83:4f:45:d4:91:1f:a9:de:
                    6e:79:63:fa:e3:b3:94:9d:7e:a8:b7:d5:4d:73:94:
                    0c:34:21:08:48:22:58:ad:2c:9d:29:f3:ea:a6:f6:
                    fd:e9:bb:1c:6f:96:ca:3f:29:ff:bb:2d:6c:ae:48:
                    4c:ea:1f:6f:7e:1c:68:1a:1c:53:d5:2a:3b:6e:d1:
                    18:af:85:e6:bf:15:22:dd:48:c8:6f:88:6a:ae:f9:
                    6d:17:6e:2a:c9:d2:d9:a6:3e:c0:79:72:0c:3f:10:
                    af:a5:5f:a7:93:1d:c8:f2:31:8f:e6:47:b0:61:27:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:AD:61:73:EA:D4:A8:95:D8:5D:E6:46:60:4F:7E:E2:72:6F:1F
            X509v3 Authority Key Identifier:
                keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:82:0e:ed:c8:1a:8d:59:02:19:9b:96:ad:9b:35:0f:01:27:
         6f:a5:90:a4:73:04:df:18:f9:ad:8e:76:cc:ea:8f:8a:b1:68:
         fd:97:f2:ec:a5:56:63:d3:97:ef:7b:4f:21:2b:b1:33:ac:df:
         ca:5d:80:1a:4a:91:af:39:82:0b:1f:2a:ca:41:ae:c7:1d:7b:
         c7:28:c9:f5:5b:18:d8:80:49:b4:42:47:ee:37:0e:c8:e3:90:
         9e:ca:38:5c:20:eb:64:4d:cf:dc:01:73:d0:ca:93:2a:68:4a:
         69:07:9c:81:4e:a9:76:c8:eb:a0:ca:f8:33:98:cb:61:f0:c2:
         2a:73:fb:f6:8b:97:1e:57:b2:0f:7f:4d:cd:ac:90:59:1b:fe:
         5b:62:42:04:58:6e:33:f8:84:66:e9:c8:c5:0c:2d:ab:4f:53:
         76:46:0e:22:cf:50:d3:ac:43:e8:c6:c8:20:4f:67:01:76:02:
         a7:04:79:c5:33:8d:bb:a1:6a:03:d7:99:98:49:fe:51:45:7b:
         8e:11:0e:a0:ee:72:4b:28:85:82:cc:61:1c:8c:4b:ac:c5:7a:
         32:24:1d:34:32:49:b6:c1:7b:9a:03:6a:a0:e4:ae:26:28:bd:
         a7:04:c0:75:c7:0f:a9:1c:d7:ff:a2:d6:29:9d:f2:a8:32:a7:
         8d:26:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:20 2026 by rpki-client