Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
File:                     eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json)
Hash identifier:          iYvLW9aYrVW4CLok9HPXE0Y+hS5OaCHeI1k4jDMzB2s=
Subject key identifier:   88:C3:1F:6C:BC:40:93:00:83:BE:86:E1:25:42:CF:05:33:5D:1B:FC
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       019D38D3A512F1B5182DE44A0F41DF3D8471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
Manifest number:          13D1
Signing time:             Sun 29 Mar 2026 09:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:27 +0000
Files and hashes:         1: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: kY6nJRpeLN/JL/FbM5VWR3h7f3WnTrT67bgSrTUHQLM=)
                          2: tfFvJweLhRabr_4Wk7LgUhvWu5s.roa (hash: O7CBr+KVUWKgzAY05QQJYRrCw43M5qXybYIOGbsjOO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:a5:12:f1:b5:18:2d:e4:4a:0f:41:df:3d:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Mar 29 09:01:27 2026 GMT
            Not After : Mar 30 09:01:27 2026 GMT
        Subject: CN=88c31f6cbc40930083be86e12542cf05335d1bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:26:d8:13:de:6f:6e:ce:c9:e8:c0:21:40:41:
                    f6:9e:f9:dc:64:8f:b7:a0:77:65:d0:13:5a:df:7b:
                    d8:06:84:f1:ed:e1:41:be:02:89:ed:76:8e:9f:88:
                    ac:48:8c:4a:cb:ac:b2:37:a4:a1:d3:0e:89:8e:13:
                    1f:62:a0:ad:30:40:97:e7:b9:af:57:d6:ad:b9:ae:
                    96:87:dc:b0:08:d7:b7:eb:89:63:88:27:1c:0d:f0:
                    05:3b:d2:a4:2e:7d:3d:69:eb:46:e8:fd:af:3f:ca:
                    55:1a:f5:c6:a8:48:3c:4b:ff:83:b9:d5:29:fb:61:
                    b6:7a:a7:24:d9:65:d2:a8:f4:0a:32:d3:15:24:46:
                    01:b9:f4:cb:48:cd:92:72:22:bc:e6:ce:fa:30:6a:
                    69:72:af:1f:56:c4:0c:87:66:77:94:85:67:57:f6:
                    f8:69:76:14:ab:23:11:ce:f7:a6:81:20:18:c1:b0:
                    59:f4:60:ad:47:da:c7:9b:68:6e:4b:f3:70:19:e2:
                    71:57:c4:aa:44:9c:08:f9:d9:a5:57:eb:ec:ed:39:
                    99:d7:37:c8:48:7f:67:c0:51:89:88:6b:14:9e:cc:
                    fb:85:fe:d3:b0:6e:cd:89:7b:c4:e3:2c:03:30:d9:
                    85:96:8a:1a:e7:6b:86:94:88:7d:54:46:fd:07:b8:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:1F:6C:BC:40:93:00:83:BE:86:E1:25:42:CF:05:33:5D:1B:FC
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:55:9e:55:fd:f3:d7:d7:b5:03:f5:67:98:83:44:37:fe:
         4b:28:41:ef:af:ba:33:33:82:0d:76:07:8c:40:ef:bf:a2:f6:
         27:19:46:ac:22:44:f5:c2:fd:ed:33:1d:65:b4:dc:8a:f3:8c:
         07:c8:23:53:07:43:00:21:9f:c5:9f:f9:31:28:00:d5:5c:59:
         ad:4b:d8:c7:30:6a:87:4d:92:eb:e9:25:86:d4:ca:f3:ce:fe:
         a2:ff:42:6c:a6:e1:c7:3d:b0:74:b6:2c:d0:2d:4c:bc:b3:33:
         4f:08:d7:ac:a7:64:b8:a0:a9:a4:2a:95:2c:6c:e7:6d:2f:40:
         ad:22:53:29:19:a2:ad:2f:22:c6:ce:96:26:1b:a7:0b:9b:44:
         d3:b2:50:ae:dc:05:0d:9c:a8:12:cf:55:c5:d2:f3:3f:7d:bb:
         b0:d9:ba:df:e0:e5:1f:d6:5d:6f:92:7f:74:95:61:09:b0:03:
         ea:6b:74:09:27:4d:bb:b3:3b:10:aa:98:d0:45:75:a4:da:81:
         4e:b5:81:fb:5d:2b:be:fa:34:eb:18:e9:56:32:3b:21:fe:26:
         e9:db:ad:05:12:64:d9:6b:55:8c:fc:24:5f:27:c1:a7:d3:8d:
         d3:93:2a:73:c3:68:48:02:83:40:8c:4e:32:8e:ba:f0:73:55:
         22:c4:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:33:57 2026 by rpki-client