Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
File:                     ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft (raw, json)
Hash identifier:          S9uZX+JvacsW8vIW7ZiG+czbqjNuDkg3wbAMydr4brI=
Subject key identifier:   F8:2A:61:59:6E:DA:94:B9:C0:83:56:30:DE:9B:3D:AD:E4:4E:15:59
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Certificate issuer:       /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial:       019D382DFA86B27A802601DB1B85270399EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
Manifest number:          0345
Signing time:             Sun 29 Mar 2026 06:00:30 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:30 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:30 +0000
Files and hashes:         1: ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl (hash: b5RQKMJAOhCOSGuTJW6dIRZgVkoxEjkrSicojN+H83E=)
                          2: r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa (hash: Lx5U2EtRmK/SMw+CSkQAbyTcgCy3VHiqTM7rtjngPZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:fa:86:b2:7a:80:26:01:db:1b:85:27:03:99:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
        Validity
            Not Before: Mar 29 06:00:30 2026 GMT
            Not After : Mar 30 06:00:30 2026 GMT
        Subject: CN=f82a61596eda94b9c0835630de9b3dade44e1559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:42:20:b5:e3:15:16:0e:97:34:15:64:6a:
                    21:22:92:ab:29:fd:84:61:24:e4:72:f8:35:be:62:
                    d0:a1:61:22:76:37:5b:4b:67:a8:73:4f:1b:4e:4d:
                    f0:47:6f:20:a9:c0:a8:2b:47:0a:95:93:52:3a:d3:
                    45:63:ee:be:9e:9e:b4:e0:6a:e7:3a:31:a4:5b:1d:
                    ab:c8:fa:54:9a:ef:01:08:ed:45:7e:e2:a6:cf:98:
                    38:bf:1c:c9:d2:26:09:f2:2f:0c:7c:b3:02:f2:cb:
                    9d:f2:a0:93:51:db:a4:df:4c:ae:a3:55:a2:47:af:
                    50:23:18:1d:2e:fd:3c:b1:fe:cb:7d:ba:2f:ac:95:
                    70:e3:9c:b2:50:64:f7:42:49:59:3f:b2:32:90:6c:
                    86:3d:dc:78:fe:27:d3:79:3d:81:5a:67:bc:f2:9f:
                    ad:79:e8:a1:2d:81:df:79:30:84:4d:05:f9:71:fa:
                    46:e0:97:8b:c8:74:cd:27:12:78:81:68:e6:0d:1d:
                    14:fd:22:af:a4:e9:e4:0b:de:1c:03:45:dd:f3:e2:
                    a0:a2:95:84:bc:8e:22:6d:3b:d7:0c:18:2f:1c:2a:
                    0c:4a:31:e4:36:21:27:39:40:ce:b7:18:f0:de:17:
                    3c:6f:0d:2b:0a:17:6a:54:50:eb:1d:84:98:a3:a4:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2A:61:59:6E:DA:94:B9:C0:83:56:30:DE:9B:3D:AD:E4:4E:15:59
            X509v3 Authority Key Identifier:
                keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:f1:bd:27:43:01:fe:ec:15:5e:9f:51:2c:cc:d3:5e:f1:
         6c:4d:c5:7b:23:c4:e6:b6:55:c9:df:0b:32:37:89:44:af:46:
         01:8f:73:6d:09:5c:00:0a:14:18:55:a3:c4:4e:45:ed:e5:69:
         52:5b:2f:4c:70:ee:67:f8:21:43:10:6f:4c:ad:67:a4:3f:7e:
         99:e4:d3:2d:3e:5c:20:28:8d:71:f8:e2:00:75:5b:59:26:a9:
         3c:97:96:18:75:58:c5:8f:54:b5:c0:54:5a:2d:c0:63:40:0e:
         d3:92:ce:f6:06:48:a2:c4:3b:14:26:67:d1:7d:52:2d:81:43:
         10:06:f8:91:9d:49:cf:38:03:a9:65:48:a3:be:58:5f:3f:71:
         88:c2:22:6b:c8:c6:49:bf:aa:ed:2e:2c:23:e8:a1:6a:6b:88:
         fc:63:54:c3:14:e1:eb:6d:d8:70:7b:c3:9c:dd:f9:b6:b9:77:
         78:1b:a8:0e:ec:8a:69:11:af:4e:36:a7:dc:83:04:93:43:28:
         e3:bf:71:b5:b3:77:61:99:c1:88:8d:c8:bc:f8:57:5e:17:1d:
         7f:73:cf:bf:42:ab:3e:d5:68:7b:a7:8f:3b:cc:c6:67:7b:78:
         58:24:b5:f4:c6:2d:05:b7:9a:0f:fc:3f:ea:9f:22:c7:9e:91:
         54:e9:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client