Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
File:                     EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json)
Hash identifier:          d6Cnuhx2doZrzY7nKCWi9wLiiKu3EkpTveHn1WxuDTQ=
Subject key identifier:   84:5C:05:84:3E:73:23:82:4D:1F:4F:D0:C1:01:14:37:68:88:4C:40
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Certificate issuer:       /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial:       019D37898E2D1F988CDD2FF5218B0680F7C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
Manifest number:          033D
Signing time:             Sun 29 Mar 2026 03:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:54 +0000
Files and hashes:         1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: USQLBPQVCXAXjVq+n8RwLzhEtDYXGb+sVk3BlX6vAsU=)
                          2: yXyD_zifD57_3ENmURpKOxN4wrI.roa (hash: vtmbJA6HNA5a5SEYjfVwIxLDIaP7c5sX/Ao1BROY2M8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:8e:2d:1f:98:8c:dd:2f:f5:21:8b:06:80:f7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
        Validity
            Not Before: Mar 29 03:00:54 2026 GMT
            Not After : Mar 30 03:00:54 2026 GMT
        Subject: CN=845c05843e7323824d1f4fd0c101143768884c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:88:3b:34:1b:50:d3:af:bc:da:d7:7b:89:
                    87:37:54:0b:5f:58:4c:95:ff:a2:3a:a9:65:77:f4:
                    95:ea:95:a2:c8:17:31:3b:04:08:26:ad:d9:e5:c9:
                    7d:79:2b:91:b5:38:5d:59:f7:3a:4e:ef:c9:ab:5c:
                    0d:91:b1:22:75:f9:b9:86:39:8f:92:e5:4e:39:02:
                    4a:d2:1f:f9:91:76:1b:6b:ab:5b:11:7e:82:13:46:
                    4d:c6:4d:74:3e:f4:45:35:0a:b9:bd:81:7b:95:af:
                    b5:66:11:3e:72:9e:d5:9e:a9:bf:93:83:48:3d:93:
                    f7:bc:a4:da:61:c4:b1:be:f1:aa:9e:98:9d:73:e3:
                    3c:e7:5c:a5:63:47:bf:a2:7d:2a:65:91:25:52:c0:
                    95:d7:da:0f:84:84:bd:38:16:31:85:22:8f:41:e4:
                    37:bb:33:2c:ca:d9:26:23:99:33:cf:c5:40:32:a1:
                    35:2a:6e:88:b1:78:b2:c7:3b:96:1a:7d:54:a8:ef:
                    ca:09:8a:18:3a:b4:68:c7:44:e7:b3:60:d2:27:cd:
                    3e:b0:c2:63:6b:26:1e:41:ce:79:78:9d:0b:d3:5c:
                    de:0e:a5:39:a1:36:71:ef:37:65:74:3d:0c:24:3d:
                    ac:12:71:f3:58:c2:9b:2c:9f:98:a3:85:09:58:ed:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:05:84:3E:73:23:82:4D:1F:4F:D0:C1:01:14:37:68:88:4C:40
            X509v3 Authority Key Identifier:
                keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:48:64:11:ab:0e:55:88:03:71:9f:5d:24:a4:f8:94:0d:
         58:12:18:75:0f:05:57:01:7c:d8:14:3c:ef:ac:0b:e8:c0:f8:
         9e:42:d4:dd:98:48:dc:4b:e6:81:2d:c1:28:9c:5a:8b:22:a9:
         4e:19:a1:8c:b3:36:00:79:e4:75:db:0d:f8:25:5c:38:c3:fc:
         86:a4:de:64:13:4c:4b:6c:b6:31:2f:4a:a7:75:1b:b1:63:f7:
         4c:ae:26:48:a9:84:1e:a1:a9:e9:d1:7b:35:90:74:36:93:8d:
         a1:73:00:7f:9e:00:9b:10:24:69:a3:a1:d7:79:80:61:5b:76:
         3e:02:56:e6:4c:9d:25:a9:8d:18:cc:e2:12:eb:ce:89:d4:4a:
         39:d5:09:d5:19:75:89:16:c4:f8:b6:e9:17:74:88:12:48:88:
         7b:cb:3c:8d:ba:e6:2b:05:c6:b8:7a:65:76:bb:48:36:79:91:
         c3:90:2c:98:a7:75:ac:b0:d5:96:4c:b5:c5:96:3e:76:4a:a6:
         1e:88:9c:87:53:1b:45:a7:73:bc:c8:c9:33:af:85:bd:eb:0a:
         14:30:a8:d6:4e:40:d9:2b:8c:3d:f5:68:b0:82:e8:17:de:ef:
         7c:05:2c:bb:0c:53:16:e8:4b:2c:47:86:29:1d:8f:f0:e8:1b:
         41:68:01:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iY4tH5iM3S/1IYsGgPfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZTVlZmU5MzRjZjM3N2RkZjM3M2IzNjY3MjFmMTMzOTI0
M2Y5MDcwHhcNMjYwMzI5MDMwMDU0WhcNMjYwMzMwMDMwMDU0WjAzMTEwLwYDVQQD
Eyg4NDVjMDU4NDNlNzMyMzgyNGQxZjRmZDBjMTAxMTQzNzY4ODg0YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKiIOzQbUNOvvNrXe4mHN1QLX1hM
lf+iOqlld/SV6pWiyBcxOwQIJq3Z5cl9eSuRtThdWfc6Tu/Jq1wNkbEidfm5hjmP
kuVOOQJK0h/5kXYba6tbEX6CE0ZNxk10PvRFNQq5vYF7la+1ZhE+cp7Vnqm/k4NI
PZP3vKTaYcSxvvGqnpidc+M851ylY0e/on0qZZElUsCV19oPhIS9OBYxhSKPQeQ3
uzMsytkmI5kzz8VAMqE1Km6IsXiyxzuWGn1UqO/KCYoYOrRox0Tns2DSJ80+sMJj
ayYeQc55eJ0L01zeDqU5oTZx7zdldD0MJD2sEnHzWMKbLJ+Yo4UJWO3DdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRcBYQ+cyOCTR9P0MEBFDdoiExAMB8GA1UdIwQY
MBaAFBDl7+k0zzd93zc7Nmch8TOSQ/kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTIt
OTVjMGEzZDk1Y2Q0LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTItOTVjMGEzZDk1Y2Q0
LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPVIZBGr
DlWIA3GfXSSk+JQNWBIYdQ8FVwF82BQ876wL6MD4nkLU3ZhI3EvmgS3BKJxaiyKp
ThmhjLM2AHnkddsN+CVcOMP8hqTeZBNMS2y2MS9Kp3UbsWP3TK4mSKmEHqGp6dF7
NZB0NpONoXMAf54AmxAkaaOh13mAYVt2PgJW5kydJamNGMziEuvOidRKOdUJ1Rl1
iRbE+LbpF3SIEkiIe8s8jbrmKwXGuHpldrtINnmRw5AsmKd1rLDVlky1xZY+dkqm
Hoich1MbRadzvMjJM6+FvesKFDCo1k5A2SuMPfVosILoF97vfAUsuwxTFuhLLEeG
KR2P8OgbQWgBSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:09 2026 by rpki-client