Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          XGS9nsYPNoLVs0HdpsJ1HZ88GRjzgP53O2+oDpzYUs8=
Subject key identifier:   20:06:1F:1F:FD:B2:36:EB:E3:3A:65:BA:93:40:AA:0E:3D:C2:AA:4A
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       019CDF901D56560E39F857EA9B0AE22D8791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          3B
Signing time:             Thu 12 Mar 2026 01:01:29 +0000
Manifest this update:     Thu 12 Mar 2026 01:01:29 +0000
Manifest next update:     Fri 13 Mar 2026 01:01:29 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: a8p/rKTXlgf7Zt0atRJRPIejDBNKT9C1fppcrN/XwTY=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 18:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:df:90:1d:56:56:0e:39:f8:57:ea:9b:0a:e2:2d:87:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Mar 12 01:01:29 2026 GMT
            Not After : Mar 13 01:01:29 2026 GMT
        Subject: CN=20061f1ffdb236ebe33a65ba9340aa0e3dc2aa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:1b:c9:13:d3:3b:da:9e:dd:f6:93:fe:b6:
                    65:db:68:a1:fe:bb:78:bd:a3:77:18:5d:83:ec:7b:
                    3a:da:27:f8:16:d8:9f:45:3b:a4:ae:9f:bf:7b:52:
                    3d:c1:ef:83:21:22:c1:a2:de:3c:55:4c:9c:ca:12:
                    d6:99:23:b2:54:58:c8:83:98:d8:2e:1b:ab:e0:b5:
                    6b:b8:f3:a2:8a:89:c2:db:70:58:14:e8:e6:92:3a:
                    d7:bf:77:fd:9c:0d:ff:c5:23:ef:6f:16:e6:1b:d5:
                    59:42:0e:63:c9:c2:31:eb:3c:33:4f:46:3d:51:6d:
                    6d:fa:fc:69:2d:e3:d6:39:51:95:b1:9d:20:de:a7:
                    ad:0e:b6:34:ae:dc:31:c6:c6:a7:d2:f0:ba:15:25:
                    f4:dd:5a:1b:a9:e6:af:fb:96:ce:37:a0:2f:22:0e:
                    ba:f1:f7:db:3f:1d:8d:d8:f6:1b:cc:d6:43:d2:93:
                    56:ad:c1:c0:a3:fe:a7:7f:ce:5f:9b:dc:bf:03:84:
                    e4:64:26:d2:e3:3f:cf:38:d4:c2:70:aa:45:1a:61:
                    8c:3c:8e:02:66:7d:a2:2e:c2:21:8f:f4:56:a1:81:
                    1c:d5:f3:4e:d2:69:cb:6f:ab:85:ec:e7:19:9d:b0:
                    4d:fb:96:1d:8b:d5:14:5e:f5:4e:66:cb:cd:c0:c6:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:1F:1F:FD:B2:36:EB:E3:3A:65:BA:93:40:AA:0E:3D:C2:AA:4A
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:a0:84:d8:dc:66:5e:07:2d:64:20:35:89:f3:61:a4:0d:
         00:b0:c7:ef:19:ca:5d:f0:6b:09:f2:60:03:55:2c:2f:40:08:
         a8:e8:7d:fa:e5:f0:d6:b0:9b:c2:fb:4d:5d:15:8e:13:5f:5c:
         f4:e2:15:c5:3a:b1:3b:49:c5:5b:f6:87:47:76:aa:df:8a:74:
         53:f8:de:67:6d:89:80:e5:af:4d:8a:da:ac:a9:b0:01:5b:13:
         b2:3d:30:aa:b7:2a:05:be:75:4b:41:c0:3b:da:c4:01:b5:e2:
         eb:e5:23:52:56:72:7e:05:73:fb:8f:b7:a6:1a:85:74:95:46:
         38:ab:c9:f2:19:40:a4:b0:fd:17:11:94:2d:ea:df:e7:46:79:
         9f:57:aa:41:37:9f:0e:33:0a:a4:97:6e:27:0c:04:e6:46:89:
         a2:4a:89:cf:40:e0:df:33:67:fc:dd:94:b3:bb:0f:97:48:b7:
         28:49:82:49:2e:1e:52:b7:1d:b3:00:7f:48:59:1a:48:9e:34:
         95:bf:58:8f:ec:77:52:de:9e:04:91:46:2c:3d:e4:fd:db:2b:
         d3:e0:a5:ab:7b:47:aa:b5:e8:68:47:dd:2e:aa:d3:f5:31:77:
         39:13:4a:bd:e8:26:99:46:5a:b1:b9:11:d8:d3:9f:05:62:7f:
         54:c4:c4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzfkB1WVg45+FfqmwriLYeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NjA4YmYxMmMwMDQ1Yzk2M2U0OTAxOTVhNDU4YmNkZTJh
NWVkZTAwHhcNMjYwMzEyMDEwMTI5WhcNMjYwMzEzMDEwMTI5WjAzMTEwLwYDVQQD
EygyMDA2MWYxZmZkYjIzNmViZTMzYTY1YmE5MzQwYWEwZTNkYzJhYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4EbyRPTO9qe3faT/rZl22ih/rt4
vaN3GF2D7Hs62if4FtifRTukrp+/e1I9we+DISLBot48VUycyhLWmSOyVFjIg5jY
Lhur4LVruPOiionC23BYFOjmkjrXv3f9nA3/xSPvbxbmG9VZQg5jycIx6zwzT0Y9
UW1t+vxpLePWOVGVsZ0g3qetDrY0rtwxxsan0vC6FSX03Vobqeav+5bON6AvIg66
8ffbPx2N2PYbzNZD0pNWrcHAo/6nf85fm9y/A4TkZCbS4z/PONTCcKpFGmGMPI4C
Zn2iLsIhj/RWoYEc1fNO0mnLb6uF7OcZnbBN+5Ydi9UUXvVOZsvNwMZVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAGHx/9sjbr4zplupNAqg49wqpKMB8GA1UdIwQY
MBaAFHhgi/EsAEXJY+SQGVpFi83ipe3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iOWRjMGQtNzA1Ny00NjU2LTgyMjgt
ODc0YWFjZTQ2MjdmLzEvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iOWRjMGQtNzA1Ny00NjU2LTgyMjgtODc0YWFjZTQ2Mjdm
LzEvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOWghNjc
Zl4HLWQgNYnzYaQNALDH7xnKXfBrCfJgA1UsL0AIqOh9+uXw1rCbwvtNXRWOE19c
9OIVxTqxO0nFW/aHR3aq34p0U/jeZ22JgOWvTYrarKmwAVsTsj0wqrcqBb51S0HA
O9rEAbXi6+UjUlZyfgVz+4+3phqFdJVGOKvJ8hlApLD9FxGULerf50Z5n1eqQTef
DjMKpJduJwwE5kaJokqJz0Dg3zNn/N2Us7sPl0i3KEmCSS4eUrcdswB/SFkaSJ40
lb9Yj+x3Ut6eBJFGLD3k/dsr0+Clq3tHqrXoaEfdLqrT9TF3ORNKvegmmUZasbkR
2NOfBWJ/VMTEBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:10:29 2026 by rpki-client