Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File:                     EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier:          7YxwZ0QGEsNT9ifJeirVb24FDfknOXhYKJw+KVV03FI=
Subject key identifier:   A3:C1:96:C0:81:AA:8D:D3:B2:88:4B:81:03:D6:BD:BE:48:03:BD:8A
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer:       /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial:       019D390A2F89F7F625FB77E89E6A508FBE16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number:          1335
Signing time:             Sun 29 Mar 2026 10:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:01 +0000
Files and hashes:         1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: TUTnhD6/lwDev0iz56l2OlLybVQfeUE90Kdbxviz5rc=)
                          2: EvYaMnO8iuW5cBkFIRoD_nhendI.roa (hash: v4CkHhI/skWxg/dd6iMZ2P6Y9SZcQGoDEFALE6/zmFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:2f:89:f7:f6:25:fb:77:e8:9e:6a:50:8f:be:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
        Validity
            Not Before: Mar 29 10:01:01 2026 GMT
            Not After : Mar 30 10:01:01 2026 GMT
        Subject: CN=a3c196c081aa8dd3b2884b8103d6bdbe4803bd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:21:0c:d8:3b:18:12:41:ef:91:16:bb:8c:
                    be:e9:44:cd:2b:e3:60:cf:a3:57:9c:0d:8e:62:e1:
                    3d:76:b1:ad:6a:16:48:56:df:49:bd:28:a6:2f:3d:
                    2c:7a:63:db:5e:09:e5:9a:4e:0b:42:41:c7:b4:b2:
                    be:50:b7:41:7e:94:09:cf:57:af:fc:75:97:5d:b2:
                    0d:02:41:5f:95:76:e0:3a:b8:01:39:67:a7:1a:57:
                    b2:b4:11:f3:74:4c:ad:25:12:ea:6a:71:b8:ef:ab:
                    07:cd:e0:bc:85:a6:95:3c:79:35:d4:08:02:ec:a5:
                    b9:46:06:a4:a3:c6:c8:a6:24:e5:d7:ec:84:5a:14:
                    6d:aa:fb:45:5b:7b:38:65:c2:62:d5:71:12:f7:0a:
                    96:15:f5:01:af:bd:e0:65:e0:c9:24:ab:53:13:9b:
                    52:2f:0a:21:de:06:d7:7e:52:96:82:52:26:07:31:
                    c7:a7:b4:f0:7d:ef:ad:19:e8:29:57:74:a5:85:2c:
                    94:b8:6b:bd:50:49:02:83:1f:73:f8:eb:b7:0a:dd:
                    bd:b6:ee:d0:4d:16:84:22:8f:ba:99:36:db:e4:15:
                    0e:a2:29:7c:c2:23:e5:1d:7a:62:f3:a4:3c:59:61:
                    b7:03:d1:dd:a2:a7:a2:0b:e0:65:7d:f0:25:3d:02:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:96:C0:81:AA:8D:D3:B2:88:4B:81:03:D6:BD:BE:48:03:BD:8A
            X509v3 Authority Key Identifier:
                keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:2e:58:a2:8e:99:1c:83:0c:e8:36:c6:dc:6e:ca:98:5a:
         4e:9a:b2:9d:20:5b:2d:48:89:2a:45:7e:2d:c7:f1:f6:84:f9:
         cd:61:d3:aa:fa:00:9f:1e:e1:d6:f0:a7:e9:ed:07:e2:20:a4:
         8e:e3:f4:8d:86:f1:67:2f:3b:ba:9a:cd:d6:b3:4c:14:4f:19:
         b9:8f:3a:6c:e5:b1:1d:49:a3:a2:41:0f:ac:95:da:b7:93:af:
         fc:a4:cc:9b:5c:5b:2e:f1:cb:7d:cf:b6:71:c3:80:8d:99:72:
         fc:df:a7:b6:c1:32:f6:e1:dd:9c:ea:09:7e:01:8b:bf:30:aa:
         9a:07:8d:81:ad:25:06:6d:37:79:eb:e7:f4:6f:7e:0b:d6:a7:
         b5:3f:1c:66:c6:4c:2b:bf:67:88:8e:cb:0d:00:1d:ad:af:3a:
         55:d2:10:73:75:9c:a3:be:ab:3a:62:be:c0:cb:92:a8:e6:a0:
         82:40:d5:8b:27:44:6c:3a:8f:c7:74:e0:67:60:3f:6f:dd:de:
         00:06:25:2c:70:95:85:f8:b0:e0:9e:3e:dc:37:46:20:86:86:
         44:6a:96:d1:1b:b5:48:12:db:d5:3c:b2:73:a4:f5:64:af:08:
         3f:dd:98:14:04:54:95:05:a2:ee:0b:aa:8e:d3:a2:16:74:e9:
         a3:6a:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:15 2026 by rpki-client