Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          Fn3MR1JhReLBnOo9C2IFbCZe17/RFDEpnpHqnwhQVAk=
Subject key identifier:   11:D9:CF:C0:7C:0A:E8:A1:20:3E:DF:93:09:18:0E:19:76:7F:E5:EE
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019D37F72005AEEA1D2AFC0CED9451B92CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          11FB
Signing time:             Sun 29 Mar 2026 05:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:35 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: LjeNjoCYq5/NdhftrjIznT6prud+DdhRgI8/7jr8Qy8=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:20:05:ae:ea:1d:2a:fc:0c:ed:94:51:b9:2c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Mar 29 05:00:35 2026 GMT
            Not After : Mar 30 05:00:35 2026 GMT
        Subject: CN=11d9cfc07c0ae8a1203edf9309180e19767fe5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:de:89:ef:c9:f6:13:ab:5b:fd:f7:6f:04:
                    f3:5c:f8:09:e0:7d:f2:29:f2:8a:5d:e3:fd:b3:e9:
                    9b:59:12:34:68:77:03:b8:f5:4d:0e:1d:75:30:12:
                    4f:1c:8c:32:90:44:00:32:71:d3:84:e6:4d:73:39:
                    d9:f3:ec:c6:8c:75:20:4e:83:d2:5c:5e:bc:85:67:
                    20:3e:fe:83:fb:1d:2d:b4:59:14:17:84:49:5a:fa:
                    c5:1c:2b:3a:e1:3e:4e:53:15:b3:33:78:5d:0e:d2:
                    77:4f:6f:8d:ff:ef:6b:52:ca:c5:73:1c:49:ca:eb:
                    0d:4d:28:bb:ad:10:01:b0:88:9a:03:ae:90:ff:cc:
                    29:9c:cc:26:39:45:35:ec:89:3b:88:e9:87:d0:ea:
                    d6:8f:b6:34:ce:25:bd:c8:a1:11:96:36:8a:a2:15:
                    fc:5c:47:ad:f3:6a:f5:b4:20:52:32:7d:d8:b6:93:
                    7a:77:4b:04:61:1c:4b:cf:84:c5:07:5b:42:da:c9:
                    ea:5a:9a:67:69:a5:fb:b7:57:da:bf:97:6c:16:ff:
                    44:fa:17:da:1d:24:54:1c:f2:0b:f5:5c:9b:1c:86:
                    f5:2d:d6:b1:ff:87:d3:2e:93:a9:f8:d1:02:9e:b0:
                    76:01:64:e5:06:8d:1a:92:eb:2d:ab:58:5e:f1:4f:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D9:CF:C0:7C:0A:E8:A1:20:3E:DF:93:09:18:0E:19:76:7F:E5:EE
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:53:32:2d:29:c5:fb:ad:39:36:ed:35:37:54:34:7a:44:fe:
         40:65:aa:47:f9:e1:b9:6b:19:c6:00:45:3a:6c:39:82:4b:68:
         39:db:9b:ba:d0:6e:e5:e4:1d:2b:eb:e9:55:49:c1:ee:d3:06:
         0a:64:c3:42:20:da:c9:c7:74:20:49:24:dd:6b:d9:a8:eb:c8:
         13:14:8f:99:16:7e:61:d5:77:32:9a:d9:5b:e4:07:66:a9:39:
         63:ea:45:3a:f6:59:7a:b4:34:1a:4c:ac:ff:d2:1d:65:a7:f8:
         68:5e:ce:15:56:60:e1:1f:6e:a3:58:ce:b7:74:02:16:84:1a:
         d2:cf:5c:e6:31:28:84:f9:68:6a:d9:2b:06:3b:d4:93:07:eb:
         2a:f6:50:f0:68:8c:4e:ef:fa:1e:6b:06:da:ee:2b:ed:23:34:
         02:e2:fb:98:4f:08:22:59:87:fe:4a:e9:2e:ac:d0:48:a9:b9:
         60:55:b8:43:9b:e6:86:d5:d0:f2:8a:21:3d:cb:09:ab:c5:d2:
         6e:98:a4:3c:58:12:88:2e:93:14:0e:fe:4d:06:21:06:da:d1:
         30:0e:80:6d:b2:93:e6:f4:87:50:1b:83:f0:4e:8b:47:e2:c2:
         9b:4e:7e:11:6e:48:92:45:04:ba:e3:16:85:c1:98:4d:ff:a1:
         b0:59:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:35 2026 by rpki-client