Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          zLLCS8IJ+ME+/ufAzEfl0WxAAC5pl/98ZJRg6Igb1gU=
Subject key identifier:   40:15:99:9E:F7:13:FC:08:3E:6A:4E:15:C1:D3:35:39:7C:41:64:1E
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       019D37C098CC9826452FD50C6B6A6C5047F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 04:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:01 +0000
Files and hashes:         1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: IVWK94iNPWBhAqRF5qCUkYU4UuoCiRRaUa5mYPXG5AA=)
                          2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:98:cc:98:26:45:2f:d5:0c:6b:6a:6c:50:47:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Mar 29 04:01:01 2026 GMT
            Not After : Mar 30 04:01:01 2026 GMT
        Subject: CN=4015999ef713fc083e6a4e15c1d335397c41641e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:8d:63:28:f7:8f:6e:1b:40:0b:a9:0b:dd:
                    84:1a:50:8a:06:71:8e:c5:99:1f:eb:c2:29:b4:c4:
                    ac:11:22:02:30:03:7f:d9:4f:bb:10:4d:04:65:45:
                    b2:ea:be:cb:f2:ff:7f:a1:66:f4:a7:f9:ee:2d:61:
                    84:4a:94:b4:ae:d0:01:03:b7:8b:67:fc:34:7c:52:
                    0e:5d:83:46:89:cc:d6:70:94:7b:48:cc:ff:da:28:
                    29:db:2a:26:37:3f:60:de:4d:88:e8:fb:5d:3f:42:
                    5c:22:12:a7:72:a5:1a:97:3a:b7:10:96:4c:71:57:
                    6c:fa:26:78:50:90:86:44:4b:b5:a9:76:99:51:a9:
                    86:22:cf:0e:62:b7:66:d3:32:68:52:54:c5:3a:a8:
                    79:d0:fd:e0:37:41:e9:37:04:ab:9e:60:8e:fd:52:
                    a3:6a:a7:58:6f:ff:0f:cf:48:00:30:d2:1f:98:89:
                    bf:42:1f:de:a8:32:a7:bb:7a:7c:35:0e:98:d3:06:
                    e3:e5:7e:ad:8b:ce:0e:7b:1f:39:2e:37:6c:aa:b8:
                    c1:58:65:de:6d:a5:fa:53:44:be:96:32:cd:6e:e5:
                    a1:34:28:cd:fc:d4:b4:bb:1a:dd:60:8a:60:49:f7:
                    2d:c5:83:ba:20:ea:e0:23:ee:08:b4:06:7d:ed:1c:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:15:99:9E:F7:13:FC:08:3E:6A:4E:15:C1:D3:35:39:7C:41:64:1E
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:d2:0b:77:5e:97:38:98:fb:f2:57:e9:06:33:c6:cc:35:
         bd:60:8f:3d:a9:c3:f5:ab:a2:0a:a8:5b:a3:e9:05:7a:da:07:
         d9:60:80:13:28:25:f2:24:bc:d4:53:c0:87:a0:87:6a:5f:b0:
         33:d5:bb:c6:4b:50:5f:78:a6:b6:35:ba:12:ff:d0:59:1b:80:
         4c:fd:9c:6a:57:69:11:41:98:11:ae:1f:45:34:a9:ab:80:9c:
         41:a9:8f:d1:73:16:c4:e9:de:cb:36:9d:66:82:8c:9f:1b:cc:
         fa:7e:51:8b:b4:2c:6d:83:15:1d:d1:9d:e1:cc:97:c4:5c:7e:
         33:e2:e2:f1:1b:8d:fd:46:53:25:5f:df:63:31:34:c4:0f:82:
         2d:72:20:f5:10:2c:27:10:c8:77:bc:81:29:db:96:a3:94:d5:
         d0:a9:55:12:26:43:42:82:5c:3e:b2:62:5c:6e:c1:7f:f4:79:
         fc:a8:7b:dd:3e:28:cc:c6:6b:ba:b3:d0:ab:2f:01:49:8c:54:
         64:a4:8e:b7:b4:70:c6:54:d0:f3:05:2a:d3:00:a2:e5:93:b7:
         52:86:0f:5e:db:ad:18:12:db:68:55:be:cf:2d:3c:72:6e:72:
         8e:80:5f:6d:2d:d5:07:16:38:0f:20:64:c0:57:84:ea:0f:1c:
         07:ae:c5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:36 2026 by rpki-client