Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File:                     EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier:          rM4o//nHEHJq6TN5YDKTBQH2BaMLAqe2uPKLd5MfjQQ=
Subject key identifier:   93:24:70:FF:DE:B9:FE:7B:3D:77:74:76:83:AA:2B:B6:07:80:89:8C
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer:       /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial:       019CE85C196B9D2AB5046A957A1663429564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number:          1869
Signing time:             Fri 13 Mar 2026 18:01:15 +0000
Manifest this update:     Fri 13 Mar 2026 18:01:15 +0000
Manifest next update:     Sat 14 Mar 2026 18:01:15 +0000
Files and hashes:         1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: EY+KxhGGulS77eX/+2YKnfZx6EQSlGMni01iQc6FsCc=)
                          2: oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa (hash: 9H05WgwG0IKa6fefs9ah5b21BWk+H446mxJWL3/+bmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:5c:19:6b:9d:2a:b5:04:6a:95:7a:16:63:42:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
        Validity
            Not Before: Mar 13 18:01:15 2026 GMT
            Not After : Mar 14 18:01:15 2026 GMT
        Subject: CN=932470ffdeb9fe7b3d77747683aa2bb60780898c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:ad:7e:57:8f:23:9f:ee:9f:f6:55:c7:ab:
                    ca:da:38:74:54:c1:d7:3c:60:ad:73:90:c7:de:4c:
                    e6:80:f8:d8:bd:7d:f9:1b:98:d5:84:b1:ee:3c:76:
                    1b:89:33:05:13:99:8f:23:4f:7f:82:34:b6:15:bc:
                    3f:69:4a:47:98:c8:49:23:bd:a3:66:1f:ff:1f:6b:
                    ab:58:9c:16:2b:76:88:4d:d9:98:4f:4b:61:a6:64:
                    9e:27:3c:64:e6:95:c0:3a:61:9b:03:c4:7c:35:d6:
                    f1:c6:18:84:68:26:1c:7e:6d:e7:cd:05:c6:2f:02:
                    95:f2:11:20:bb:b9:ae:7d:8c:84:5c:58:b6:4e:ec:
                    24:60:4f:16:69:e0:35:48:bf:bb:53:7e:87:5e:0d:
                    1b:c6:96:19:7e:b2:7d:77:54:90:9e:25:3c:a5:c9:
                    dc:7e:5e:59:4e:3b:9c:49:4a:bf:eb:fa:53:e3:1a:
                    02:7d:2e:2e:a3:6b:29:aa:b5:0b:6a:f0:e1:d8:c6:
                    29:cb:81:a8:ba:03:d1:8d:64:e7:3b:48:ac:61:b2:
                    10:9a:c3:6b:98:54:8f:0f:f9:5d:d3:7a:cc:8f:cc:
                    ca:f4:1c:cf:6c:6a:c2:8a:87:81:01:43:46:c6:b8:
                    9c:d1:18:a4:72:df:df:47:4d:fd:f7:16:58:11:fc:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:70:FF:DE:B9:FE:7B:3D:77:74:76:83:AA:2B:B6:07:80:89:8C
            X509v3 Authority Key Identifier:
                keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:22:76:c9:d9:1e:e9:1a:0a:f9:a6:74:88:c9:66:78:ad:d5:
         df:3c:6b:b8:50:0d:05:6f:85:24:83:0b:b2:87:8f:f3:c9:c0:
         c8:37:1c:6f:e1:ed:92:7c:58:6c:ad:1d:68:22:ef:f1:6c:37:
         3b:ac:36:a2:89:33:5c:5d:51:c7:83:64:61:7c:66:19:4b:2a:
         cc:4e:c9:51:93:07:ba:11:11:2c:ba:49:71:af:13:10:1f:38:
         11:be:20:e9:22:ac:1b:e7:a3:d0:ed:d6:56:a4:99:41:7b:38:
         3b:f9:36:2c:a7:fd:1b:19:13:76:2d:e4:24:ca:9b:e0:fd:e3:
         d4:f7:fb:13:cd:68:4c:91:cc:95:38:fc:a8:0f:fc:df:bf:e1:
         c6:7c:6b:3c:97:4a:99:e8:77:71:b6:35:87:f3:7c:4c:38:0e:
         e9:be:aa:63:85:ba:38:7e:a5:3f:d2:a5:c0:09:7c:9d:5b:85:
         20:91:10:7e:1a:c6:e5:e6:5d:cd:a9:91:3b:11:f7:3a:70:01:
         46:aa:1d:88:ea:82:5b:2c:93:1c:4a:f8:a2:25:9f:c4:e6:84:
         54:48:c1:d2:b1:97:e6:29:54:32:e7:ec:68:fc:e1:be:4f:b2:
         29:46:a7:bb:ef:7e:0d:8e:a4:2d:32:50:bd:0f:fe:49:c3:64:
         68:9b:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:25:49 2026 by rpki-client