Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          +wRIBZgfosvkioV58fLy4fppDqXJk/Ao0gwOUigxPbg=
Subject key identifier:   9A:AB:D4:02:E7:9E:EE:E3:E4:80:8F:E7:3F:30:E8:C2:56:74:DC:8E
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       019DCD4F813E0EE0B8D0EA5C935A5E5FE2C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          0FEC
Signing time:             Mon 27 Apr 2026 05:00:32 +0000
Manifest this update:     Mon 27 Apr 2026 05:00:32 +0000
Manifest next update:     Tue 28 Apr 2026 05:00:32 +0000
Files and hashes:         1: 5V2uHMYB3AUKGtIMOIip7J3pWIE.roa (hash: SNdMO15bPZaXBCMvAcfZFL9fGPGQ8SDwl5MGeeyye2I=)
                          2: QCoWTqPLbJGw1zUEhRnFeDiw-yk.roa (hash: 5ldKqSvwDttirHKWjJFhqblT3JDzISSPbft9iHSvGCE=)
                          3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: q2dO76UA5zqryTcnugNuFt+lnaFAqENqH5ReCSYVmaI=)
                          4: tcrZxlSyhxTj8kiRDMPfiA4u4Z0.roa (hash: X3hmm+WjiPxOc2QFBzEzmGR0EXyXyN6SSxewOy8ufSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:4f:81:3e:0e:e0:b8:d0:ea:5c:93:5a:5e:5f:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Apr 27 05:00:32 2026 GMT
            Not After : Apr 28 05:00:32 2026 GMT
        Subject: CN=9aabd402e79eeee3e4808fe73f30e8c25674dc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:4c:09:04:0b:fe:a9:29:a3:e0:9d:a1:80:
                    ea:93:95:81:36:97:d4:8a:47:22:49:9e:22:4e:e7:
                    d2:4e:06:5e:71:3a:a8:79:bb:0c:6a:e9:91:02:c3:
                    3a:45:7d:80:3f:13:fc:98:44:c2:8e:e5:ee:5b:1e:
                    80:c5:6b:59:9a:bb:f5:11:5d:fd:d6:21:13:97:0b:
                    f4:86:09:c7:a6:00:9d:4d:df:61:b3:bb:f4:a7:fa:
                    a8:fa:20:be:c7:ef:54:a7:fb:65:00:fa:e3:26:d7:
                    87:f5:13:e3:7b:cf:73:0f:d4:c3:39:0e:1e:5b:06:
                    de:6e:01:6e:34:bf:9f:81:8d:2f:03:8b:94:1d:32:
                    72:59:10:b9:d0:4d:a3:ac:8b:35:71:6c:ec:1a:23:
                    b7:46:60:5b:a9:75:f7:2e:44:5b:9f:34:65:b8:b9:
                    ef:09:cd:89:02:03:15:38:a5:17:cf:ed:f3:dd:d7:
                    78:f2:13:83:bc:4b:4d:24:49:45:ed:84:63:51:f7:
                    d3:7e:62:a9:06:d2:47:c4:86:94:7f:f5:e7:68:db:
                    e4:0e:59:43:7f:71:6c:e3:bf:01:de:e7:a1:f1:b8:
                    d8:02:6e:b9:b4:79:77:6a:45:e9:7f:c0:71:3c:b7:
                    c6:ef:a3:aa:19:96:7b:44:bf:3a:77:67:10:d6:08:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AB:D4:02:E7:9E:EE:E3:E4:80:8F:E7:3F:30:E8:C2:56:74:DC:8E
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:39:f2:87:d0:f9:8d:d3:9d:5e:99:ef:6c:5e:28:53:1d:7c:
         e8:c6:25:33:7a:bc:57:27:64:23:21:21:60:18:dc:5d:b9:e3:
         55:7c:bd:c8:83:72:d7:95:2b:69:90:0c:65:40:d4:2e:b9:2d:
         0f:1b:00:77:cf:34:e4:b9:43:d5:59:9b:55:7c:36:91:db:5e:
         be:12:1a:c0:ad:3f:c7:13:f0:7f:aa:e6:99:b1:50:b2:39:bd:
         98:32:97:56:e1:0e:53:25:c1:c5:44:31:eb:81:bd:47:5e:8e:
         c2:f3:ca:d1:de:cb:56:27:0a:ed:cd:d3:90:b9:7f:e0:af:3c:
         83:a9:0a:0c:57:83:11:7f:ad:d4:44:47:fd:58:65:4d:77:f5:
         2f:5c:80:02:af:78:0e:86:a6:94:85:f5:c7:c1:5e:59:0b:84:
         74:47:8e:fa:97:a6:f0:d6:bd:25:ed:d6:6f:d4:17:0e:bf:8a:
         b6:48:40:15:e7:fe:76:22:37:62:e2:f2:f6:a4:fb:0c:70:dc:
         3e:4f:b5:4d:3a:e3:17:e4:34:f3:0a:86:66:2b:d2:bc:a5:1e:
         7d:6b:e4:f2:80:b8:c5:06:c0:88:e8:ed:cf:1c:b6:df:09:69:
         19:4a:39:bf:9d:c8:15:ae:55:bc:00:fc:99:9d:c7:28:76:a8:
         95:4e:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:09 2026 by rpki-client