Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
File:                     eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json)
Hash identifier:          Ef0s3cbPtFt4jvf0eolNyUrnoiWPjhzt5RQe64D+SGw=
Subject key identifier:   A9:FE:0D:00:BC:97:52:17:14:16:B2:3E:65:1F:F2:C8:A4:0E:8D:E3
Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A
Certificate issuer:       /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
Certificate serial:       019D39417A72FC89E4A8BDA289740FCAA928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
Manifest number:          0630
Signing time:             Sun 29 Mar 2026 11:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:25 +0000
Files and hashes:         1: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: zDLzEuujKhxZrfRPmlcJyoNUvVDmBbfvPxh+5itgMFM=)
                          2: ly7vyq4FvWlhnN4K8ePtmopmk7c.roa (hash: 5dMOn7nMmQGXZRxmV7IOmiAHXlDQnFCFrOkwauytqBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:7a:72:fc:89:e4:a8:bd:a2:89:74:0f:ca:a9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a
        Validity
            Not Before: Mar 29 11:01:25 2026 GMT
            Not After : Mar 30 11:01:25 2026 GMT
        Subject: CN=a9fe0d00bc9752171416b23e651ff2c8a40e8de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:e3:d6:1e:8f:d1:1f:3e:28:c5:51:53:67:
                    33:03:86:b8:23:e8:c9:e4:d6:3e:c4:ff:e0:78:92:
                    9a:fc:24:d2:dd:e4:50:80:d5:dd:12:d8:c7:c4:02:
                    51:8b:ad:12:f9:bc:39:9c:59:44:ff:b7:b4:63:19:
                    48:f0:42:b3:f7:07:75:42:0a:dc:71:8c:c5:21:05:
                    9c:e3:86:6a:e0:e1:b3:ba:e3:73:70:71:4f:d0:e5:
                    bb:15:f9:7c:8c:9c:a9:24:e6:b2:4e:50:02:b3:bc:
                    b0:70:a9:ed:bf:91:cd:ed:7d:8b:c8:4c:73:40:10:
                    cf:58:48:98:99:12:09:ce:65:87:34:f8:60:2a:12:
                    11:73:eb:e8:61:ab:d1:82:b6:d4:c5:2e:22:cc:12:
                    3d:35:58:1a:ba:ed:d7:db:e1:54:a5:23:32:a8:cd:
                    b8:36:25:6c:4f:ca:73:64:83:21:7b:8e:49:a1:a7:
                    b6:ea:5c:bb:fd:3c:a5:75:cb:38:9b:c2:10:f5:5f:
                    60:95:69:58:41:11:b9:e6:83:2b:e1:6f:7e:af:b4:
                    f8:4d:d6:fb:7f:1c:9c:dd:34:be:cf:a2:95:26:35:
                    21:b8:42:a7:47:30:84:36:4f:f6:d0:a7:e3:ee:4a:
                    6f:07:c6:a3:5a:32:65:52:ba:76:68:78:24:49:ef:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:0D:00:BC:97:52:17:14:16:B2:3E:65:1F:F2:C8:A4:0E:8D:E3
            X509v3 Authority Key Identifier:
                keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:ec:30:83:a4:38:6f:21:5e:41:04:78:eb:2c:da:44:3d:
         90:c6:9d:05:9c:d7:ea:7b:f2:e1:b1:8c:92:d8:f2:7b:26:82:
         fd:03:60:2d:ab:94:ab:86:db:47:5c:da:eb:be:05:48:e7:66:
         4f:62:23:cd:95:c5:4c:46:c2:00:0d:0a:2d:54:ca:93:1f:5a:
         f7:25:0d:c1:52:df:98:a3:2b:0a:62:ba:e8:d4:8e:0c:06:0e:
         55:0e:69:65:b7:3d:a0:67:3a:df:ad:4e:c0:f3:13:7d:6e:a5:
         58:e7:09:21:af:02:4a:99:2e:32:92:f3:2e:1b:a1:b8:92:be:
         30:5e:34:94:ef:9a:1d:78:bd:d2:9d:c9:f0:4b:2a:e3:a6:2c:
         71:4a:b1:3e:22:ae:02:f1:ca:37:5e:82:97:4f:e0:e2:3e:a2:
         9f:cc:d4:30:93:af:f8:f5:50:d6:a5:6a:6e:bc:a5:09:03:aa:
         7f:fc:55:0b:24:ca:89:bc:86:89:e8:02:ec:e0:fa:5b:b4:f8:
         07:6c:50:bd:58:d0:7b:d7:c6:6e:bc:f1:e5:43:9f:a0:25:b4:
         07:45:3d:94:bc:46:cb:6d:ce:73:48:33:ad:66:f7:0d:4d:f2:
         d8:d4:6b:07:9e:fe:15:f6:96:6f:b2:e9:90:c4:6c:4f:d0:93:
         77:5c:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:24:48 2026 by rpki-client