Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          OYv5h5rHZLpFOgYL4MQy6KeubiH4H3wmm6UJYe/vor0=
Subject key identifier:   0B:EA:04:F0:43:D9:E5:95:FE:70:A5:55:F3:E9:99:78:8E:67:72:0A
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019D389C597A039411091A233CA32256608C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 08:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:03 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: Q9d0KGyB3IVy6+HyqC5ZpegdvaUEL9iZeUKDfGio6sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:59:7a:03:94:11:09:1a:23:3c:a3:22:56:60:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Mar 29 08:01:03 2026 GMT
            Not After : Mar 30 08:01:03 2026 GMT
        Subject: CN=0bea04f043d9e595fe70a555f3e999788e67720a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:0e:40:8a:6c:a1:3b:da:20:21:d2:18:a1:
                    7b:02:e1:ce:f1:a7:c0:6f:a6:b5:4b:f6:c2:27:66:
                    a9:f7:a3:8c:f6:35:20:46:1e:91:c5:ac:b5:35:0f:
                    6b:e8:a9:4e:e8:74:a9:42:15:45:9c:cd:2f:a6:7f:
                    2b:80:cb:15:f4:e7:11:bb:7b:2a:97:aa:9f:4b:36:
                    d7:63:33:8d:97:0d:a1:e3:d6:5b:37:95:16:b3:84:
                    13:e9:c7:7a:fb:af:14:73:ec:ed:19:94:0a:13:f4:
                    9d:55:1a:45:13:c5:3f:78:ae:87:af:87:01:6c:cf:
                    d8:a5:a3:e6:3a:26:d2:40:19:00:45:36:9c:c7:1a:
                    64:83:5c:77:cb:0b:4a:23:5d:a9:a2:8e:1e:1e:97:
                    0d:af:a0:a7:04:b1:b9:27:3d:8c:80:82:2c:64:e6:
                    a1:73:ac:09:13:d6:f4:5d:4a:12:3b:2b:90:f5:6d:
                    e6:af:b5:5a:23:b4:52:e1:9e:ec:f4:14:be:7e:c1:
                    23:f5:43:4a:4a:3c:59:c4:bc:a8:75:8c:44:3d:36:
                    a9:9f:a1:98:a2:66:e7:c3:6c:d0:07:78:d0:d7:f4:
                    f8:90:39:75:f3:e8:dc:52:ed:5f:e8:2a:12:59:45:
                    b5:f4:f6:89:f1:72:93:95:bc:39:5a:7e:b9:54:ef:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EA:04:F0:43:D9:E5:95:FE:70:A5:55:F3:E9:99:78:8E:67:72:0A
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:4b:63:74:53:d1:d2:e8:2e:54:bd:2a:8a:0a:d1:35:5e:
         ac:91:55:74:ed:73:9d:63:c1:d4:d9:8a:c2:9f:64:45:b4:59:
         f9:11:58:52:99:33:63:94:63:f8:04:21:d1:77:db:1d:be:d8:
         86:bb:b8:4f:ad:9a:da:a5:cd:92:37:d7:ce:fa:72:86:de:29:
         14:dc:d5:1b:b1:bb:30:c5:97:03:94:0d:54:f9:ec:12:fd:ee:
         2d:89:3a:26:aa:40:53:dd:fb:56:83:a2:77:1f:49:ca:c1:3b:
         60:dd:e5:2a:fd:4b:b5:a4:22:cc:95:38:52:ff:73:4b:ce:30:
         ce:60:de:97:a8:44:e9:57:14:9f:74:45:c7:7e:ee:dd:bd:50:
         7c:2d:b7:a0:80:08:7f:7b:3b:3e:f3:7f:c9:1d:49:c3:3f:09:
         14:0c:8c:be:f2:b7:ec:2a:67:22:76:75:1e:5c:bc:ee:2c:c7:
         f4:cb:57:93:d1:bf:cd:76:d3:4e:5a:09:f9:e4:e5:d0:b4:74:
         99:03:20:76:1b:e1:1e:9e:33:37:91:ad:49:61:e7:af:53:27:
         0d:70:39:ec:0e:c9:33:38:03:96:e5:c2:df:ed:91:b6:b5:7b:
         03:54:3f:f8:4d:8d:45:cf:2d:78:72:b3:df:83:2e:15:ed:09:
         bf:9e:ef:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFl6A5QRCRojPKMiVmCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGNmZDVhNTEwMTNlNWZkNmNhZjgwOTg3ODA0N2E2MDVl
ZTlkNmQwHhcNMjYwMzI5MDgwMTAzWhcNMjYwMzMwMDgwMTAzWjAzMTEwLwYDVQQD
EygwYmVhMDRmMDQzZDllNTk1ZmU3MGE1NTVmM2U5OTk3ODhlNjc3MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuAOQIpsoTvaICHSGKF7AuHO8afA
b6a1S/bCJ2ap96OM9jUgRh6Rxay1NQ9r6KlO6HSpQhVFnM0vpn8rgMsV9OcRu3sq
l6qfSzbXYzONlw2h49ZbN5UWs4QT6cd6+68Uc+ztGZQKE/SdVRpFE8U/eK6Hr4cB
bM/YpaPmOibSQBkARTacxxpkg1x3ywtKI12poo4eHpcNr6CnBLG5Jz2MgIIsZOah
c6wJE9b0XUoSOyuQ9W3mr7VaI7RS4Z7s9BS+fsEj9UNKSjxZxLyodYxEPTapn6GY
ombnw2zQB3jQ1/T4kDl18+jcUu1f6CoSWUW19PaJ8XKTlbw5Wn65VO8AgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvqBPBD2eWV/nClVfPpmXiOZ3IKMB8GA1UdIwQY
MBaAFHoM/VpRAT5f1sr4CYeAR6YF7p1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMt
ZGQ1NjIzMDQ4ZWEyLzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMtZGQ1NjIzMDQ4ZWEy
LzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeepLY3RT
0dLoLlS9KooK0TVerJFVdO1znWPB1NmKwp9kRbRZ+RFYUpkzY5Rj+AQh0XfbHb7Y
hru4T62a2qXNkjfXzvpyht4pFNzVG7G7MMWXA5QNVPnsEv3uLYk6JqpAU937VoOi
dx9JysE7YN3lKv1LtaQizJU4Uv9zS84wzmDel6hE6VcUn3RFx37u3b1QfC23oIAI
f3s7PvN/yR1Jwz8JFAyMvvK37CpnInZ1Hly87izH9MtXk9G/zXbTTloJ+eTl0LR0
mQMgdhvhHp4zN5GtSWHnr1MnDXA57A7JMzgDluXC3+2RtrV7A1Q/+E2NRc8teHKz
34MuFe0Jv57vUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:58 2026 by rpki-client