Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          sb5LLsfZ+6wfl+qLI6hSPz0jSb/Xyp8tY5Kuy2M7EEQ=
Subject key identifier:   3E:5D:44:E4:FA:30:D6:66:ED:6B:9C:F3:A9:1B:12:FD:06:F3:B7:D9
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       019D38D3943BF4D4E68558D07A363557FB57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 09:01:23 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:23 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:23 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: k2UWFVQzhf0SpFC8n4s0uwTu8D2S8PKFrweiB/qjICM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:94:3b:f4:d4:e6:85:58:d0:7a:36:35:57:fb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Mar 29 09:01:23 2026 GMT
            Not After : Mar 30 09:01:23 2026 GMT
        Subject: CN=3e5d44e4fa30d666ed6b9cf3a91b12fd06f3b7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:f4:db:cc:5f:ab:82:6b:c5:f2:c1:40:ce:
                    2a:fd:0e:66:98:19:fc:57:63:9b:d1:f8:77:23:35:
                    01:b0:98:df:25:d2:6e:0b:16:7d:3b:97:ff:2f:14:
                    17:ef:87:67:f6:f8:89:75:35:0a:a0:66:21:70:be:
                    3e:3d:79:2d:63:4a:e2:5b:71:87:cf:b1:12:80:59:
                    f7:13:1a:12:66:c4:6f:ac:a1:2d:5d:26:db:ca:fa:
                    ad:8f:57:e2:58:fa:95:c5:13:7f:c3:da:60:34:e1:
                    4b:e9:7b:a6:f9:48:ca:d4:47:f1:6a:99:18:46:3b:
                    2b:5d:87:5f:d5:85:01:97:dd:ea:8d:7c:db:0d:c9:
                    6a:a5:40:08:c9:67:8c:72:fa:62:19:e4:26:f9:3f:
                    cc:11:98:39:55:2b:ec:3c:9c:60:57:cf:7a:07:58:
                    7c:ff:64:cd:9e:fb:19:6d:0e:e4:bd:9c:44:3f:87:
                    32:0f:f4:15:9e:c1:70:0d:88:2c:f8:a4:89:b4:18:
                    66:c5:8e:37:9d:f5:18:6d:3e:3a:56:7d:bc:9b:5a:
                    98:52:89:fc:84:68:53:2b:ab:e7:31:47:83:a6:3a:
                    65:66:a6:6e:af:6b:dd:6f:09:0a:fa:70:f0:79:45:
                    7a:38:9d:35:c6:ed:01:cb:87:ed:31:02:41:de:84:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5D:44:E4:FA:30:D6:66:ED:6B:9C:F3:A9:1B:12:FD:06:F3:B7:D9
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:22:a0:8f:6b:fa:8d:82:fb:5b:19:ae:08:ea:94:6c:bc:
         18:b4:a6:ec:ee:6f:6d:2d:19:57:0d:60:32:af:0c:35:d0:a9:
         19:4d:cd:1b:cc:d2:39:4a:25:08:b0:a2:24:42:69:d5:d6:ff:
         58:a4:6d:32:9f:c4:ce:3b:32:08:b6:e6:3d:92:6b:11:59:65:
         0b:6c:79:16:a8:4a:56:eb:ea:1e:2e:94:5f:35:6b:fa:3a:59:
         4d:8f:e2:db:4e:ca:53:5c:f5:97:2c:43:80:58:ad:51:6d:6a:
         9b:f2:ab:63:23:96:d8:95:00:1a:f1:29:c5:c6:6f:56:8d:fb:
         b4:4f:1f:3d:70:83:de:0d:ae:66:8a:26:4e:cd:bf:ee:d8:84:
         79:b8:ca:d8:d9:e7:c4:59:51:c5:89:64:85:ed:4d:5c:16:62:
         a1:7e:c8:6e:1b:c1:87:2d:b7:58:fe:63:7d:f4:17:f6:2f:45:
         60:a5:f2:e6:40:f8:82:b5:23:1a:0c:77:da:68:fd:79:bb:53:
         44:30:b0:30:98:58:74:7c:f6:cd:bb:b0:59:62:41:e8:eb:52:
         ad:8c:b5:46:af:53:a7:9c:83:fa:8a:fc:61:8f:38:22:d0:bd:
         36:1e:8a:8f:14:63:46:98:46:a7:34:f6:75:50:dc:59:84:8e:
         7b:9d:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:41 2026 by rpki-client