Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          U7LMSTL0ZvFzucwGV1CYvpz7DeAHIH85n6nuXUc03IQ=
Subject key identifier:   A4:49:03:97:C1:96:8C:84:85:FC:BA:96:A5:BF:86:17:40:FF:50:D6
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       019D3941030DE826CDC45FA22F115FB59E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          1186
Signing time:             Sun 29 Mar 2026 11:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:54 +0000
Files and hashes:         1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: r7WWRSyu2AkkKWwiM68ahnNZ5/l+qIRifK5PEbBmP8M=)
                          2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
                          3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
                          4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:03:0d:e8:26:cd:c4:5f:a2:2f:11:5f:b5:9e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: Mar 29 11:00:54 2026 GMT
            Not After : Mar 30 11:00:54 2026 GMT
        Subject: CN=a4490397c1968c8485fcba96a5bf861740ff50d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:97:ca:78:59:f1:4f:64:04:23:8e:fa:36:
                    cc:48:3f:4d:07:36:ff:8d:7f:f3:65:1e:42:21:64:
                    1b:4e:34:db:98:ff:8b:15:57:be:ee:cb:54:5a:14:
                    96:e4:46:eb:53:0d:2f:ff:46:28:a6:11:4e:40:6b:
                    0b:74:ee:b3:55:6e:3d:3d:e6:1f:98:6b:69:b1:2b:
                    07:f8:42:34:b3:97:5e:ba:d5:ba:f6:a2:11:8d:ea:
                    45:a2:b3:e3:e5:32:32:75:1f:6a:f6:dc:36:ad:73:
                    ec:63:54:e7:fd:93:b5:18:b6:43:d8:41:ee:1f:75:
                    7c:0d:e4:0d:a2:c3:f6:1b:73:a9:30:a3:cd:31:05:
                    b4:6a:c3:d0:dd:bb:72:f2:f0:92:65:05:8c:74:55:
                    d3:49:89:41:69:e0:8e:1c:0e:64:86:fd:13:5e:82:
                    3b:e5:8e:a3:4e:21:07:fd:96:bb:ee:4b:c7:01:61:
                    b1:af:d8:35:48:8e:9f:dc:79:80:1d:95:c5:9b:24:
                    aa:60:02:9a:84:f9:99:b5:08:80:20:6a:d2:41:bd:
                    98:c2:e7:56:f0:3e:ed:fd:6a:08:57:1f:e9:85:52:
                    f1:c4:a3:ba:2e:2f:7a:fa:0e:4d:da:b3:30:a7:2e:
                    0d:8f:de:7f:55:ab:23:67:d7:2f:8e:5a:bd:5b:87:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:03:97:C1:96:8C:84:85:FC:BA:96:A5:BF:86:17:40:FF:50:D6
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:dd:2f:de:c3:58:4a:e4:bf:3b:b1:0a:ba:c5:8c:28:61:
         89:04:c9:ca:22:e7:23:c9:8e:f3:df:d6:ce:9f:80:01:cc:05:
         f4:8b:e3:76:7a:28:06:37:98:70:b0:20:34:a1:c1:76:44:0c:
         2c:76:75:12:0d:f8:ba:55:1e:f7:86:0e:41:59:f8:7c:be:2f:
         dd:84:39:c5:fe:46:a3:8c:ba:21:21:96:6c:70:6e:d2:e2:a3:
         b0:9e:3e:66:19:58:10:19:fa:d6:a1:7c:2a:94:b8:c1:22:f1:
         48:0b:c4:97:07:99:cc:d5:59:6a:01:46:13:aa:c1:fc:86:43:
         da:78:f3:43:f7:c4:8f:68:99:1e:2a:2a:eb:87:41:70:15:5c:
         50:21:c8:9d:3c:bb:86:9a:a5:66:20:52:26:9f:af:22:39:ba:
         c7:07:fa:86:66:4c:5a:ad:57:f0:45:fc:e7:d8:d6:d8:ad:c2:
         5f:e0:a7:ed:7e:a8:91:55:42:5c:a6:ae:07:2d:44:1b:e7:6a:
         b5:6a:f8:4e:6d:87:21:c2:76:61:49:48:dc:3d:9e:1a:53:64:
         be:93:8e:a6:3d:ad:d2:b4:fe:2a:70:08:76:06:05:3a:b1:69:
         21:c5:b6:96:55:cb:64:f4:3d:20:7c:33:b0:8d:cf:2e:83:8e:
         ea:d6:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:20 2026 by rpki-client