Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          VzzSgpRiVXdrbKGmU443E4iFRQlDhoOagB+/uuPq6i8=
Subject key identifier:   A2:10:17:CB:35:EB:8E:2C:54:60:D3:81:44:88:9C:7D:BA:57:CD:77
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019D389C600B362A3361DF096A22CF82229F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          02D8
Signing time:             Sun 29 Mar 2026 08:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 08:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 08:01:04 +0000
Files and hashes:         1: 1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (hash: pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=)
                          2: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (hash: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=)
                          3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: qRkmm4J5128/8onDTjbTwByn+spxQar1VEHsRGpVJbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:60:0b:36:2a:33:61:df:09:6a:22:cf:82:22:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Mar 29 08:01:04 2026 GMT
            Not After : Mar 30 08:01:04 2026 GMT
        Subject: CN=a21017cb35eb8e2c5460d38144889c7dba57cd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:65:b3:57:72:4e:ff:a1:df:d3:ef:a6:2f:
                    a0:36:74:b2:6d:54:21:0a:7a:e7:f9:c2:61:22:11:
                    bc:b6:7b:a7:25:d4:8f:0a:a0:f5:34:76:c0:85:42:
                    c2:7f:b4:a0:e9:96:e8:a5:2f:2a:b6:27:8b:64:e3:
                    a0:0d:bb:57:06:b4:77:f5:e6:a3:47:0c:2e:e5:d1:
                    7a:73:47:4f:cf:b6:b9:45:3d:0c:b8:2f:cc:6f:b4:
                    48:f5:fa:12:3d:8e:1c:8b:43:58:d6:96:7c:0b:f6:
                    7b:d2:eb:8a:d6:90:c3:a1:eb:51:34:a8:c9:95:c7:
                    f1:ac:45:05:15:af:4f:d4:9c:98:74:3a:9e:fd:ee:
                    79:b7:e4:cf:29:92:c1:9a:8f:ca:f7:fc:60:34:74:
                    7d:b7:d1:42:15:ef:50:60:37:cd:f5:89:03:4e:7d:
                    9e:99:0e:fe:4f:5c:1d:9f:d0:60:9f:56:b9:15:94:
                    69:bd:74:e2:7a:33:24:61:8c:2d:9b:47:f7:44:8e:
                    be:93:30:86:57:cf:77:2b:d1:64:cb:79:21:f2:60:
                    40:ab:db:a3:96:cf:d4:74:98:23:64:7c:47:9c:1d:
                    b0:18:9a:60:a2:b2:0e:20:d7:c1:e3:ec:2b:2c:bf:
                    f7:d1:ea:ec:74:b4:06:ba:8c:0d:af:30:ab:8d:9a:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:17:CB:35:EB:8E:2C:54:60:D3:81:44:88:9C:7D:BA:57:CD:77
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:12:f8:cb:a9:a6:e4:a5:3c:5c:2c:d9:a2:b0:60:c9:20:
         b5:b1:93:34:fb:2e:7d:61:c1:a0:d5:94:e3:e9:03:7a:15:39:
         b9:9c:ba:a6:e2:01:a0:ff:b2:b4:16:1d:af:1f:cf:07:32:3d:
         7d:a8:69:af:6a:ec:a5:21:40:3e:56:f9:e0:b2:bc:04:a6:95:
         7e:9b:8a:fc:51:4b:a2:4b:ca:60:fe:29:28:c4:a8:3b:f4:4e:
         2e:f6:e6:de:97:64:ce:85:bc:58:0c:27:c2:a7:2b:35:45:3d:
         9c:00:0e:c7:47:ea:8b:89:86:a7:73:e8:96:8c:19:d9:11:cb:
         a9:e5:59:47:b2:e9:9e:3d:4c:d8:a1:8a:1d:3b:89:a2:51:d0:
         42:b9:b3:0e:db:74:d9:9a:4a:c4:76:1f:53:fb:2b:43:bc:42:
         68:10:64:33:65:08:f2:17:14:6c:c9:d8:f4:aa:3a:57:b8:87:
         f4:02:24:56:d9:95:b3:8c:94:2d:b8:fa:2b:b9:c5:66:c5:c0:
         53:bb:bf:7f:3e:3f:0c:6d:5d:f9:bb:16:72:61:f4:54:5b:b1:
         90:da:fd:49:de:b2:ba:0e:2e:af:4c:26:19:71:e7:83:de:e5:
         d3:c2:9f:f7:fb:9a:ee:6f:6d:23:4c:ca:2d:2d:54:00:5b:8a:
         66:1d:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:48 2026 by rpki-client