Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File:                     eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier:          2DvqiW8aMBaKnRrNax6dIywu24gk3EacHcgG8L3NJno=
Subject key identifier:   1C:30:F2:4B:A7:4C:50:C2:8A:17:DA:B8:D7:CB:81:B3:44:35:9B:7A
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer:       /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial:       019D389BFAD35F215224AB9C111EF4A2E55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number:          1789
Signing time:             Sun 29 Mar 2026 08:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:39 +0000
Files and hashes:         1: M3zpnwwGXaGL3R2w7EMCJ4wbclk.roa (hash: j1ibhMzbM/bGDbvXooShA+Ex1FCjg8NtC5fCI4cFBAs=)
                          2: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: GrWN3k2hn+1AaKsPfg7gID34JDKKq+qUOacdpw9IIv4=)
                          3: nkcqRqm6JxltUVOst-8A4bjg-Yw.roa (hash: XaEc/XtzoivAIb5D2Y8YGEKADIQDianztAx7Av77swM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:fa:d3:5f:21:52:24:ab:9c:11:1e:f4:a2:e5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
        Validity
            Not Before: Mar 29 08:00:39 2026 GMT
            Not After : Mar 30 08:00:39 2026 GMT
        Subject: CN=1c30f24ba74c50c28a17dab8d7cb81b344359b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:72:d5:44:24:85:e8:52:f6:cf:48:b0:bd:
                    90:f3:0e:3d:95:bc:b4:16:c5:5a:ff:50:8a:d3:98:
                    48:13:92:13:a9:0a:5d:29:00:e3:49:90:ed:79:5d:
                    4d:5f:94:e8:20:5d:4b:d6:a8:47:de:66:a1:6d:07:
                    ab:69:aa:8b:e7:41:12:bb:dc:ef:89:75:49:45:f1:
                    a8:f0:0b:94:ef:9c:b1:0c:2d:88:35:84:62:e5:2a:
                    fe:82:d7:c0:91:4a:c5:fe:1d:96:4a:24:cf:4e:9a:
                    e0:6b:90:69:b0:30:15:d0:d5:02:c3:82:39:ff:ee:
                    4c:b7:32:14:e3:03:df:e1:be:fb:07:cf:6c:49:d6:
                    36:c3:e4:2c:dc:e5:7d:e5:36:7b:98:d1:e9:a0:05:
                    5a:29:4f:5b:eb:ba:c4:3c:90:7d:11:b8:13:4f:20:
                    d7:c3:7a:bb:59:d0:b4:65:b3:56:11:b6:91:9e:ff:
                    01:1e:ec:d4:4d:ce:04:cd:16:89:eb:d5:8a:43:96:
                    f2:c5:ed:f8:4e:9b:8c:7f:58:4b:95:4d:1b:77:ac:
                    e8:07:c9:9c:dc:b2:35:31:28:3f:f6:60:08:d3:46:
                    22:93:c0:52:d2:a5:20:44:51:94:25:3b:cb:d1:6f:
                    f8:7e:25:33:a2:25:36:cf:0c:de:c7:97:3e:4d:18:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:F2:4B:A7:4C:50:C2:8A:17:DA:B8:D7:CB:81:B3:44:35:9B:7A
            X509v3 Authority Key Identifier:
                keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:61:b1:6a:92:2c:f9:00:17:47:9b:49:4d:17:66:0a:b2:fd:
         b7:38:41:c9:8b:d1:40:d7:5e:a7:8e:9d:b5:5c:41:ea:57:53:
         4d:f2:bd:16:d7:27:a5:be:d0:36:9c:a8:c0:24:fd:75:53:d7:
         7a:ee:75:dd:82:c6:be:9d:7d:3d:fd:88:2a:ec:b4:a7:55:ac:
         c6:10:92:73:72:1f:e9:98:21:78:bc:10:bc:40:f1:7c:fb:9f:
         a5:0f:2b:49:51:05:fb:15:04:ff:a4:24:6c:84:f2:0b:e9:d3:
         13:6a:39:2c:f2:ff:65:4c:d4:8e:fb:41:57:96:5a:ee:53:ac:
         47:49:08:0d:c0:91:25:1d:ff:1a:d5:52:07:7f:b5:9a:d0:2a:
         9c:59:56:1c:7a:8b:ef:17:32:3e:7d:bd:43:44:3e:b5:ea:5c:
         48:66:c7:de:97:c9:da:f8:74:46:e7:c1:49:ac:c9:8f:67:5f:
         f3:03:b5:c9:ba:a3:26:b9:30:29:8b:cd:de:6a:e3:54:47:f8:
         2a:89:c0:0e:6e:a1:5a:84:1b:de:65:34:e3:0b:b7:47:e0:fc:
         fa:04:8b:06:c7:f2:99:7f:44:ef:94:d1:c4:99:c1:e2:94:b6:
         cc:8d:57:ae:09:43:31:f5:27:db:ea:ba:b6:cf:4b:8c:e6:07:
         ab:24:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:13 2026 by rpki-client