Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File:                     eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier:          o6LIiX729US8VNYQV7LF2oRQSqjhei630eitV3IhE8c=
Subject key identifier:   94:EB:92:47:90:DD:7C:62:2F:E0:93:F9:33:9E:E8:BD:12:18:FD:A3
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer:       /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial:       019D3909F6FA5F416C0B064F0A1F55E94A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number:          0A7E
Signing time:             Sun 29 Mar 2026 10:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:47 +0000
Files and hashes:         1: cP56mDhi1TxfAMozw1551ynxj18.roa (hash: z+zkiQAAIFWOGUwsRIFAJ34UptZlbfJ1T2p0RIzTeo8=)
                          2: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: HbAG0S9whobRzBZ5lPZ/vX5u1e4xrCjBpp040c8/PMk=)
                          3: j0P_cGlQZQy3YF4RlXCRZteA6S8.roa (hash: kT8irSc09jAZGU8OrTBiKMRPHDxtPWszWFRDREVEqCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:f6:fa:5f:41:6c:0b:06:4f:0a:1f:55:e9:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
        Validity
            Not Before: Mar 29 10:00:47 2026 GMT
            Not After : Mar 30 10:00:47 2026 GMT
        Subject: CN=94eb924790dd7c622fe093f9339ee8bd1218fda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:b8:bc:0f:10:ad:ce:7a:d0:b7:71:4c:0f:
                    6f:dc:3b:cc:34:7e:12:c4:16:a8:63:1c:48:ca:48:
                    67:28:92:fe:cb:33:47:c2:ee:90:c2:c2:79:29:7b:
                    e0:53:d3:f5:a0:5a:b8:fd:91:c6:2b:3a:31:af:7d:
                    c4:44:c1:7a:ff:41:5e:c2:12:1e:80:72:41:14:f4:
                    4c:80:2c:92:2b:23:c3:34:bf:cd:89:6a:48:8e:ea:
                    e6:3e:2f:7d:4e:6d:71:a0:ff:b4:15:5f:de:d0:0d:
                    96:85:c8:30:cc:b2:92:f6:37:42:07:9c:a7:3d:bb:
                    dc:d0:19:c8:d1:4b:4f:8a:b3:6f:84:e5:fc:2f:3f:
                    b6:0c:05:b6:1c:66:41:f3:20:fa:2d:ea:3a:2e:18:
                    b9:e7:7c:73:57:8e:9d:3e:21:b4:27:a3:84:0f:bb:
                    2b:8d:c9:3d:07:64:62:2b:5b:46:f4:25:ab:2e:c4:
                    a5:b3:1a:8d:d3:a5:e1:e4:a6:04:4d:9f:87:f6:5d:
                    e3:1b:fa:ee:d9:bc:32:c5:cf:bb:07:00:ee:ae:d4:
                    a6:7c:43:98:4c:94:b9:2d:56:01:ca:bd:4c:55:25:
                    27:b9:4b:20:65:f8:5d:2e:68:36:d1:b6:8f:3e:16:
                    b7:f2:d2:28:e7:98:5c:3c:76:be:7f:00:42:94:08:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EB:92:47:90:DD:7C:62:2F:E0:93:F9:33:9E:E8:BD:12:18:FD:A3
            X509v3 Authority Key Identifier:
                keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:96:cb:6a:aa:05:8c:99:02:6b:3d:c6:04:8f:b3:ae:89:5f:
         84:2a:34:ad:7f:96:40:f8:11:8b:00:9c:ba:de:73:0f:fd:1b:
         54:fd:cd:2f:8b:3d:28:a5:76:d2:74:7a:78:64:f6:8d:fe:e4:
         c4:29:ff:5e:bc:60:5e:90:03:b0:9a:73:95:79:8c:b2:81:3a:
         75:c7:e0:e8:0c:3c:e0:6f:f4:b8:95:66:a4:33:6b:78:8a:49:
         65:f8:dd:52:99:3f:43:1c:60:f6:12:c8:23:b9:f6:d6:82:f3:
         36:ed:44:55:2d:a7:24:ce:7b:0b:75:97:9b:bc:85:00:31:28:
         64:5e:aa:c1:5b:b9:03:64:ac:45:28:d2:d7:94:5d:f2:09:d4:
         5f:d8:4a:b1:1d:65:d9:33:dc:b2:b7:ac:15:f8:bd:24:c1:28:
         d4:e3:b3:c0:46:65:c0:91:b6:12:73:1a:30:ca:0b:d5:54:a1:
         db:42:bc:2a:a9:c3:ce:90:3f:ee:27:49:26:cc:df:05:bc:ba:
         d2:72:1d:fc:eb:ad:e9:45:0b:23:92:6c:28:08:07:7b:f9:1a:
         ac:92:88:86:f0:ad:2f:47:7e:c2:bf:5c:8d:dd:86:9e:4e:68:
         23:d8:0b:94:e9:79:e5:f9:9f:78:03:51:75:6d:46:85:bf:fc:
         53:a7:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:28 2026 by rpki-client