Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File:                     eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier:          kxX+sOCWkd7EwJ5VnvjiZbXTfxHctzdjTwXmD+jZhLE=
Subject key identifier:   53:47:0C:89:D9:F7:4E:4E:CE:BB:C3:78:BB:CA:63:DA:DB:02:4D:DA
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer:       /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial:       019CD79F1F5E45CD545C4F828EABAC4AD602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number:          1866
Signing time:             Tue 10 Mar 2026 12:00:55 +0000
Manifest this update:     Tue 10 Mar 2026 12:00:55 +0000
Manifest next update:     Wed 11 Mar 2026 12:00:55 +0000
Files and hashes:         1: 51DxBzbPYOuEQqlZJUoSRh-Wl5I.roa (hash: lBHR4lK/3PjDa1VfYWpiWC2S5K6Z0gRbqmU6RgprrP4=)
                          2: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
                          3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: oNXmMyUlvXhjBXuixTjjziLfhS+nXl3IawZ9cVZURO4=)
                          4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d7:9f:1f:5e:45:cd:54:5c:4f:82:8e:ab:ac:4a:d6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
        Validity
            Not Before: Mar 10 12:00:55 2026 GMT
            Not After : Mar 11 12:00:55 2026 GMT
        Subject: CN=53470c89d9f74e4ecebbc378bbca63dadb024dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:eb:b8:18:ca:77:d2:79:b5:6b:69:7f:aa:
                    76:d9:7f:44:67:f4:e4:a1:70:a2:b3:e7:2c:3f:51:
                    82:9b:0f:75:8f:95:6a:cb:53:65:60:da:9c:bc:52:
                    55:e1:7e:4b:3d:38:d8:df:3f:7b:50:ae:06:ee:ac:
                    7d:5e:0e:e6:4b:98:a9:7e:6c:17:d7:75:77:dc:e0:
                    7c:66:08:f7:d9:05:64:41:b8:50:ae:0e:25:ec:91:
                    24:c3:f3:12:92:4b:b5:8b:2d:eb:2b:ad:e8:9e:07:
                    4d:0b:b6:70:84:29:06:89:53:53:a5:31:78:5e:a1:
                    b3:ef:db:07:e2:dc:9b:23:4e:63:d4:70:7e:98:21:
                    50:75:de:58:0b:3e:28:65:3e:38:4f:2b:da:e9:d6:
                    2c:6a:59:b5:99:a6:bf:fc:55:9d:ef:ca:ec:1a:e8:
                    fd:15:f0:56:66:f1:7b:51:01:1c:18:80:24:ea:46:
                    28:e6:06:4b:fc:c1:fd:1a:92:c4:52:01:e4:91:0e:
                    36:46:75:2c:3d:86:7e:91:1c:be:78:92:2b:49:1a:
                    68:98:25:2a:c3:7e:90:82:db:2a:68:73:17:cf:74:
                    8b:00:be:15:e9:01:bd:b1:96:be:aa:6c:2a:89:08:
                    a1:f7:a9:4f:c7:1e:52:93:53:b5:34:fa:dd:a5:2c:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:47:0C:89:D9:F7:4E:4E:CE:BB:C3:78:BB:CA:63:DA:DB:02:4D:DA
            X509v3 Authority Key Identifier:
                keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:01:c2:97:47:42:26:a1:fd:68:41:cf:92:75:49:9b:65:90:
         24:24:f6:80:86:80:7b:08:58:8e:66:a3:d6:89:53:ff:f1:a6:
         28:31:f4:77:c4:3a:d8:17:98:41:27:30:37:b4:c4:47:fd:e5:
         2e:aa:db:20:a7:d5:a2:01:15:7a:c6:18:b6:5f:ae:b8:26:4b:
         f0:a5:2d:e4:82:67:5a:e7:5d:94:74:ea:8d:36:97:e7:f0:23:
         75:c4:79:48:10:fa:5a:23:3a:3d:63:92:04:9f:b4:8d:07:48:
         9c:37:7e:98:6a:fa:6c:8d:5f:c7:df:2e:ab:e0:28:fd:72:26:
         ce:7e:ff:74:2a:ab:72:72:43:13:23:d1:bc:23:85:cf:21:e8:
         1f:1f:af:1d:80:5e:32:eb:dc:ab:db:cf:87:1e:1d:48:d9:72:
         15:c2:f6:bc:de:44:ea:bf:4c:f5:0e:d8:31:3e:1e:93:d7:ef:
         37:64:fa:c6:12:db:b9:7d:96:34:a3:95:5b:16:d2:66:a0:ae:
         40:34:01:16:eb:25:f9:f8:d9:d4:db:cc:80:15:8d:ae:25:53:
         92:fb:38:d0:c5:a1:77:78:20:9f:5c:9e:9a:ad:0c:6d:02:22:
         33:73:65:39:90:00:08:d1:81:e6:58:21:b2:e2:c3:97:fa:af:
         b7:b4:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 17:41:18 2026 by rpki-client