Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          MFnjtRnJhxAbW5WKLJ6Gkg2agCn/+M/Mcm9w+zeeY3A=
Subject key identifier:   BE:7F:E6:F5:A5:96:7D:D0:AD:C6:02:56:C4:FA:D6:A5:84:69:01:91
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       019CE55A2F79B3411B45A6DD7F8761D57105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          126B
Signing time:             Fri 13 Mar 2026 04:00:18 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:18 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:18 +0000
Files and hashes:         1: 1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa (hash: XVMImneJ+lt7Bh7aCUyU0VyaVfMOa36wyhi799Wx0XU=)
                          2: BwmCQS6rN4At5ff2VmaD4STv4Jc.roa (hash: Rrzqqm/u8oeldAyFqyBciHWz0IVXTmCxkQZ3y1YdadI=)
                          3: CCfgr4eEdWWKXSmYk8750hTSQJY.roa (hash: 28b5oMKVu7iwHMF/tBQt5wwDbO4pBQ9dtOPJ+Gi5j1E=)
                          4: STPdIX6CrYyfr1vohrww-wRb0C0.roa (hash: 0wlU1vJs00Ncb+MXC6wTTIKtW/iGTwibj2nEn68ZdBM=)
                          5: WCwVS32yfEcbN2t7Mkn04jWo3yw.roa (hash: tUEpiayS06Kl5jVQDSn5LTrN0f1T2b7gMrtuhq3r7OA=)
                          6: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: QgDjf2zoSumZelLNmki9idkehVyhEwsK56GkI/GuyRA=)
                          7: pHThvhBuIAH7CfCjGAtgiWcsLx8.roa (hash: B3DgLG5spA8IxXzWz1dcTgpsIhyQkmRrSy9ObmSouY4=)
                          8: ugU8Y9FG84b1BugV6DQZOEYlSC4.roa (hash: yfTItoNu5W38zOpZyo+VODcCsGUnE/HhxvLYKSZ4EU8=)
                          9: yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa (hash: K9GMU5+gUx1MkYLqtMzQhxnG0+5DQyeWPgJU54TbrTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:2f:79:b3:41:1b:45:a6:dd:7f:87:61:d5:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Mar 13 04:00:18 2026 GMT
            Not After : Mar 14 04:00:18 2026 GMT
        Subject: CN=be7fe6f5a5967dd0adc60256c4fad6a584690191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:82:f9:83:18:df:33:b1:b8:15:bc:86:8d:
                    be:d0:1f:b6:23:d3:6a:c6:f9:c2:d8:e1:f0:9c:18:
                    25:4d:c8:3b:f1:7a:75:08:f6:67:92:46:7a:05:9a:
                    dd:3f:8b:1f:86:fa:34:c1:e7:98:76:43:a3:f0:c3:
                    8e:28:fa:6c:f4:3d:e4:6c:b0:4c:a9:5c:7c:8a:97:
                    1c:b5:3c:64:cc:2e:94:5e:ac:3e:32:e0:21:aa:56:
                    b1:7d:48:e9:c2:9c:a7:21:2a:e8:ee:d1:a3:b4:bb:
                    d5:00:d8:a8:11:15:8a:41:46:f8:6e:c1:f6:81:34:
                    02:47:61:94:5f:fd:6a:a7:b4:70:66:bf:76:18:ba:
                    aa:74:1c:fa:68:14:99:ab:86:35:f5:47:4b:cd:e6:
                    14:b3:e2:fd:5d:1c:64:5a:5d:08:9c:be:9d:65:b5:
                    8a:e8:45:5e:02:f8:a4:fd:34:ef:88:8b:1f:7d:24:
                    69:f2:0d:65:9c:94:28:d9:c3:63:f6:b0:ca:95:1d:
                    d0:43:e2:28:46:22:57:60:ce:e3:5f:a7:18:bc:23:
                    2c:f9:bb:9d:87:a4:29:e9:8a:89:ed:42:19:9c:63:
                    25:53:48:3a:c3:10:13:e5:00:68:6e:ff:10:0b:af:
                    68:34:07:c5:f4:ba:59:c0:f4:9a:3b:b9:af:10:a2:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:E6:F5:A5:96:7D:D0:AD:C6:02:56:C4:FA:D6:A5:84:69:01:91
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:19:5c:56:92:aa:c5:af:f6:ae:67:aa:c0:26:32:9d:c7:
         ed:df:d4:30:18:41:7b:65:a6:59:49:1d:d3:af:54:00:98:60:
         37:c1:c0:45:4d:32:05:89:dc:75:37:7d:bb:c7:82:0c:2f:6b:
         46:ec:18:a1:94:7d:23:e3:80:85:ac:bb:0c:d1:2f:64:66:9f:
         4f:22:5d:34:73:fa:ce:a7:27:42:eb:30:b1:71:fe:3f:9a:c1:
         8b:ca:b9:d3:f1:b9:98:86:10:e5:7b:60:ef:7c:a3:c5:1e:50:
         96:50:c5:34:64:ad:74:e6:e9:91:81:d3:67:d4:35:65:6a:26:
         31:7c:64:42:a6:bc:7d:9e:11:36:3f:48:97:0f:0f:9b:d8:50:
         a0:f7:94:cd:06:d7:a6:9d:24:8f:d5:1a:fb:d5:c1:ee:fa:26:
         ba:ac:55:22:2d:b6:e8:3c:7c:90:93:14:0d:dc:5b:41:bc:c5:
         2a:96:71:fc:58:79:ba:16:35:8c:bf:41:14:4e:73:51:fb:96:
         a4:60:fe:00:58:73:03:8e:7b:04:e5:be:8b:4e:c8:3d:ed:9e:
         27:92:24:b4:d2:80:5c:d6:64:91:61:6a:bb:d8:a4:8f:ff:63:
         f4:5c:8d:08:ae:1c:94:f2:89:7d:ca:de:4f:b7:84:a5:79:16:
         49:71:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:30 2026 by rpki-client