Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
File:                     eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft (raw, json)
Hash identifier:          +eyeMpr6oR39F1DrrRiwnNyi85er+EIo8xsQcuSLHck=
Subject key identifier:   C2:F3:2A:99:88:3C:09:44:4B:8E:0F:22:BE:E7:0D:3F:75:FE:FB:81
Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D
Certificate issuer:       /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
Certificate serial:       019D36E4EDC13F132CF6EE54AFBF12592E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
Manifest number:          04F2
Signing time:             Sun 29 Mar 2026 00:01:05 +0000
Manifest this update:     Sun 29 Mar 2026 00:01:05 +0000
Manifest next update:     Mon 30 Mar 2026 00:01:05 +0000
Files and hashes:         1: eXBL0IY8mmgnQLW1xI74swf6S6A.roa (hash: HsmXrftQWUw6hDHYWb3a78tIwnu4xuqq368XPLs6+1E=)
                          2: eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl (hash: q1n2a+UvYvunCkD7Gj4mnJv1o9qoKWTve4yXO2X4TwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:e4:ed:c1:3f:13:2c:f6:ee:54:af:bf:12:59:2e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
        Validity
            Not Before: Mar 29 00:01:05 2026 GMT
            Not After : Mar 30 00:01:05 2026 GMT
        Subject: CN=c2f32a99883c09444b8e0f22bee70d3f75fefb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:e6:14:1f:2b:a5:26:01:4d:6d:d6:ac:97:
                    a7:9a:0d:a3:ce:25:62:73:91:ad:7d:6c:2b:80:b7:
                    ee:a4:cc:c5:ba:58:03:44:83:6e:c2:85:6b:f4:d1:
                    41:b0:6d:87:db:91:c6:0f:9c:eb:5c:17:e3:6c:ac:
                    f5:cc:b8:a3:0d:23:47:72:24:dd:23:6c:34:20:69:
                    d2:2a:dd:5b:b8:73:35:57:3c:10:4a:b7:1e:3f:df:
                    79:7e:1c:85:1b:87:16:06:60:e6:93:c9:db:d4:b4:
                    54:10:8e:5a:c9:13:11:8b:5f:69:ea:9a:06:5e:94:
                    82:c7:aa:04:5b:6e:f7:0e:29:1b:60:65:65:f9:68:
                    a2:2f:0b:43:75:ad:50:33:22:80:7f:b6:60:89:e2:
                    d4:7b:b1:e5:f0:c9:77:82:a5:4c:8b:7e:0e:ad:b0:
                    5f:e0:c4:9e:ba:e2:89:c4:71:04:d9:7d:e2:c5:13:
                    f1:d4:3d:b5:a8:92:2d:69:ed:9b:8f:b8:1c:c2:01:
                    2b:3c:7a:36:b2:84:b8:62:11:9c:8f:e6:c5:60:49:
                    f5:ad:93:e7:4b:1a:f4:2d:62:9f:01:25:15:ea:e0:
                    2b:f0:7c:4e:d5:e3:8c:9c:59:83:bb:1a:49:af:9d:
                    9d:33:7f:ad:e9:d4:f5:c3:75:5f:21:6d:5a:7d:20:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F3:2A:99:88:3C:09:44:4B:8E:0F:22:BE:E7:0D:3F:75:FE:FB:81
            X509v3 Authority Key Identifier:
                keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:f1:7a:83:10:07:29:5e:32:a0:76:71:8b:e9:b0:4c:d3:
         d4:c0:73:81:66:43:24:68:ad:d1:98:e1:91:3f:8a:4f:16:86:
         1d:99:b0:aa:db:da:33:d1:41:15:2b:e8:55:c7:af:03:b0:05:
         d9:ed:91:6d:b5:3f:2d:39:71:42:8b:46:f3:df:a0:1a:2e:0b:
         ae:55:a0:19:b5:95:f2:3d:73:d3:73:7c:5d:19:0d:31:f6:6b:
         c8:33:2a:2b:9e:c5:d7:5b:71:39:6b:01:12:65:a0:d0:e4:bf:
         08:6b:9c:c6:e6:ff:de:10:90:cf:ef:92:00:58:12:77:1b:b1:
         67:d4:f1:23:d6:e2:6e:93:0e:2b:f3:67:1c:06:b4:8b:52:f1:
         10:5a:f2:9c:a5:48:90:83:5a:f9:c2:53:14:0a:80:8c:58:87:
         b2:36:ac:84:99:fa:9f:1e:60:48:1d:7f:f5:5e:59:99:52:1e:
         83:96:f3:4d:0d:13:b4:fd:1c:dc:38:7a:c4:bd:56:0a:c7:a5:
         5b:c8:76:43:4a:03:2b:94:91:84:1a:32:e0:20:a2:a6:ff:e5:
         30:c4:b1:4c:48:ea:9b:d9:2e:63:4d:00:f9:0e:9f:5d:61:0e:
         c6:b6:7a:91:3b:f0:da:65:bb:e5:01:df:5e:d6:8e:aa:a5:a8:
         33:c6:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:50 2026 by rpki-client