Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
File:                     EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json)
Hash identifier:          nGF6woggihXRbbUXAh9f/a9jYxb5MvTl9DxIdhs5eRQ=
Subject key identifier:   98:9D:41:0A:B6:86:06:80:6F:C7:6E:CB:DE:98:FA:84:67:EC:3E:3C
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Certificate issuer:       /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial:       019DB2EAF16B4694AC28549FF26E0553E442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
Manifest number:          0221
Signing time:             Wed 22 Apr 2026 02:00:34 +0000
Manifest this update:     Wed 22 Apr 2026 02:00:34 +0000
Manifest next update:     Thu 23 Apr 2026 02:00:34 +0000
Files and hashes:         1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: IIbWBl/rYp19fxKfPrRy9Xes5FEX4igztvgdFTD/kmk=)
                          2: LWh1HaeL5ortaVH3kik7DExqh78.roa (hash: qIpCeksyx0E8+hCHbqahdqByF+0cRttYVhOA2hnKbtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:ea:f1:6b:46:94:ac:28:54:9f:f2:6e:05:53:e4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
        Validity
            Not Before: Apr 22 02:00:34 2026 GMT
            Not After : Apr 23 02:00:34 2026 GMT
        Subject: CN=989d410ab68606806fc76ecbde98fa8467ec3e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:23:5a:aa:3b:c6:35:08:2c:36:06:99:49:
                    04:2a:b2:61:b2:da:50:2f:01:04:eb:94:ed:90:72:
                    68:bb:cd:74:15:79:e5:31:b2:58:39:68:a4:76:42:
                    37:75:24:6b:68:c7:63:75:9b:5c:3d:03:5f:21:df:
                    de:0c:00:74:d1:0b:f5:26:55:a1:f6:56:6c:bf:9e:
                    2d:8b:b8:40:da:a8:e4:68:c2:89:40:79:50:60:ca:
                    94:c7:17:5b:c2:54:3e:0a:f3:e9:07:62:79:af:bc:
                    d8:d7:bc:c2:58:e8:43:98:32:87:59:15:b3:fb:bb:
                    8a:19:ed:c6:5c:1d:7f:f1:03:a5:58:ae:c1:5a:65:
                    01:a4:f2:30:4b:a7:a0:fe:b7:67:2d:e3:90:aa:2d:
                    72:2d:b0:7e:3f:38:40:62:c0:09:06:ff:ff:fb:d6:
                    73:34:d8:c7:7c:fc:70:18:07:b2:f0:cd:2b:cd:8d:
                    8a:c8:36:d9:92:fc:ea:69:c0:ef:92:c1:c1:45:e9:
                    e5:f6:35:bb:0f:22:be:3f:b3:b9:63:19:f9:40:d7:
                    5d:ee:57:58:97:5e:e3:9c:1c:20:5e:b8:e8:21:fe:
                    3d:a6:00:c9:ae:9c:49:59:92:68:9c:b0:d0:db:f8:
                    2b:8d:55:96:b8:d4:a4:8e:ff:cf:74:15:54:d7:0c:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9D:41:0A:B6:86:06:80:6F:C7:6E:CB:DE:98:FA:84:67:EC:3E:3C
            X509v3 Authority Key Identifier:
                keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:46:54:ce:a7:81:3a:b5:32:91:f6:eb:77:16:e3:cb:58:a1:
         9f:01:f6:10:26:20:aa:61:11:ab:65:e2:09:13:58:02:ec:9c:
         bb:e0:ac:05:23:74:d7:f6:93:ce:9e:27:23:6f:3b:9a:34:64:
         3c:8f:a2:19:b6:46:81:48:5e:49:bc:d1:14:52:e3:90:0c:40:
         64:82:71:ad:31:35:08:bf:d3:eb:d2:b4:a8:7a:61:c5:3c:02:
         1a:e8:3c:2d:27:9a:5e:cc:1a:6b:c9:65:a9:27:a9:a0:2a:03:
         56:5a:4b:0d:7e:2d:39:9b:b8:b5:ea:5c:43:f3:bf:da:5d:f1:
         d8:61:1e:dd:11:05:d8:77:f9:4e:6f:90:11:e4:4e:e6:53:8e:
         e0:ce:2b:00:2e:6f:03:49:31:ea:3a:21:71:b7:50:bb:c4:5c:
         6f:fa:1b:86:df:08:e3:e5:0c:87:db:b1:4d:b3:d9:ca:eb:bb:
         27:08:ce:2b:70:bb:dd:48:66:63:29:47:7e:8b:0d:a8:05:b7:
         bf:d9:20:2c:9b:f7:09:c0:b0:27:e6:89:f4:29:8e:34:d1:8b:
         d3:d2:73:9f:2c:37:a0:7f:0c:99:82:a2:c4:72:32:81:5e:c2:
         95:48:31:7a:6e:25:c6:11:d1:ec:f8:8a:78:c0:bf:d2:d0:27:
         42:2d:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:34:55 2026 by rpki-client