Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File:                     ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier:          6YVTVgGo14FHQRucgYjLEgFxF+YxdypIzo5HtwvOcNc=
Subject key identifier:   2A:C0:0E:6D:8D:6A:C7:D2:5B:F2:7C:8B:F3:04:15:85:6B:CC:56:11
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer:       /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial:       019CE448337F745A9EE387632237675E9F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number:          0F46
Signing time:             Thu 12 Mar 2026 23:01:02 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:02 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:02 +0000
Files and hashes:         1: LihjF3erJvHMjTYo7GDxbJGT55U.roa (hash: tOjtoNpUm+UuyQUObaS6VVdDcVoLBkYa2bxLOM78Y7k=)
                          2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: CkbxH+zrZFcmMTWiQn6gve8gYzLS1jT5notFhiMOshc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:33:7f:74:5a:9e:e3:87:63:22:37:67:5e:9f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
        Validity
            Not Before: Mar 12 23:01:02 2026 GMT
            Not After : Mar 13 23:01:02 2026 GMT
        Subject: CN=2ac00e6d8d6ac7d25bf27c8bf30415856bcc5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:88:1a:cf:97:1b:a0:b1:55:d0:d1:f8:bd:
                    a2:9b:86:9c:d1:4c:38:64:a6:89:c3:90:70:23:68:
                    f4:94:44:f6:ce:62:3c:a6:66:25:81:ce:c8:7f:2f:
                    dd:46:f0:5a:95:60:c8:97:be:c9:2b:c6:9a:94:26:
                    52:01:d8:10:46:62:c8:2a:37:6b:2b:ad:08:21:7b:
                    3c:fc:fd:9b:6a:38:97:36:2d:dc:69:18:84:82:16:
                    9a:c3:e1:97:1f:63:88:2b:df:42:25:0e:a9:0b:06:
                    8a:f9:89:2a:3e:f4:b6:ab:26:cf:1a:f3:2b:9b:2d:
                    4a:10:b0:0e:6d:72:f1:a2:3c:0f:23:45:f5:4d:bd:
                    d9:40:fd:b0:4b:c0:0b:cf:dc:10:0c:e8:7d:97:7f:
                    78:61:ec:cc:af:c4:83:19:b4:67:a7:ec:72:1c:8b:
                    1e:75:6a:c9:6b:55:15:7d:2d:de:40:e2:25:16:c1:
                    36:42:7a:a5:7d:8e:77:3b:96:98:d0:4b:b2:3c:a9:
                    b5:b2:8d:09:cf:d8:6a:c5:55:45:ca:72:d4:69:64:
                    83:3d:45:a3:08:39:6a:b6:63:3b:eb:5e:f5:cb:26:
                    e9:3e:b6:d5:da:41:64:fc:73:c0:a2:53:ac:cf:31:
                    84:7f:87:c4:4d:5b:bf:4d:1d:47:73:8a:08:67:3b:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C0:0E:6D:8D:6A:C7:D2:5B:F2:7C:8B:F3:04:15:85:6B:CC:56:11
            X509v3 Authority Key Identifier:
                keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:16:43:90:bc:43:d7:73:0b:3f:b3:2e:bf:d1:89:a8:43:
         66:c9:8d:62:83:5f:cc:5c:c6:f0:33:dd:d6:e7:9c:73:a6:5c:
         3c:cf:16:3f:88:10:87:b6:31:89:35:45:e8:f7:5d:7b:b9:34:
         b1:2c:4f:57:60:1e:c6:aa:c4:b0:ed:8c:38:6c:a8:93:73:1b:
         6f:9b:82:1e:08:c7:af:45:f4:73:9a:4a:7d:03:b2:87:4a:f5:
         cf:75:14:ca:ce:e9:d8:88:b6:0a:10:60:54:d6:a2:2f:18:35:
         4e:35:1f:cd:c4:ad:6f:9d:a0:b0:af:46:3d:ae:5d:5c:4d:d2:
         d1:30:8e:cb:d0:df:d7:1c:dd:de:75:aa:17:b5:2b:c7:2c:2a:
         8f:5d:bc:18:4a:1f:ad:9e:b4:73:4f:e8:69:b2:49:19:a0:6e:
         09:43:6a:21:5d:96:09:18:03:29:e0:f0:30:35:b0:6f:7f:c6:
         d8:46:39:4d:41:2e:ff:07:fb:99:b5:cf:a3:50:06:cd:d9:0c:
         60:5e:bb:5a:78:41:d7:fd:58:8e:07:d4:1f:79:98:f2:b7:5f:
         97:b5:32:10:2c:7a:a9:31:28:2d:8a:d9:02:ad:d9:eb:1e:3f:
         c5:68:44:8d:7f:aa:9a:3f:b8:a1:7a:35:43:62:be:55:d0:d3:
         ff:7b:71:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:52 2026 by rpki-client