Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          U72j+t6sjwT6AGlzrvC9evGhu+312V/rOIXFnw5h1eI=
Subject key identifier:   12:26:C9:3B:82:70:D7:4A:47:CE:CF:6A:B7:B8:0D:5E:28:1E:FE:20
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019D382E1FE512630B3EA36EE34D5D225239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0DF2
Signing time:             Sun 29 Mar 2026 06:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:40 +0000
Files and hashes:         1: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: hScvVnvvpoivb9VV97Y0GsrNMiQMd1TDXmPEcN8XxmY=)
                          2: MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa (hash: /l+JnqGiTQwDPE5vvTHQU+XCg4rivjzP4ZBaPNog3Q4=)
                          3: SMb-rYCNgB0GGUftiR0-0tMpWdM.roa (hash: uzxaI3f+u6QODKvTbBU5GWkNbNSg2FXZc5mS8nAJPjw=)
                          4: XWNOS1F1apSFln8lh8Msd5YKTd4.roa (hash: OvuPGjMv+zBsjGEY9dUfxrPrbBlbWPiCni7u0TxxErQ=)
                          5: aTwl_06eKgN-7Ji1g80MtelQtJg.roa (hash: /CzAIKlGk8B5id0rpbTAezRaHR40d5ivxFrB/UK/mW8=)
                          6: h8VusyvFygMniL7AA6ANP70RnB8.roa (hash: s7z2PciT+JcsK78pungkQ14zfBEzCrpixiOQvhEcI4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:1f:e5:12:63:0b:3e:a3:6e:e3:4d:5d:22:52:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Mar 29 06:00:40 2026 GMT
            Not After : Mar 30 06:00:40 2026 GMT
        Subject: CN=1226c93b8270d74a47cecf6ab7b80d5e281efe20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:c3:ea:0b:e0:6a:f7:1f:08:a3:af:1d:87:
                    a6:4a:79:37:b9:d3:bb:d7:84:85:81:03:0d:3a:57:
                    d1:e5:d5:a1:46:78:d1:f8:50:16:8c:17:7d:13:e0:
                    2d:24:16:e7:41:02:d8:51:fc:5d:87:a6:9e:da:ff:
                    cd:30:45:6f:3c:6f:23:16:aa:be:f0:7d:2d:ba:6d:
                    ff:5b:d5:02:8a:5b:88:98:60:66:f5:e3:54:54:fc:
                    8a:40:e2:ed:b3:be:d4:d5:c1:dc:5d:63:b4:da:e0:
                    e5:64:b8:a3:bc:e9:30:8e:33:4d:51:72:65:98:fc:
                    8f:cb:d0:70:b8:90:70:08:ac:4c:a6:46:b7:f7:d3:
                    13:4c:15:46:a3:d0:a0:b4:d6:33:40:e2:15:81:66:
                    85:c5:73:db:83:17:76:1d:91:22:a5:a2:8a:bd:a2:
                    62:be:aa:9a:af:32:19:66:37:3d:73:28:ce:ef:f1:
                    8e:44:b9:06:08:c4:51:bd:09:c4:86:e7:e7:53:1c:
                    20:ff:b8:89:82:40:eb:90:31:fa:f7:c4:42:a1:d3:
                    e1:f6:8f:75:4d:7d:72:5b:66:a8:1b:83:73:19:66:
                    76:5e:7b:b6:0b:dd:20:2f:22:09:a5:61:0e:ec:29:
                    c8:e6:de:71:18:2c:e3:29:ca:d5:b7:d7:cf:1c:7e:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:C9:3B:82:70:D7:4A:47:CE:CF:6A:B7:B8:0D:5E:28:1E:FE:20
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:92:81:ff:8b:fa:97:9a:4e:90:e0:3a:f8:14:5d:a4:c3:
         ef:f4:48:44:5c:2f:8d:bd:e1:c2:51:83:3e:3a:68:72:fd:04:
         be:b7:0b:35:13:30:83:5b:8f:45:f4:d1:96:3f:8e:d4:08:aa:
         eb:c7:e7:63:b9:a9:15:89:e0:33:5d:bd:db:83:ef:2e:44:69:
         a6:15:e6:ae:7f:d1:7e:56:00:93:f6:1c:6a:35:6e:55:ab:b6:
         ad:e9:5b:5d:72:52:d6:7a:7e:a6:22:1b:3f:d8:08:ad:21:f7:
         94:aa:89:04:65:e4:bd:be:1a:c3:f3:53:32:c7:e8:14:42:da:
         af:32:c4:98:7d:a5:67:83:43:a6:b6:b8:f4:6d:92:f9:00:5b:
         b4:b7:c9:7c:ad:fa:60:81:87:dc:43:75:08:15:fe:ea:dc:1c:
         94:fd:40:91:0d:79:fe:1e:56:c3:5d:bd:28:62:c8:21:d0:fc:
         15:97:37:cf:12:b5:cf:26:ae:92:4f:71:61:bd:70:37:14:31:
         4a:bc:32:17:41:66:d9:1d:db:77:29:e2:b2:74:21:66:c9:27:
         e9:db:d8:a9:98:58:ff:24:3b:c4:b5:5d:71:f3:82:6c:80:c9:
         e5:36:b9:b5:fc:6a:27:e9:29:41:d3:09:24:78:c0:08:b5:cc:
         0e:ae:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:18 2026 by rpki-client