Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          8rSB1NGbtkZAZmXk3lGd3QHudKhwU4mycFN+7fIbkQ8=
Subject key identifier:   9D:F8:5D:EE:1F:F6:EC:D5:85:0B:7E:5B:88:09:E5:04:B0:9E:05:0D
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       019D38D3191DA531B7239C67C47ECE4DA1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 09:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:51 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: xoG2uJ4YmAx2iw8S9yix9v6fwUmfrmt9Kupv3o1Jbx4=)
                          2: sgkOUU34-98oBXZ_m0jBmS5vUec.roa (hash: E8ZXuT+H7colqnHoMLtcicaB+wl08+ImLIK4sH1PrIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:19:1d:a5:31:b7:23:9c:67:c4:7e:ce:4d:a1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Mar 29 09:00:51 2026 GMT
            Not After : Mar 30 09:00:51 2026 GMT
        Subject: CN=9df85dee1ff6ecd5850b7e5b8809e504b09e050d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:ff:75:37:f6:b7:42:fa:97:01:24:b9:67:
                    70:b6:50:6e:3c:78:68:64:31:44:43:da:a7:8a:79:
                    a4:d0:81:21:34:73:15:16:b0:33:ca:dd:9f:2e:57:
                    1f:fe:66:13:30:27:f3:6e:eb:20:4b:af:31:46:4f:
                    9a:5b:9a:e9:82:bb:d8:9a:df:41:ab:5b:7d:d9:f6:
                    7e:45:66:80:b9:9a:c5:15:fb:2e:78:0a:47:35:a6:
                    3f:77:74:16:f7:17:f5:8d:a0:b8:f3:56:b9:bb:99:
                    15:e5:66:8c:1e:46:18:5d:a3:e6:cc:05:ea:03:9c:
                    1b:ac:c3:a7:97:6a:03:67:58:bd:bf:fe:d5:01:a4:
                    63:bc:2b:c8:c1:6e:30:c0:45:f2:2c:7e:37:be:b6:
                    27:32:12:90:76:8c:fd:8d:eb:7d:56:8f:0e:33:68:
                    e2:00:a4:d3:2d:e5:09:55:11:25:a9:1f:03:c1:30:
                    34:c2:4f:25:fc:fb:1a:b3:e2:df:b5:a8:70:28:dd:
                    4d:54:66:ed:f1:0b:a4:c5:4f:60:b2:a9:72:71:d1:
                    f9:10:ff:79:73:89:81:22:d8:80:9b:ac:36:06:bf:
                    e2:06:22:89:f7:6a:31:de:d1:8a:dd:34:d0:f1:54:
                    10:69:6a:86:97:36:ba:6a:9b:d1:f6:c1:60:a7:c2:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F8:5D:EE:1F:F6:EC:D5:85:0B:7E:5B:88:09:E5:04:B0:9E:05:0D
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:32:a9:bf:6b:17:b4:3c:ab:65:96:da:06:26:f3:c0:18:0f:
         44:dd:91:2a:c8:ea:b4:3d:38:ce:1d:ff:17:7f:e2:75:be:81:
         f1:7a:97:c4:70:2e:83:1e:e4:fd:d4:2d:e1:08:fd:bf:a2:69:
         46:9c:5a:06:a3:46:fa:35:ff:53:35:1d:f5:ee:8f:c0:4f:b2:
         7d:79:ba:7a:ab:dd:81:92:86:4b:8b:d2:c7:5f:41:2b:97:a1:
         bc:d0:e8:04:e5:ca:b5:9a:ce:d1:72:5a:15:69:51:b6:f7:a6:
         96:af:9e:cf:2a:0f:c6:45:18:08:5a:b5:05:10:9c:aa:ea:95:
         28:45:0d:22:f5:16:c5:38:06:53:06:1f:1b:6a:48:2f:16:5a:
         30:c5:4e:85:ac:ea:de:fb:a5:47:1d:67:af:5b:e6:9e:35:aa:
         13:6a:db:65:1d:6e:6e:aa:6e:42:88:c1:40:5a:65:aa:21:35:
         68:3b:90:0e:60:cc:1b:17:91:5c:b9:5b:27:7c:4a:93:e1:08:
         89:b1:cf:de:53:a7:08:e4:d4:da:51:59:1e:67:27:e0:93:94:
         8f:bf:99:1e:55:fd:24:a5:53:6b:76:28:81:d9:94:d7:25:54:
         d0:17:cf:fb:22:e7:69:fd:dd:23:58:39:fc:0a:f8:c1:dd:57:
         1b:8c:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:01 2026 by rpki-client