Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          IJ6IR68EskAofi/cNsPYsnzn6/Xb0QsGhapAqBVyly4=
Subject key identifier:   77:EB:6F:77:0F:79:41:B4:AD:82:F4:AD:96:E3:F6:A7:5F:36:02:D9
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019D37C061CDBC378DACB45FD7C24771B5EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          18AC
Signing time:             Sun 29 Mar 2026 04:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:47 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: 9cwyj52JlBVQvA/FNrxuQdxs+nDjMctOCsWRCNv8Q1I=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:61:cd:bc:37:8d:ac:b4:5f:d7:c2:47:71:b5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Mar 29 04:00:47 2026 GMT
            Not After : Mar 30 04:00:47 2026 GMT
        Subject: CN=77eb6f770f7941b4ad82f4ad96e3f6a75f3602d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:99:e4:e0:2f:18:44:59:73:c3:7d:3b:50:
                    8e:ef:db:3c:9b:15:8a:51:52:74:22:e5:54:5a:a7:
                    66:d3:dc:e1:91:a1:43:5c:d7:20:ae:84:15:21:2f:
                    ec:3a:40:ec:88:70:7c:c2:e2:2d:45:77:62:4d:a7:
                    f4:30:11:26:8b:63:08:bb:a1:27:3d:bb:2c:d9:7f:
                    b3:64:7e:41:f1:a8:04:36:d6:56:8b:77:95:7d:3f:
                    2b:6b:60:91:30:10:82:a8:02:ce:f9:9e:a7:a6:f3:
                    b8:c9:c6:a0:0a:a5:fd:8a:8c:21:93:c2:d6:87:1e:
                    37:9a:6c:ce:1d:75:83:53:b7:aa:a4:79:c5:3f:5e:
                    47:96:24:50:0c:e8:35:e5:e1:9a:59:71:97:92:91:
                    bd:bb:a8:91:f2:24:d7:50:1c:c3:0b:fc:dd:23:a0:
                    92:e2:27:1a:c0:41:fe:00:2a:6a:b0:6d:eb:34:6d:
                    a2:2b:ed:5f:ab:08:13:c8:df:44:e5:a2:99:a6:c9:
                    a4:59:91:d0:50:bd:5e:0b:6c:a1:a3:bb:35:86:a9:
                    7d:7d:88:b3:01:b0:e8:2d:2b:e5:6b:ef:af:48:e2:
                    97:fb:60:c7:c7:78:3a:aa:69:10:55:36:49:0b:0d:
                    54:da:dc:55:36:5a:ab:f5:e6:db:96:86:dd:72:91:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:6F:77:0F:79:41:B4:AD:82:F4:AD:96:E3:F6:A7:5F:36:02:D9
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:b3:e0:5d:5d:b3:e1:4d:d5:66:e7:46:8b:98:55:42:98:
         c9:02:fe:7f:56:c0:75:55:bf:c1:84:5f:f3:48:8b:4c:9d:74:
         a8:93:eb:cb:6a:0c:63:1b:2d:52:5e:3d:8b:a4:4e:c6:20:97:
         2c:60:52:01:03:9a:96:a8:a5:f3:26:78:66:7a:b4:fc:88:e2:
         db:7f:64:c1:0f:d6:35:20:79:af:0f:c8:c4:25:89:58:c7:86:
         4a:15:43:01:17:ad:c7:81:0d:19:f7:25:34:60:fc:c0:9f:e8:
         c2:c0:15:c6:50:c9:01:a4:d5:0a:9e:79:f1:42:b4:ad:87:76:
         c7:89:fb:bf:0e:02:7d:5c:be:cf:4f:cc:59:db:16:20:11:ac:
         ba:c3:49:3b:a7:91:46:cb:e3:68:ff:2c:dc:f0:79:9e:27:22:
         6f:ae:9e:c6:30:8e:ae:d4:52:b2:a8:e7:a0:68:ad:2f:9d:a6:
         4e:d3:19:d3:95:43:11:72:55:dc:a9:53:3c:27:e5:3d:e4:e9:
         78:38:4f:74:ab:03:93:d2:aa:0f:2d:d5:5e:da:19:43:54:d8:
         bc:88:14:e3:ca:03:53:86:eb:2d:97:18:13:8f:0b:9c:77:80:
         ad:eb:fc:a4:ba:97:fb:04:fb:21:e3:9d:80:cc:f2:39:d5:bf:
         71:dd:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client