Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
File:                     E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft (raw, json)
Hash identifier:          ESkMn9Rhbu3IwaqnCZUektrqWm8jHMP4pk9g/gnaED4=
Subject key identifier:   5E:EA:43:F3:98:F0:B4:17:32:B1:80:45:44:46:6B:80:02:EC:9F:D0
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Certificate issuer:       /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial:       7E2C322E84E9D74A5301EEB9FEFB912601A8E48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
Manifest number:          B7
Signing time:             Sun 29 Mar 2026 05:43:34 +0000
Manifest this update:     Sun 29 Mar 2026 05:38:34 +0000
Manifest next update:     Mon 30 Mar 2026 08:47:34 +0000
Files and hashes:         1: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl (hash: WX33MKL/YgHJZ9q0G7jjzsId6ZUtzdRfQO3463SKzhs=)
                          2: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (hash: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:32:2e:84:e9:d7:4a:53:01:ee:b9:fe:fb:91:26:01:a8:e4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
        Validity
            Not Before: Mar 29 05:38:34 2026 GMT
            Not After : Mar 30 08:47:34 2026 GMT
        Subject: CN=5EEA43F398F0B41732B1804544466B8002EC9FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:e2:6f:f9:d9:76:74:df:86:2b:1c:be:49:
                    93:e3:6a:06:dc:9c:f5:74:65:99:97:f4:d6:0f:92:
                    8d:dc:24:39:a3:fb:b3:d0:4c:14:44:d4:0d:67:05:
                    7d:db:e1:e8:5e:c6:68:27:bd:61:38:1f:9c:03:d8:
                    0f:b7:6c:8c:25:84:c6:45:b0:57:34:4e:77:ba:82:
                    a2:98:2f:48:bf:1e:97:61:52:45:43:e8:7c:db:d6:
                    1e:71:dc:32:7a:57:8f:a1:04:96:c7:a6:bb:b2:84:
                    a9:9e:93:8b:68:9e:38:05:3c:53:2f:5d:b4:e4:a2:
                    d5:06:52:0b:e0:05:82:a8:d5:bd:09:a7:0d:39:09:
                    3c:a7:bf:cc:38:a9:d5:34:ca:ce:4f:05:be:fb:b2:
                    55:28:b7:a4:74:0e:50:d0:4f:d0:13:02:69:e2:98:
                    7a:86:e2:be:3d:1f:c6:79:dc:62:a4:e4:d1:7d:bc:
                    a4:9a:3d:d8:e5:5e:f2:22:07:0e:b8:90:35:57:8c:
                    ed:70:40:ed:f2:37:73:6c:5a:45:c2:5d:d3:1b:aa:
                    00:f2:bb:b1:1e:4d:6c:d0:5a:a2:e7:16:01:5c:41:
                    3b:d8:b7:62:1c:e7:2b:98:ee:15:03:00:8c:e5:3e:
                    09:09:6d:13:6d:de:92:ff:24:ff:88:24:da:79:95:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:43:F3:98:F0:B4:17:32:B1:80:45:44:46:6B:80:02:EC:9F:D0
            X509v3 Authority Key Identifier:
                keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:13:8d:0a:bf:cb:fd:24:07:9f:ae:95:33:86:76:6d:27:
         82:03:96:29:f8:89:bb:c8:97:8b:cd:6c:c4:9e:0b:81:1f:57:
         b6:bd:fe:55:f3:81:a3:b0:67:91:f6:db:33:dc:26:10:7e:c4:
         c0:04:e4:82:f9:2e:73:ef:30:19:18:0c:e5:69:fc:fb:7a:76:
         08:33:02:25:d8:46:33:b6:cb:f5:d0:a0:44:bf:d8:41:a5:a5:
         4c:98:ba:a8:b3:d8:b2:60:f8:64:57:b0:3e:eb:34:86:da:91:
         71:62:b9:3a:7c:5d:ef:af:9a:68:d3:f8:d4:9c:15:a6:96:f2:
         27:fa:44:e1:a8:01:49:a7:4b:86:8d:61:d1:64:e0:bd:be:b3:
         7f:bd:10:22:0e:7e:f0:19:40:43:fc:12:f4:79:b0:34:51:18:
         06:ee:0d:d4:0c:dd:f4:1d:16:80:8d:29:8a:20:a9:bb:ab:7a:
         6d:b9:0b:3a:d4:00:cf:1f:0e:32:6f:4f:55:94:e9:0d:1c:3c:
         91:8b:16:30:ed:95:01:15:c9:18:99:aa:8b:ad:e2:97:12:aa:
         3d:98:83:a8:be:77:4b:9f:54:1e:be:09:ca:01:ee:50:62:45:
         98:dd:f8:d1:f0:8c:ed:42:fc:a4:94:c8:70:b7:42:a6:16:53:
         71:bf:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:43 2026 by rpki-client