Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          /EpnuRC80ehM51UHU1ur4uvlrLU/N7wnM0FyqdfSP2I=
Subject key identifier:   F5:2D:BF:E7:CF:13:B1:3A:C8:A8:46:D3:9F:2B:69:C7:4A:94:F6:FF
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       019D27721DC4777F64926F64B2296BABD2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          141C
Signing time:             Thu 26 Mar 2026 00:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:23 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: 4sc8MU3uaoVt30HXGtWuj+1VwVsza2cA0CpB0IwIPTM=)
                          2: TKh_I82_-kkJKpfPp0F_3Aj8TYE.roa (hash: TTD8G35YelDUPVGOuIJGta0ZaAQ7u3Rr5oFH1+U9Uyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:1d:c4:77:7f:64:92:6f:64:b2:29:6b:ab:d2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Mar 26 00:01:23 2026 GMT
            Not After : Mar 27 00:01:23 2026 GMT
        Subject: CN=f52dbfe7cf13b13ac8a846d39f2b69c74a94f6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:91:ca:b4:b8:cc:02:47:83:a1:2d:ad:bd:
                    0b:42:f4:46:d6:fe:23:c5:54:ba:68:a0:d6:99:2c:
                    be:84:59:fc:1c:4f:9d:8c:60:6a:e4:07:10:bb:17:
                    f8:40:76:e3:25:6d:e8:2f:18:20:5d:8f:4a:cd:19:
                    b4:6f:dd:89:d6:fa:86:4d:13:9e:11:f1:da:1e:29:
                    68:fa:6e:6d:8e:20:3d:52:61:f3:75:91:40:0b:a6:
                    df:a5:d3:20:a5:5f:cf:7d:0e:12:d9:07:b7:b9:e9:
                    94:1f:83:75:62:0f:81:41:f9:6e:58:51:e1:02:21:
                    3e:ec:9b:e8:f4:65:c9:00:6c:27:b2:ca:78:52:5b:
                    3d:22:4c:ed:1a:22:9f:fc:1a:64:3d:26:ba:61:92:
                    f6:cb:7b:39:3d:40:2d:ae:de:dc:80:a3:9f:02:02:
                    e6:4c:e9:42:6e:8e:4c:fb:d1:75:d9:98:70:7a:5a:
                    64:8c:1b:42:a9:ba:85:e5:c3:d7:9a:b8:18:42:b5:
                    76:8c:db:0e:96:b9:58:5c:6f:b7:ab:e4:c9:64:b3:
                    f6:13:f8:bb:e6:ea:70:64:c0:f4:d1:0e:df:d0:9e:
                    87:cb:ed:dc:1f:e4:4d:79:14:2b:70:6a:39:7c:ea:
                    52:43:93:e9:bb:ae:58:a2:3b:e1:53:2c:e8:d9:1a:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:BF:E7:CF:13:B1:3A:C8:A8:46:D3:9F:2B:69:C7:4A:94:F6:FF
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ca:d2:40:2d:13:69:be:44:20:1b:be:64:36:75:29:cc:6f:
         6c:3a:48:0e:50:4b:f2:9f:9b:c5:4b:57:11:f5:f5:2f:15:3e:
         82:15:29:5a:45:ac:83:da:56:7d:58:e6:c4:a7:85:3e:f2:43:
         47:6f:1e:99:8a:02:51:bd:b0:05:5f:8f:d4:1f:af:18:47:ff:
         51:45:b5:73:67:6b:3a:7d:8a:db:c0:06:6f:ca:26:ed:61:e6:
         2a:29:4b:1c:84:69:04:7a:02:2d:bf:fa:90:3e:80:06:a5:dc:
         f8:98:7c:44:ff:99:68:1f:68:06:ec:f3:1c:6c:1b:1c:a7:15:
         a2:83:5d:7c:5a:78:5c:ca:f1:cb:d7:f5:03:ec:cc:2c:f5:c6:
         a2:64:cc:a8:29:73:99:38:bd:83:1f:8f:14:f9:79:bb:56:cf:
         0a:ad:35:04:f3:4d:33:65:d0:50:9f:7c:03:b3:31:4a:90:2c:
         bb:74:9c:cd:c7:2e:ba:11:19:f1:8a:1f:f6:6b:60:88:db:df:
         41:a1:8c:a8:b4:60:07:78:ec:46:1c:3b:57:03:3e:45:1e:d4:
         85:8c:47:8f:02:6f:a4:b1:e0:1e:f3:2d:f5:d0:89:d3:bd:c6:
         35:b3:2b:03:35:e4:40:ad:00:11:87:c2:6b:2f:92:9b:f5:aa:
         fc:64:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:46 2026 by rpki-client