Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          6MJSXxznu66Q+vac3WlTmdcdn6lwm+4xqzbkhvcMVAY=
Subject key identifier:   F5:64:22:96:DC:A6:FC:66:9D:4C:BB:DB:F1:DC:43:2B:BB:89:8B:88
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       019D27727CC6BBFB10937541EA9EC1D9F871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1496
Signing time:             Thu 26 Mar 2026 00:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:47 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: Qh30dTtb/4nNdjKmPjE6eFJiGGzHkEAPp/AHu0y/CpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:7c:c6:bb:fb:10:93:75:41:ea:9e:c1:d9:f8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Mar 26 00:01:47 2026 GMT
            Not After : Mar 27 00:01:47 2026 GMT
        Subject: CN=f5642296dca6fc669d4cbbdbf1dc432bbb898b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:07:be:59:ba:a5:89:97:9a:40:32:e9:3c:a9:
                    11:ee:47:fd:17:e6:43:cb:a6:91:0f:32:56:f4:ce:
                    e2:39:e3:3c:db:10:d9:9a:50:db:81:e3:51:6c:f1:
                    d4:18:9e:a8:c3:c2:67:01:99:34:d9:ef:19:37:98:
                    a0:d1:ae:c4:5a:3b:0a:d0:ff:6b:8d:6b:bb:82:af:
                    b0:13:88:21:62:d0:3e:4d:56:a7:83:ba:a6:aa:77:
                    66:5c:28:fe:6d:b8:20:11:6a:13:45:bc:ff:66:9d:
                    8d:b4:07:2c:22:48:9d:90:b2:72:f9:64:2b:cd:eb:
                    1d:b8:67:89:07:ce:ec:05:d6:22:6d:8d:ca:6c:00:
                    c6:36:27:a4:3b:1b:08:67:3a:b7:7a:18:de:0f:38:
                    8a:df:81:2f:f7:c5:d6:2e:bf:f6:45:56:eb:85:bc:
                    7d:48:0b:3d:14:e0:26:8a:f0:28:a1:fe:ed:c9:43:
                    18:d2:84:b9:c2:b7:75:2e:2a:4e:4f:6e:b1:97:e0:
                    54:d4:54:11:f2:c1:a9:25:bb:77:0a:cd:ad:66:43:
                    b0:f4:d9:50:24:0e:1e:16:a9:2a:a4:58:f9:5f:25:
                    59:a2:98:c6:84:b0:8f:88:67:8d:f4:08:fe:2e:d0:
                    cc:1e:1c:d6:b0:f2:89:a8:e7:e9:d0:97:0e:40:c6:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:22:96:DC:A6:FC:66:9D:4C:BB:DB:F1:DC:43:2B:BB:89:8B:88
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:50:c9:e2:76:ac:33:f2:81:9b:2f:c8:9f:26:61:eb:39:53:
         54:ed:1b:20:d6:a1:dc:7e:c8:aa:00:78:1d:dd:f0:96:c7:e7:
         18:5c:d8:9b:70:7e:a0:96:bd:12:5b:2b:a2:d4:0f:91:58:41:
         48:35:f8:40:1a:56:23:73:1f:29:fa:39:df:ac:3a:6b:92:de:
         5a:e6:f4:81:f6:f6:51:01:90:8d:41:3a:6d:a5:52:3a:37:7a:
         b3:d1:df:61:9c:97:e7:9c:ad:f3:99:7b:08:48:ab:c8:34:cc:
         74:81:b9:25:8c:e1:d8:11:26:e9:11:e2:1f:36:9a:39:ef:49:
         e4:60:1e:2d:74:2d:da:9e:8f:0d:bd:da:e8:db:12:dc:1a:94:
         12:92:a2:82:ed:f2:19:90:ee:c7:ae:9b:66:09:ec:f6:27:41:
         9f:a2:32:1d:c3:a5:59:93:10:81:c1:40:bd:fd:5b:6a:0e:49:
         a5:4f:90:33:23:99:3e:80:91:53:bf:99:0a:d2:bd:95:d2:83:
         fd:db:39:ac:d2:27:82:24:1c:ff:25:e3:a2:b4:8f:ef:eb:8c:
         b4:ac:e9:b5:8c:1a:b3:6a:80:e4:56:5c:b6:5a:cc:7a:7d:28:
         b4:c4:de:a4:26:1d:55:b9:fb:7a:30:ac:ca:46:10:26:28:8a:
         8a:00:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:35 2026 by rpki-client