Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File:                     eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier:          7kErS0IOuZAM2/forUHagk6p35sEtOpnHUtPfN2iCDM=
Subject key identifier:   97:6A:E5:57:AE:00:7B:22:38:0B:1C:09:53:08:D5:F9:EF:A3:E3:F8
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer:       /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial:       019D27DF834299FA0940BFD22802A7CCB3B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number:          13F7
Signing time:             Thu 26 Mar 2026 02:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:52 +0000
Files and hashes:         1: PmriDi-WvBl3kjT0AM3ALEKea5I.roa (hash: u9rxEgE545cfyGzOPy0zoc1yKGIybLe5UkFP7WY/8Xs=)
                          2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: r6Z8lvwU2Y4WXSygPD78ltWD/k84+Twb2oPPZHkrjrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:83:42:99:fa:09:40:bf:d2:28:02:a7:cc:b3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
        Validity
            Not Before: Mar 26 02:00:52 2026 GMT
            Not After : Mar 27 02:00:52 2026 GMT
        Subject: CN=976ae557ae007b22380b1c095308d5f9efa3e3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:d9:64:00:e6:b8:90:25:6d:59:1d:c4:6e:
                    37:f5:29:cc:ba:07:57:41:a3:d4:8a:f4:68:ba:ba:
                    52:f3:af:0a:8f:59:30:ab:81:b1:84:4d:b0:27:75:
                    e7:a8:69:66:35:dc:41:6e:e7:d5:f9:71:8f:e2:b0:
                    7c:04:f6:4c:7b:c0:f4:fd:c8:ed:dc:9b:e9:1c:da:
                    a1:4b:13:3d:d2:5b:24:fd:de:0f:6a:77:a9:ab:94:
                    69:a0:7f:75:ad:83:40:fb:bc:cc:70:54:61:4c:dd:
                    f9:de:6a:01:9f:06:3e:45:54:c5:f6:e6:ca:49:ef:
                    28:71:87:1a:7e:6d:83:b2:78:8a:45:64:1c:f0:e5:
                    68:32:37:06:43:c6:33:21:4a:81:72:ea:f2:28:b6:
                    e1:09:8c:cf:c1:8c:23:b1:23:ab:67:95:8c:af:25:
                    83:66:44:cc:fe:38:44:8c:f1:c7:5b:41:41:99:3d:
                    38:4a:8a:5d:9d:3f:4b:b3:59:f6:e5:f7:e8:83:8b:
                    e7:c0:61:9e:2d:89:c6:72:0f:2d:eb:3f:69:5e:d2:
                    e1:c3:fa:98:28:ca:4a:aa:67:2c:d3:23:66:e6:db:
                    ff:ba:c4:fc:3f:66:b6:0b:a2:9c:02:dd:63:6b:89:
                    3d:d1:8d:78:75:e8:05:41:f1:df:ed:7f:c5:07:72:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:E5:57:AE:00:7B:22:38:0B:1C:09:53:08:D5:F9:EF:A3:E3:F8
            X509v3 Authority Key Identifier:
                keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:85:58:4a:75:6b:df:5f:5e:94:9c:3f:67:5f:f3:ee:5d:a5:
         8e:35:5d:97:f3:44:e9:e7:0b:28:57:9f:b6:2c:be:4c:30:0f:
         fb:49:19:f7:45:42:57:ed:a5:3e:75:80:4d:c4:9c:d8:f6:ef:
         b0:4e:bc:b1:9c:d3:d1:7d:31:16:8d:0e:e8:35:7e:db:3e:a8:
         2b:69:9d:99:45:97:77:58:0d:49:48:ea:ec:f4:c3:d3:c4:f9:
         ab:5e:59:a1:64:73:1b:2d:71:13:2d:f7:b1:f5:17:d9:32:e6:
         c1:b6:ea:f8:9d:07:c8:64:3c:cf:10:f4:e6:03:ab:b5:16:a2:
         ca:d5:0a:51:8c:f6:d7:34:93:db:c3:e5:a2:e7:60:11:8d:a0:
         24:f7:e5:83:a1:31:8a:f4:92:ec:20:32:49:3a:3d:5f:92:28:
         91:63:c0:00:b7:7e:9f:d1:d2:4a:bd:84:eb:6c:85:4a:ab:7b:
         1e:45:d5:1b:3b:b1:69:0e:4b:22:ae:ed:6b:52:46:d1:8b:6f:
         29:1e:7c:f3:9a:71:79:4c:49:83:76:09:9e:8d:9e:ae:5d:c8:
         d9:a6:94:c8:d5:61:50:aa:e6:6e:c8:90:8e:36:d5:74:37:00:
         6f:3a:33:6f:bd:75:c1:e2:6b:22:44:b0:6a:20:16:d1:0c:24:
         3e:5f:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:18 2026 by rpki-client