Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File:                     1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier:          /WC6fytMC2eDRtj5A4kAvXmSW+Bm/hOgqL3x/FnVTqU=
Subject key identifier:   2B:5F:89:4E:A1:66:6E:0A:D8:F2:03:5B:49:E9:2C:A2:E5:5C:44:9C
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer:       /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial:       019D2660172E308890CD32085D9E211DE0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 19:02:04 +0000
Manifest this update:     Wed 25 Mar 2026 19:02:04 +0000
Manifest next update:     Thu 26 Mar 2026 19:02:04 +0000
Files and hashes:         1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: WgIsUYvg9FIiDnXK6PhjaRCnJxUj++4JdCSLiOnkj10=)
                          2: X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa (hash: FFDTmh8Q3nrNL2M4JqNRzlrW4SSQct1GaW84BBkxSQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:60:17:2e:30:88:90:cd:32:08:5d:9e:21:1d:e0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
        Validity
            Not Before: Mar 25 19:02:04 2026 GMT
            Not After : Mar 26 19:02:04 2026 GMT
        Subject: CN=2b5f894ea1666e0ad8f2035b49e92ca2e55c449c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:89:04:a4:a4:a2:6b:51:6b:fd:25:68:83:
                    51:18:aa:0a:74:4c:23:f8:c8:53:46:4b:42:a4:d6:
                    bd:5d:39:03:3a:17:73:90:8b:37:bf:7e:e0:e2:8c:
                    a0:68:0c:5a:4b:eb:c5:e4:c1:dc:a9:71:d0:4b:d8:
                    df:8e:34:0f:ee:3a:51:b6:dc:76:f4:82:27:6b:e1:
                    c2:87:08:a7:b2:c6:67:ef:72:e8:bd:39:46:a8:ef:
                    d3:65:9b:eb:95:8e:63:f8:25:ee:1a:a7:f6:aa:4d:
                    0a:c6:ab:3c:71:96:3d:ee:8f:81:9d:a5:2a:94:91:
                    31:26:b3:26:82:88:c2:1c:d3:a5:f8:cc:89:ee:39:
                    8c:25:47:3d:58:bc:ad:5e:cb:ae:1e:66:65:68:42:
                    5b:52:30:6d:c0:31:5b:69:b7:d5:c9:5b:da:fc:48:
                    e0:1e:d4:6e:48:2c:2c:7a:d9:18:c7:83:44:96:7f:
                    91:e0:2f:ce:c0:2a:75:b5:18:54:35:0c:04:5e:14:
                    3a:a4:b3:d1:c3:7f:fc:c9:c7:b4:72:35:bc:47:ec:
                    76:1c:72:65:cc:cc:f5:96:0c:cb:d7:42:d8:b9:b4:
                    29:91:f1:df:fb:80:8d:9f:b3:48:d5:4f:48:1c:57:
                    33:78:fa:e1:d4:f4:24:e7:34:d6:45:6e:a9:cf:bd:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:89:4E:A1:66:6E:0A:D8:F2:03:5B:49:E9:2C:A2:E5:5C:44:9C
            X509v3 Authority Key Identifier:
                keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:14:bb:41:f7:80:35:5d:2d:3c:0f:3b:b5:a3:13:46:a2:70:
         fe:f3:80:d1:ca:94:1b:b5:68:f3:43:b0:8f:7f:31:31:e3:cb:
         0f:b1:4d:5b:ed:13:cf:ed:d4:6b:8a:78:8e:5d:4d:ad:03:e4:
         ac:2a:04:4f:41:50:66:5a:f8:a1:0a:30:94:b5:cd:01:cf:e0:
         ca:44:10:e4:db:b9:ed:a9:43:ac:a9:65:74:cc:e5:1a:0d:b4:
         5c:c5:b4:d4:43:74:d6:00:85:25:4b:ec:50:1c:fe:20:57:cb:
         c3:ba:07:09:53:5d:74:59:17:2a:15:35:67:6e:6b:77:da:86:
         08:e6:c1:6f:79:4c:af:5d:e1:02:35:aa:24:76:59:60:b9:1f:
         a5:5b:e6:31:1b:db:a4:1d:d7:3e:55:49:13:5e:fb:1f:3b:21:
         06:ec:ad:9e:3b:57:b7:76:64:df:49:53:ac:84:50:87:bb:1c:
         67:cb:60:83:38:81:15:63:27:59:6e:02:6c:15:f1:b5:19:26:
         54:71:e9:59:be:a4:55:04:b9:81:40:34:ed:ba:ca:64:5b:a0:
         f7:08:b6:9a:f9:b4:1a:e7:07:0f:5b:31:16:a5:82:8b:cb:3a:
         6a:43:54:2e:4f:37:72:2b:5e:7e:5c:7a:a3:78:0e:0d:7f:59:
         b0:50:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:06 2026 by rpki-client