Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File:                     eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier:          ivENK8QDlAle6GQGP6IM/j879zmbhT5cGgl1T6QnP3Y=
Subject key identifier:   B1:CE:13:5B:50:7A:F4:8C:D4:17:2C:AC:A3:9B:5F:64:D3:AA:AE:16
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer:       /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial:       019D265F80877632107CF21E70695FB9E39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number:          1874
Signing time:             Wed 25 Mar 2026 19:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:26 +0000
Files and hashes:         1: W0Nemhp4tNTnXPX1F7AWpLPz30I.roa (hash: q0w1RLWAwP0/SOoIQT2u4GQdyaJkPP+XShI2e/oMlPc=)
                          2: WCLjKmeCgQtKXh-2kHar0wTFzVQ.roa (hash: zRn4amqc3pIfm/L+/ojA95gE8hnWdpUc7Yqxx7Eldy0=)
                          3: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: 2zapISXjKDzxCYbShkrHD7SgSWfm9lcR+mNXB5GDN4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:80:87:76:32:10:7c:f2:1e:70:69:5f:b9:e3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
        Validity
            Not Before: Mar 25 19:01:26 2026 GMT
            Not After : Mar 26 19:01:26 2026 GMT
        Subject: CN=b1ce135b507af48cd4172caca39b5f64d3aaae16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:74:e7:af:14:1d:5f:b4:ab:75:a7:c3:a5:
                    9f:78:00:74:b2:bb:de:d8:ca:fe:1a:88:3f:56:1d:
                    b0:c5:f5:77:8e:52:b2:b8:47:40:59:e9:3c:ea:d4:
                    ba:d6:37:ed:75:ae:d5:e8:e8:5a:b4:8f:05:66:0a:
                    56:84:ce:05:2a:30:88:30:2c:de:c3:32:6e:2b:cf:
                    12:e7:93:e3:49:ca:e7:15:a7:24:f4:3c:eb:06:94:
                    f0:2f:f5:53:9f:5a:e8:28:e9:95:8a:53:c4:e6:03:
                    4a:4d:65:2a:7a:73:58:ea:20:13:61:9a:72:b7:f8:
                    a2:51:2f:67:80:2d:71:3a:19:41:3b:d2:63:ff:fc:
                    0c:00:a3:3a:5b:03:7b:8d:a8:56:55:55:a0:31:e1:
                    b8:3b:a2:45:8c:d3:28:92:60:64:df:70:3e:98:07:
                    8e:5f:ba:6a:fe:09:45:8e:cc:d8:ea:48:cc:ce:e4:
                    e1:99:83:8e:41:ca:00:5a:5c:1b:53:b2:a4:b7:ce:
                    41:76:f4:aa:1b:88:d6:77:ab:ac:bd:7a:d4:87:37:
                    9d:2f:a2:8f:72:99:9d:4e:2f:c0:5b:c3:0e:ff:94:
                    83:17:d3:95:bb:b1:89:40:93:60:f8:a5:34:d6:c8:
                    12:b1:f5:4a:aa:ee:61:d3:ee:63:2c:fd:9e:c7:ab:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:13:5B:50:7A:F4:8C:D4:17:2C:AC:A3:9B:5F:64:D3:AA:AE:16
            X509v3 Authority Key Identifier:
                keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:36:f8:ee:e3:03:c9:44:5d:a4:66:05:2f:ac:28:2b:5e:e3:
         a0:63:e7:ed:18:4e:80:b0:38:d4:ad:14:f3:57:df:5d:b5:39:
         03:87:03:c7:a3:ba:41:f3:37:f4:f8:4a:be:0c:78:dc:b8:00:
         a8:95:9e:35:18:f0:e0:1a:80:40:73:f0:6a:f1:80:f1:ff:2f:
         68:1c:d6:88:31:ba:7d:68:47:1d:69:d5:aa:99:fa:d6:ef:04:
         0c:dd:67:70:a0:91:c9:5c:ed:ce:77:c1:40:fb:30:1a:34:44:
         b8:a1:86:75:7c:04:31:87:52:31:44:89:29:79:69:ad:4b:92:
         86:65:d8:db:00:67:0b:d6:8c:c9:59:5a:2d:c9:6b:7e:7f:12:
         48:cf:0e:f4:f5:ec:f3:39:33:d3:d7:0c:c9:5e:00:05:99:e2:
         9e:fb:a4:c8:8f:a4:d4:cf:1c:47:4f:ba:91:fb:9d:10:d5:dc:
         7a:f2:23:c6:ea:4f:40:fd:76:2b:93:74:91:5c:28:76:8a:0f:
         8c:b4:82:f8:fd:21:42:68:03:2e:fd:02:89:67:a8:ec:1c:63:
         e5:a0:0f:29:2f:a1:c6:84:ac:03:93:4c:80:90:e2:6a:10:40:
         89:a8:c5:5a:2b:92:ce:40:f5:e2:55:f8:44:64:08:6e:6b:d1:
         cc:ee:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:03 2026 by rpki-client