Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File:                     EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier:          41HrI2ltcfXdFAFQSyIdC46uI0xF7GGZrtAs9c8QSUc=
Subject key identifier:   DC:69:69:4D:43:8D:1E:77:53:E2:45:32:F3:3D:E5:45:83:4C:8D:1B
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer:       /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial:       019D27E042F24588BA47F7C87CA7CF75AF91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:41 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:41 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:41 +0000
Files and hashes:         1: 5O82bj0RVPYC9fHeytygnYo76U8.roa (hash: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA=)
                          2: 8ZMhpHWpSjesuQ3JK0HQjCVMxBg.roa (hash: M4Nr0Wi/SzNVzQvcJX08oqzRs/vvxC+K5A74A/Zcd8o=)
                          3: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: vkQL6syArFmWoZSKn1GjH2hXIUWBWBfQu78h+650DCs=)
                          4: JMBywUmb80eS8GOrITuaVx8nCRg.roa (hash: /324/IAHNCGdBytZWzsoLGKPRqjPYfQZAIUmmm6zgwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:42:f2:45:88:ba:47:f7:c8:7c:a7:cf:75:af:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
        Validity
            Not Before: Mar 26 02:01:41 2026 GMT
            Not After : Mar 27 02:01:41 2026 GMT
        Subject: CN=dc69694d438d1e7753e24532f33de545834c8d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:1f:18:ea:fa:23:07:ef:a6:60:78:5d:04:
                    84:b7:73:37:87:7d:6b:f9:da:c7:2b:b7:7b:77:38:
                    ab:71:a6:6c:da:1c:4d:fe:7e:a4:09:79:84:5d:d1:
                    dc:f5:e0:c1:90:91:3b:2e:c8:eb:99:fe:fa:ed:02:
                    60:8f:c0:67:1b:3e:7d:61:bf:f4:e3:fb:08:5e:65:
                    f2:e5:9e:7e:f4:cd:71:5d:d2:ba:7c:1f:4e:cc:b8:
                    2e:3b:00:23:9b:f3:90:55:60:cd:a8:f6:f7:c0:ab:
                    ee:be:15:c7:fc:cf:71:ec:f6:71:0a:2e:d5:f8:f4:
                    fc:80:67:3c:0f:5b:2c:64:a5:af:80:47:7c:01:68:
                    88:3d:79:ad:e4:78:a0:c8:6a:52:e3:b4:8c:d3:80:
                    ed:64:c5:a6:76:0d:6a:dc:74:4e:d6:73:9e:49:5c:
                    c8:d2:b1:f4:13:3c:6b:9e:a7:9a:8e:eb:11:7e:dc:
                    8e:02:5d:ec:45:98:72:04:67:52:67:73:09:a6:bb:
                    aa:4e:91:31:07:b5:8b:9b:cb:7a:32:cc:b8:79:c3:
                    a5:00:b3:2b:6d:5a:f6:f3:78:cc:73:90:84:b2:a6:
                    3d:3e:4b:9f:75:25:7a:93:82:b1:75:97:ed:91:3c:
                    92:dc:4b:2b:3a:ab:85:c0:15:eb:56:ec:ce:bd:fc:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:69:4D:43:8D:1E:77:53:E2:45:32:F3:3D:E5:45:83:4C:8D:1B
            X509v3 Authority Key Identifier:
                keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:78:f7:1e:48:29:7e:59:b1:c5:76:e0:02:54:c4:dc:f3:
         68:01:da:36:d1:65:a7:95:dd:79:a1:53:a1:c6:4a:34:c9:a3:
         98:0d:cf:fa:89:d7:d4:df:35:df:61:26:c6:bb:73:ce:86:ea:
         b1:31:d6:c8:81:2c:ad:b1:72:8a:61:cf:12:1f:d4:ab:1e:44:
         96:86:72:27:04:59:db:d4:95:54:0b:23:1a:df:6a:e9:21:b6:
         f7:9e:40:ea:ee:f7:0d:f5:84:53:1d:53:55:18:78:97:18:a7:
         52:cd:55:ad:5c:2e:4c:fc:b1:81:65:6e:63:b9:48:4f:de:dd:
         e3:01:e6:b0:ed:68:9c:b7:81:7f:aa:23:55:6e:5a:36:a5:94:
         92:c1:99:db:f2:97:42:05:9a:9a:6c:ca:e6:f7:6e:a8:4c:5c:
         d8:8c:e1:ff:73:41:d9:9e:50:92:6c:63:48:67:73:a2:ea:cb:
         e8:3d:df:d2:f7:38:7c:e4:df:68:44:d4:37:b3:d4:df:3b:27:
         3c:54:48:22:78:54:91:ce:38:57:96:2d:95:10:81:95:9c:44:
         4f:1f:c0:2a:0e:4a:cc:4f:05:5d:d1:46:4a:78:2e:4b:91:e5:
         d4:43:76:22:86:d7:86:a1:0d:6f:97:c1:fd:55:39:24:b2:ce:
         3e:80:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:06 2026 by rpki-client