Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File:                     eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier:          I4b/IagK6yZKFjW4qEHqrUpVuOX7t6SCiKD8g07+k1A=
Subject key identifier:   2A:D7:F6:55:17:E1:49:0E:22:15:ED:C6:62:31:91:2A:B3:72:4E:77
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer:       /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial:       019D28169DD593295CE2F92137F921B76919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number:          0D2C
Signing time:             Thu 26 Mar 2026 03:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:03 +0000
Files and hashes:         1: 40-CHxhmMzV3x6IivUs8SRJDN6k.roa (hash: gJaTDTJyLHFCd6XAz4N6c1KU5ewn+eKdpcXn2PlsHgg=)
                          2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: ASvE6xVWJ0srj49Q7IiEu4DKiUhy57pQ/pbYRFlkhaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:9d:d5:93:29:5c:e2:f9:21:37:f9:21:b7:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
        Validity
            Not Before: Mar 26 03:01:03 2026 GMT
            Not After : Mar 27 03:01:03 2026 GMT
        Subject: CN=2ad7f65517e1490e2215edc66231912ab3724e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:86:99:c0:d2:dc:df:ab:d8:7c:ec:dd:f4:
                    df:20:10:63:53:10:f5:5e:14:36:56:61:29:cf:84:
                    b8:5e:e2:93:6a:bc:5d:8f:b5:98:63:90:09:c8:c7:
                    6e:6d:f5:b6:39:c0:8f:6f:6e:21:84:8b:65:85:ad:
                    5e:fc:50:92:97:7b:b9:25:b5:34:fe:cf:44:d2:de:
                    f8:dc:32:06:63:fc:01:4d:26:a7:1d:9c:18:56:16:
                    2b:0e:20:28:05:10:5c:2c:42:8d:cd:b8:69:16:16:
                    82:8a:99:5f:d0:86:de:dd:39:55:69:0f:46:13:46:
                    37:59:52:86:da:4b:12:a7:cd:ff:00:db:1b:37:36:
                    b8:a1:d4:d5:0d:01:1b:07:7f:70:39:ca:2d:e1:00:
                    9e:02:17:d6:3d:63:88:da:87:9b:aa:95:8e:9a:94:
                    31:32:0d:8c:7a:ef:e9:c4:93:b6:5d:fe:40:dd:99:
                    85:b1:26:bb:47:69:68:26:08:73:d6:44:b1:32:d8:
                    ba:17:b4:1c:48:c4:e9:ee:98:f2:ce:4a:76:d7:42:
                    55:00:16:15:34:23:9c:f8:68:d3:c8:67:1e:bf:a4:
                    42:f3:64:38:b8:27:10:66:06:dd:a7:81:a3:bb:77:
                    8b:7e:5b:f7:38:57:26:c4:cb:c5:c4:98:ee:cf:38:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:F6:55:17:E1:49:0E:22:15:ED:C6:62:31:91:2A:B3:72:4E:77
            X509v3 Authority Key Identifier:
                keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:c1:1d:14:59:9c:1b:c3:2b:48:10:1f:c4:bf:49:16:0c:
         01:d1:0a:94:19:5c:1b:c8:05:3a:1e:bc:72:11:81:e9:55:01:
         8b:6e:28:c5:f7:a9:03:94:72:8f:1e:00:67:8c:8c:34:c9:28:
         c0:f4:eb:1a:76:b6:3a:83:5c:0c:f6:97:01:0c:9b:5c:4f:bb:
         16:92:b9:6f:57:c7:aa:75:3c:2c:19:73:78:1f:52:66:89:f9:
         c2:66:32:ef:15:d0:f2:95:d2:41:fe:35:51:43:43:81:0a:e5:
         1c:86:96:50:bc:eb:aa:13:b0:6b:a5:19:4d:fe:3b:aa:83:e0:
         52:1f:95:b8:3e:9c:53:a6:a1:59:3d:6e:f0:3a:5c:97:cc:61:
         66:b1:2f:7d:1e:64:0b:6a:8b:2a:a1:af:15:ff:e7:63:d3:8a:
         cf:67:4e:b7:5c:93:e6:75:82:47:cc:b4:2b:27:ca:8c:25:17:
         6a:a4:8c:38:c4:04:3e:fc:b7:f4:68:cf:e4:95:07:77:ef:ce:
         8b:de:fc:3f:54:9d:93:28:8a:ea:34:d9:6d:90:61:1a:19:b8:
         a6:b9:67:1a:41:13:f9:65:49:3d:95:b9:14:49:c1:e4:96:f6:
         b1:ba:ab:f4:f8:a2:d5:9d:bd:a0:09:f8:b0:b0:26:cb:c2:2a:
         cc:ff:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:36 2026 by rpki-client