Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
File:                     ewaHDJH1QM3TCqWVmLd78pONhNQ.mft (raw, json)
Hash identifier:          nSEYOP6m4Ywa+tDiFd20pssQfVBkEIv7C6+HsXmpjSk=
Subject key identifier:   36:74:10:EA:51:59:2C:B7:7A:9E:83:EC:D5:A8:8F:2D:49:F1:9D:DD
Authority key identifier: 7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4
Certificate issuer:       /CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
Certificate serial:       019D28BBE384EDEB87469F4BA1F903A05F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
Manifest number:          0292
Signing time:             Thu 26 Mar 2026 06:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:35 +0000
Files and hashes:         1: COlPjvzoiLOPREU6Xl4JmzPhARs.roa (hash: 5C49uxVNsaO0/i4gZlUTQ3BJ2tqns4mMti2FLTSC2o4=)
                          2: ewaHDJH1QM3TCqWVmLd78pONhNQ.crl (hash: kdIcvqtWPWQmXpWJixLk4wxcCTuPDoic/JdZeP1byMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:e3:84:ed:eb:87:46:9f:4b:a1:f9:03:a0:5f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b06870c91f540cdd30aa59598b77bf2938d84d4
        Validity
            Not Before: Mar 26 06:01:35 2026 GMT
            Not After : Mar 27 06:01:35 2026 GMT
        Subject: CN=367410ea51592cb77a9e83ecd5a88f2d49f19ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:51:08:b6:12:a8:7e:58:57:f7:fc:96:5a:
                    a4:36:b0:18:1f:e1:d7:e9:52:42:02:00:5a:ad:db:
                    f2:4f:98:04:f9:d8:ac:47:2a:58:f3:3e:90:ea:f9:
                    ae:d8:07:e3:8c:35:5a:15:e4:76:5d:5b:5d:5f:d1:
                    22:e8:8f:84:02:7e:4a:1c:d8:fb:bc:39:1f:1e:54:
                    95:11:0b:3f:3c:e8:c7:ea:66:32:e9:de:1e:5d:7f:
                    4f:fb:a5:7b:bc:c1:0d:46:25:6b:05:1e:d5:20:d4:
                    11:1c:5d:2d:02:54:7b:5d:d5:12:2a:c2:e2:0b:5e:
                    97:3f:be:5e:6e:3a:ae:6e:88:9c:55:91:7a:38:f5:
                    c6:b9:bc:fd:7d:79:29:f6:12:67:19:25:47:e7:0e:
                    de:4a:56:20:94:d6:9e:94:0d:8c:15:99:50:a1:2c:
                    15:ec:05:06:1a:17:c7:c4:cf:32:01:4f:56:6a:92:
                    0c:5f:aa:76:ca:85:16:d5:b0:65:88:fc:0a:c3:28:
                    95:02:a5:6a:5c:df:fb:06:8c:b1:65:77:65:5a:2b:
                    3d:21:e6:45:7a:2f:c0:67:90:07:b5:1b:e6:a4:cc:
                    2b:c5:ab:e0:8d:4f:ed:9c:c2:09:c2:7c:42:09:0d:
                    48:47:b8:69:aa:bb:12:d6:6b:c7:c3:a8:fa:3d:9e:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:10:EA:51:59:2C:B7:7A:9E:83:EC:D5:A8:8F:2D:49:F1:9D:DD
            X509v3 Authority Key Identifier:
                keyid:7B:06:87:0C:91:F5:40:CD:D3:0A:A5:95:98:B7:7B:F2:93:8D:84:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewaHDJH1QM3TCqWVmLd78pONhNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7747b0-2f95-478a-b2e3-677cb6044563/1/ewaHDJH1QM3TCqWVmLd78pONhNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:fa:5b:33:70:21:e8:b9:44:66:66:2d:e0:03:64:f6:2b:
         ca:40:5f:b1:04:40:e8:d1:e7:d2:b0:51:96:1a:03:b9:91:33:
         95:69:2e:6f:d2:9e:20:37:40:ca:6d:35:9e:04:c3:cf:cb:a8:
         03:39:0b:39:91:d6:ac:5a:6a:96:0e:0a:b5:f8:f1:30:2b:47:
         1b:3e:92:d7:74:35:bb:68:4e:e1:84:b0:83:5f:5f:1f:90:a7:
         0c:49:a5:cd:3e:ba:21:fb:9b:96:32:8a:51:b4:27:79:fd:a8:
         63:c7:5a:82:3f:1c:b3:fa:1a:0b:86:8d:e1:db:27:32:51:2f:
         c2:aa:8d:bc:02:8a:dc:db:e2:ba:6f:e1:86:19:35:3a:0a:df:
         6a:f6:13:10:15:9c:5d:42:41:ab:f2:c8:af:73:96:d8:b4:da:
         34:68:33:78:61:d4:ee:63:e2:90:85:28:54:a4:a9:2f:fa:f3:
         a4:91:cc:51:3b:98:07:2c:be:bc:2e:43:9b:7e:af:c3:10:df:
         36:38:7d:f2:6d:58:3d:76:22:c2:77:55:41:7d:62:cb:a6:9c:
         17:c3:f0:f4:66:c4:be:d4:f5:ba:f6:82:e7:32:50:20:fd:2a:
         44:30:bf:9c:78:bf:17:02:f6:69:ac:72:a9:f1:01:ce:53:26:
         4b:f5:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:36 2026 by rpki-client