Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          QJFzAUqqOpobPGPB5SrU6yoGx3kpieYV6WLt+mhFDx0=
Subject key identifier:   5B:05:C9:C9:E3:66:4C:A5:3F:5C:00:02:91:31:AB:CF:5B:50:93:1C
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       019D27722F8571F5F669110FE9A8360C3335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 00:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:27 +0000
Files and hashes:         1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: c+kNdxCVxcw/AD70JDpFsDJKncPTgF7vr34My+zXkJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:2f:85:71:f5:f6:69:11:0f:e9:a8:36:0c:33:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Mar 26 00:01:27 2026 GMT
            Not After : Mar 27 00:01:27 2026 GMT
        Subject: CN=5b05c9c9e3664ca53f5c00029131abcf5b50931c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:dc:8d:41:b9:d2:99:99:a9:96:7b:44:57:
                    93:80:15:28:d2:61:e4:be:55:57:43:2b:43:80:97:
                    54:ae:88:06:9e:69:08:36:a8:f6:cd:0d:c6:f8:f2:
                    4c:9c:1e:dc:04:bd:e0:85:29:e3:c8:a4:11:81:a8:
                    68:0d:b6:31:39:2c:63:cd:b2:ed:29:16:27:b2:7c:
                    a5:a7:29:96:4c:d7:fc:af:77:ab:c2:6e:75:bc:24:
                    ae:1d:2e:b8:eb:85:14:de:39:02:9d:98:5a:fd:53:
                    cc:f2:72:8e:bd:e3:10:12:56:a8:59:74:e3:b9:17:
                    a9:e1:2c:69:e3:36:d5:f4:ba:7f:00:e1:9a:6b:0f:
                    3a:af:40:93:18:02:55:07:f3:92:25:43:10:e6:e6:
                    fc:48:c4:2a:7f:54:3e:a4:64:a9:2f:03:c6:21:3b:
                    27:b1:e0:65:a5:3a:61:1a:bc:7b:f2:4b:88:a7:5f:
                    06:3e:e9:43:9b:8f:ab:5d:6a:9d:47:71:1c:4d:7a:
                    cf:d8:bb:4d:69:dd:87:e3:95:49:c4:e7:5e:16:1e:
                    b4:d1:b3:b4:0c:5a:1e:36:4c:84:ec:0e:5e:3d:07:
                    b1:8c:c1:ae:e7:ba:5d:ca:79:23:24:12:99:d3:2c:
                    d8:40:22:d3:c5:14:d3:83:ef:13:f6:85:a6:26:00:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:C9:C9:E3:66:4C:A5:3F:5C:00:02:91:31:AB:CF:5B:50:93:1C
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:a3:8f:f2:48:c2:10:f3:d4:b4:65:2c:f8:66:1e:7a:8d:
         a8:d2:4f:42:a0:0b:d8:03:87:63:9b:0c:fb:f7:bc:47:e3:8b:
         0a:fa:fa:15:23:1b:da:3d:42:d6:45:8f:04:55:b7:12:2f:f4:
         9b:51:1e:7c:3a:22:b0:15:b5:f9:c1:a3:50:54:c5:8c:0d:eb:
         a5:2c:21:85:97:2c:7e:3c:c0:e8:87:4d:77:a6:d2:6f:a0:65:
         f7:99:98:ec:f3:38:0f:3e:7e:5c:92:7e:56:45:11:eb:8e:a7:
         cf:ee:6e:0d:60:b9:95:86:78:92:d2:26:4f:ab:10:08:11:78:
         5f:5d:eb:6d:0b:0f:58:72:86:16:3b:c3:86:c0:a8:a9:7d:fa:
         82:e7:6f:2a:b0:0e:4b:f0:ca:ca:b9:a0:20:f8:6e:1f:d5:9c:
         a2:8b:f3:08:6f:4a:6e:93:83:81:e9:fd:2c:ad:69:e7:68:11:
         77:4b:f7:6d:ec:72:65:57:93:f0:48:80:6c:1d:a1:43:f9:6a:
         a1:87:76:c0:9c:85:0f:a4:3b:57:20:3d:95:30:24:66:1c:d7:
         60:36:20:a4:0b:53:cf:32:ee:1e:47:30:cf:f3:d0:3f:df:ed:
         e1:b4:08:ea:4d:0d:2a:8e:c2:08:2f:c9:6f:77:ff:d1:e2:69:
         46:de:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:52 2026 by rpki-client