Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File:                     EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier:          kKAKL9YAw57wttIRWkRITQjTZULpFAhy3doiFnxPkhc=
Subject key identifier:   5B:8C:B5:75:28:39:1C:1A:F4:46:F8:F6:3D:26:F8:51:BD:52:08:C5
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer:       /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial:       019D2703EA9AC77B6274A2CD15DF53035BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number:          0F2D
Signing time:             Wed 25 Mar 2026 22:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:01 +0000
Files and hashes:         1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: WSNnC+oqBNjma3lB8SvR0QSh5wEWZd9hGFnbHcAmX9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ea:9a:c7:7b:62:74:a2:cd:15:df:53:03:5b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
        Validity
            Not Before: Mar 25 22:01:01 2026 GMT
            Not After : Mar 26 22:01:01 2026 GMT
        Subject: CN=5b8cb57528391c1af446f8f63d26f851bd5208c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:ee:f8:26:3d:3f:ab:27:b0:b5:b0:0e:57:
                    c6:9a:c5:ac:f1:3d:82:0f:9b:14:b5:51:bc:00:76:
                    95:99:30:97:4a:3a:b5:90:66:18:b8:cf:e5:5a:6a:
                    5a:f6:a8:5a:a3:07:20:46:d0:73:c6:87:61:56:dd:
                    be:ba:7d:dd:4e:53:e7:a7:3b:1a:76:0e:14:cc:82:
                    ed:a4:23:65:60:89:59:7e:fd:ea:31:ea:be:ff:46:
                    2e:a9:8e:54:69:a8:fa:ab:8c:28:82:be:87:fc:52:
                    a3:85:47:e1:d5:78:9c:57:9f:a7:d8:6d:96:ca:f3:
                    fd:b6:dc:34:e1:c9:44:ad:ac:df:9d:4c:9b:80:50:
                    5a:43:3d:8e:d6:11:b3:e9:bb:e9:93:c2:8d:62:c6:
                    e9:d2:d8:07:6e:88:a0:91:71:4a:91:fb:d4:2d:d2:
                    e7:40:14:b5:83:76:69:79:6f:64:db:ac:d3:d9:cb:
                    8f:6f:8c:44:9a:c6:bd:35:81:11:9a:89:85:df:b8:
                    57:38:f2:e0:80:cb:ad:11:25:24:f4:8c:fd:5f:02:
                    0f:41:58:ba:3e:92:12:dc:3b:3a:8e:0e:38:cb:fc:
                    c9:df:bc:1f:7e:c3:1a:4b:31:3f:bb:87:e4:81:73:
                    00:44:8e:31:a5:49:d6:e3:46:f8:82:07:b6:b2:d0:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8C:B5:75:28:39:1C:1A:F4:46:F8:F6:3D:26:F8:51:BD:52:08:C5
            X509v3 Authority Key Identifier:
                keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:0b:88:12:1b:70:40:94:e0:84:0e:69:dd:f0:c5:54:eb:
         b8:57:b4:91:1f:90:c8:c4:f8:42:92:9b:2f:55:9f:97:2b:67:
         86:01:53:f3:c0:8f:60:35:d7:d2:92:70:5f:c9:d8:37:09:f2:
         43:a0:88:50:88:9c:bc:08:21:4a:4e:8f:f9:ce:87:08:b6:0d:
         b2:ec:a9:1b:bc:48:0a:27:23:20:d3:3c:b5:b8:c8:67:61:46:
         d9:1c:94:5c:9f:0a:4f:c1:f8:f8:72:2f:28:a3:f2:05:b9:eb:
         90:47:17:0d:92:ac:42:15:5a:5f:dc:d9:8a:0c:17:ac:a6:3f:
         14:f3:9d:90:8a:1a:89:45:f9:7e:03:85:8e:79:00:11:5b:85:
         6f:b5:80:f4:b8:63:8e:43:df:fd:73:c1:33:3f:0c:b8:1a:40:
         3d:7a:f6:d8:88:d2:31:2d:e0:db:28:58:11:70:0a:99:c1:06:
         a7:08:47:c4:61:83:59:63:c4:58:cb:d5:ee:4a:08:8d:4f:6e:
         c1:45:20:0b:b3:43:b0:e5:cc:29:a0:44:0f:72:16:d6:99:d4:
         f5:39:16:40:49:81:b8:0c:63:d5:89:e1:c2:47:16:74:c0:6c:
         10:3d:43:48:79:4d:1d:f1:bb:5c:ff:4f:42:a7:98:19:8b:06:
         ea:ca:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:28 2026 by rpki-client