Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          RlrVgw/3U2Xw36TBaiw4ql+DmMXNpxAbG6u6ektOLSs=
Subject key identifier:   2F:D1:B1:BC:3B:6B:8F:94:76:75:B0:86:F8:07:A1:48:3E:95:78:D0
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       019D2AE0C8CE23EA19BBF3FFA8832881C92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          0C3A
Signing time:             Thu 26 Mar 2026 16:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:07 +0000
Files and hashes:         1: dvv-WXUCwpGvHoqWr0kRejCLlUk.roa (hash: PeMWeS2rL/14VTbD4tWO6upgbT9sKeWB9wMUYzsl6RM=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: AlrpDEOn/Q3tRvIlQbJSe1T+2i2uuxqqPOrwH84u0bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:c8:ce:23:ea:19:bb:f3:ff:a8:83:28:81:c9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: Mar 26 16:01:07 2026 GMT
            Not After : Mar 27 16:01:07 2026 GMT
        Subject: CN=2fd1b1bc3b6b8f947675b086f807a1483e9578d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:fe:58:24:18:a5:68:1c:0d:c1:47:97:28:
                    ed:b5:12:c8:8c:d0:d2:cf:4f:be:ac:7e:cc:4b:f6:
                    ae:df:be:75:0f:9c:67:75:b7:fe:a7:8b:c6:54:97:
                    9d:b6:25:a4:66:d3:2b:72:11:58:0a:e3:60:4b:89:
                    19:25:84:15:56:01:65:e3:dc:13:ee:5c:7f:10:f9:
                    47:f9:b5:4a:84:84:aa:99:07:d6:0f:16:87:13:86:
                    4e:f7:b8:96:1f:90:b2:ea:16:27:f6:85:e1:a7:28:
                    df:99:a6:ef:ed:9b:8a:79:03:70:5b:b4:52:bf:8d:
                    c0:8e:13:84:6b:25:3d:2f:44:8d:0e:d2:1b:c2:29:
                    ee:d9:11:73:d0:cb:0e:c1:d7:8a:37:38:2f:46:41:
                    bb:2a:93:3b:18:d7:f0:c0:ec:54:8a:0e:f0:b2:d5:
                    f6:b9:ec:6e:cb:31:44:9f:14:07:7e:69:32:43:4d:
                    88:14:9a:b8:80:ce:99:c5:64:42:55:20:65:98:9c:
                    b0:35:dc:3c:70:91:d9:fc:a0:12:e8:e7:32:41:54:
                    aa:79:36:62:dc:59:d1:22:29:33:29:df:6b:43:1d:
                    88:f8:62:94:eb:61:92:bf:d4:38:ed:e4:13:ed:c4:
                    b1:a7:cd:27:ce:67:b9:a0:02:83:5d:25:18:27:d2:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:B1:BC:3B:6B:8F:94:76:75:B0:86:F8:07:A1:48:3E:95:78:D0
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:43:17:cd:93:1d:1f:c6:76:7d:e0:cc:80:9c:ab:5a:33:
         de:43:d2:4a:0d:83:ac:9b:78:bd:96:49:c9:06:3a:84:d1:4a:
         9a:f1:be:77:09:c5:06:f9:d9:c4:5a:de:4a:7d:56:b1:74:8d:
         d6:b1:3b:3e:e2:19:5f:0b:64:6f:46:0a:9b:b4:06:7a:8f:54:
         3f:b7:4c:f6:53:49:72:24:05:f7:38:93:c8:a8:48:19:2a:9b:
         1f:0a:04:44:e4:8c:3b:6c:3e:21:45:0a:2f:e8:d1:b3:ae:b8:
         d7:92:74:e5:05:06:c1:22:89:bc:7d:62:11:da:bd:bd:cd:eb:
         20:50:de:57:66:8f:16:1e:61:7f:96:0f:ce:d8:49:b4:82:49:
         43:63:e1:b4:8a:60:6a:cd:a6:f5:d0:d0:b8:2b:6c:36:11:d4:
         d5:f3:ff:e8:d1:4e:55:a8:8e:f2:4b:02:79:ce:d3:d4:92:c2:
         05:09:b3:47:ad:bc:76:db:79:96:91:28:8d:39:fc:a0:1f:cb:
         55:06:8f:62:1e:73:b4:ed:24:54:37:81:6a:33:aa:ee:d0:b0:
         4f:2d:2d:80:7e:cf:87:34:cf:b4:90:d8:22:df:5d:8c:a0:06:
         fa:74:51:2a:73:41:93:28:9c:59:0a:b8:19:c6:c4:d0:4e:52:
         bc:ac:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:15 2026 by rpki-client