Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File:                     _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier:          K0qV8++hkzO/qRFFkk8JDEXufUgCyJ0C/nxkGgqJies=
Subject key identifier:   C7:8D:23:38:5F:72:6C:2B:9E:CD:F0:D3:6D:A3:FF:6B:52:42:83:1F
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer:       /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial:       019D31F5C8DB3FCDD5BDB91887EE7DCCC987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number:          15F1
Signing time:             Sat 28 Mar 2026 01:01:24 +0000
Manifest this update:     Sat 28 Mar 2026 01:01:24 +0000
Manifest next update:     Sun 29 Mar 2026 01:01:24 +0000
Files and hashes:         1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: EItYQ29xaSmXPYnQibQpOSGVnWB3mQdU0ALA2WgTY34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f5:c8:db:3f:cd:d5:bd:b9:18:87:ee:7d:cc:c9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
        Validity
            Not Before: Mar 28 01:01:24 2026 GMT
            Not After : Mar 29 01:01:24 2026 GMT
        Subject: CN=c78d23385f726c2b9ecdf0d36da3ff6b5242831f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:94:ec:40:6b:78:a4:b5:d6:a1:dc:72:74:
                    15:f3:66:ca:df:f2:a6:af:d7:b1:94:b6:39:3c:b6:
                    9f:c4:2f:6c:e3:0b:59:64:f9:74:af:f9:e5:f5:84:
                    f3:21:90:f9:5c:58:9a:58:f9:44:e2:0e:63:24:86:
                    b0:d3:b7:95:a1:2d:01:bd:24:81:4e:b3:fa:bf:7e:
                    0d:e2:db:f0:95:74:ce:49:e6:30:e1:d9:b7:8d:f5:
                    51:bb:82:73:4a:54:d9:d8:76:9b:65:4d:d5:03:c9:
                    68:f8:ea:8d:b6:bf:ce:95:78:b4:13:ff:1a:0e:13:
                    ef:59:0a:0a:c0:28:61:80:2c:37:a6:2a:de:da:be:
                    6d:dc:0a:8c:2a:a8:d4:ae:af:42:4f:c0:03:b4:99:
                    01:cf:ee:aa:fb:c9:eb:48:37:6a:f4:6d:e6:8c:b6:
                    d5:f9:7a:e8:32:7d:80:ac:b5:a0:34:b7:df:c8:5a:
                    0b:0d:6a:c9:b2:73:8d:56:b0:14:ab:a2:22:92:66:
                    57:b9:a7:be:5a:88:48:ff:ed:7f:04:ee:0a:a0:d2:
                    c2:38:9a:9f:5c:76:9a:ff:b6:49:42:7d:b7:25:60:
                    02:17:48:13:33:3d:18:97:b5:36:2f:b1:85:10:d3:
                    31:18:b7:a3:f2:10:70:d6:22:bc:c7:b6:6b:8a:00:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:23:38:5F:72:6C:2B:9E:CD:F0:D3:6D:A3:FF:6B:52:42:83:1F
            X509v3 Authority Key Identifier:
                keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:fa:1a:52:6a:be:ac:25:e1:87:9c:60:47:be:4e:ed:7e:
         6f:6a:f6:a4:73:d1:41:f8:b7:65:5d:a9:d3:32:3c:a9:0b:cf:
         cc:67:eb:36:0a:ff:93:2e:18:0d:7f:86:cb:79:3e:84:2c:06:
         cb:d0:b8:f8:ea:3e:75:40:24:55:a6:a4:fd:cf:6d:de:5b:94:
         c9:82:8d:b9:05:bd:f0:b9:33:31:19:76:90:a5:ad:68:52:25:
         a9:c4:5a:35:a9:f9:1e:e8:b0:6e:8e:50:33:ba:83:34:66:93:
         de:d5:00:12:86:bd:1f:99:6f:3b:3c:1d:6d:7b:c2:e2:1d:ce:
         c0:46:01:f4:30:45:f0:4f:76:bb:20:5f:dc:cc:df:1b:2a:92:
         d6:8e:9f:1a:31:67:f1:a1:06:2e:61:8b:66:95:18:9b:a7:c6:
         2a:3c:fd:b6:0b:12:4e:fe:a7:f1:e6:95:bf:0f:e3:90:2b:14:
         36:96:82:30:e3:01:3a:4f:18:71:53:99:4e:0d:38:f1:1c:b2:
         cb:05:1c:89:6d:46:b6:9d:75:d1:c8:f6:92:3a:72:c4:8a:c5:
         20:64:5f:bb:0e:05:c9:63:21:cc:5d:85:ad:e9:8a:12:fd:01:
         87:4c:a1:7f:ad:94:a5:38:a5:81:e2:d5:19:f4:a9:8e:c6:0f:
         75:d4:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:05 2026 by rpki-client