Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
File:                     eN7biYi8i7Gl-eVfQXJrZURsJew.mft (raw, json)
Hash identifier:          NDWyQgamyUM02O/OUZ/9WI5XTqdh+5ukCsOHEGhVUs8=
Subject key identifier:   3E:55:F9:F9:C1:DC:FA:AE:EC:AC:1B:1B:55:1F:CA:DE:CA:51:26:CC
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Certificate issuer:       /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial:       019D284D7815CD1EEC940EAE3A665CE9CA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
Manifest number:          1001
Signing time:             Thu 26 Mar 2026 04:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:58 +0000
Files and hashes:         1: eN7biYi8i7Gl-eVfQXJrZURsJew.crl (hash: xOJ8ba06NZRKQF/iOBTcE2SNmz4qbtU6xzwvQxYMfJI=)
                          2: nLeDd88R5RXfUUe4lhD7gyqNgbk.roa (hash: 3P2rqfuF38q3791OkagtdAH7FCKlHeplVZ7f/8AWbI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:78:15:cd:1e:ec:94:0e:ae:3a:66:5c:e9:ca:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
        Validity
            Not Before: Mar 26 04:00:58 2026 GMT
            Not After : Mar 27 04:00:58 2026 GMT
        Subject: CN=3e55f9f9c1dcfaaeecac1b1b551fcadeca5126cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:66:6c:74:bd:43:a5:62:2b:57:5b:b1:23:49:
                    b1:4f:c7:97:26:b7:22:4c:a5:42:f9:d1:a8:75:58:
                    a1:58:5b:b2:f5:27:b7:7d:2e:fd:26:5d:75:bd:33:
                    c5:3e:70:07:86:16:de:b2:21:c8:3a:a1:6e:60:1e:
                    8b:af:60:98:67:99:bc:83:9e:96:a6:9b:12:90:f3:
                    5e:c7:06:d6:fb:41:7f:31:5d:34:e6:2e:fd:84:c1:
                    51:53:c1:69:df:b1:7a:19:6f:7e:ae:12:49:d5:a0:
                    53:aa:2d:f4:29:fe:5f:12:c8:18:ea:9e:4c:4a:2f:
                    45:cf:bd:60:67:3d:43:1d:37:98:6b:28:d5:14:bd:
                    05:ad:e3:d7:1c:b8:50:62:c4:50:00:17:24:1b:8e:
                    6c:84:99:ca:1c:8b:5a:e2:10:44:81:32:22:72:bb:
                    9d:e7:9a:3f:5e:b8:ed:c4:0d:fb:67:0f:f3:fd:23:
                    fc:d6:ae:1f:9e:66:22:76:eb:11:88:da:a3:00:92:
                    11:a5:30:94:95:4f:cd:f0:ed:df:c7:62:97:d2:b8:
                    5a:79:6e:de:d4:14:f8:23:f8:d7:36:7f:59:a2:13:
                    07:0f:bd:1e:4c:1f:f8:99:e6:0b:d7:9c:74:ae:99:
                    9e:a0:24:a8:8b:9b:c4:da:d8:fa:14:87:87:71:5e:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:F9:F9:C1:DC:FA:AE:EC:AC:1B:1B:55:1F:CA:DE:CA:51:26:CC
            X509v3 Authority Key Identifier:
                keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:90:d5:59:ed:ac:4b:aa:66:61:25:2c:12:3b:36:1b:04:
         19:84:ca:17:f3:d3:99:5f:fb:73:80:27:a8:46:73:9e:24:90:
         73:db:46:23:90:54:c3:14:9c:23:31:69:29:33:90:4f:1c:4c:
         ee:7e:1b:a7:00:03:b6:2f:80:26:27:ca:df:ba:98:ba:f4:0b:
         2f:57:63:fa:4e:3a:83:ea:f5:7a:91:4a:7b:29:95:f0:28:ae:
         9d:92:4f:10:fa:7a:01:e0:c0:ab:e4:ef:7c:b9:59:19:75:e3:
         38:74:fa:a7:63:11:42:37:f4:d6:d5:63:6e:0b:f4:fc:3c:75:
         fa:cf:a6:df:95:70:81:07:b6:da:b7:d5:8e:f5:39:70:bd:50:
         66:21:76:19:12:80:7b:73:cc:69:bb:a1:e0:e0:ba:37:f1:8d:
         b9:84:18:20:28:db:d8:94:96:a4:49:43:e7:33:e6:23:fe:46:
         3c:24:c5:61:69:6b:1e:d9:2a:e4:10:8b:96:0e:ec:17:90:ed:
         6e:14:55:07:aa:b5:be:75:0b:90:35:8c:d0:0e:08:16:70:05:
         b3:56:40:7a:98:66:84:22:66:b7:55:e7:7a:19:d8:7d:de:0b:
         0f:7f:aa:e1:1f:d6:3e:c0:d5:f7:33:34:3b:4b:24:9a:2e:16:
         31:15:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:21 2026 by rpki-client