Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          T+Rph/QyLtms1nJQ/o7YRivgdnajzN0lCd4lGg/HuDc=
Subject key identifier:   52:7A:BE:A9:F2:0F:7A:2D:CF:E5:42:E9:6A:C9:5B:9B:2F:86:10:14
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       019D27E04F620FF2765854D5B356171F7EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          06E4
Signing time:             Thu 26 Mar 2026 02:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:44 +0000
Files and hashes:         1: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: JdIsWhDUSc7sX270y02NYcqOqFPfQgUqZFOoyLlOxDg=)
                          2: xXtkEiDTV3h7aSqt_vIf9HrpRgo.roa (hash: lE79v8Tfhj6oNafzAQReenYVUCsp4w0Yfeh+M1GdO6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:4f:62:0f:f2:76:58:54:d5:b3:56:17:1f:7e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Mar 26 02:01:44 2026 GMT
            Not After : Mar 27 02:01:44 2026 GMT
        Subject: CN=527abea9f20f7a2dcfe542e96ac95b9b2f861014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:6e:52:3d:5c:9e:cc:fb:9c:45:40:b9:9d:
                    02:6d:8a:ac:e2:e6:53:f0:42:a4:2e:e4:d9:6a:53:
                    f6:35:8d:44:2d:8b:5e:cd:f6:a1:91:4a:be:07:58:
                    e2:f9:b2:80:4c:17:c1:8f:c7:94:20:05:bf:b7:36:
                    aa:97:a2:1f:4c:75:15:a1:d5:95:03:3e:29:e2:c6:
                    d1:5d:f5:35:43:77:57:b8:6a:da:71:a9:cb:d6:5e:
                    9a:74:78:4c:8a:e3:b0:71:f8:62:09:fd:60:a7:af:
                    ae:28:2a:be:45:ef:6c:e7:5b:79:91:c6:5d:be:ef:
                    59:ff:0e:59:66:88:c8:d2:a2:c8:86:42:5e:b6:b3:
                    66:9c:46:39:de:05:07:49:63:4f:a5:eb:46:2b:af:
                    2a:b2:27:1f:da:7f:a8:dd:da:1f:49:e4:b7:06:5f:
                    58:58:2f:6c:cc:0d:19:0f:75:68:8d:9b:12:26:db:
                    a5:69:c9:aa:0b:83:8b:87:71:c8:17:92:37:d2:35:
                    ad:45:3d:41:aa:4a:72:94:2d:29:9f:81:bf:8f:e7:
                    fc:39:bc:47:24:53:82:fa:ed:ff:1f:e1:1f:c3:e5:
                    ba:74:84:3e:86:4d:30:21:59:4b:84:1d:2a:db:c1:
                    49:24:a1:a6:5b:34:ca:e5:f3:78:16:e6:34:29:c2:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:BE:A9:F2:0F:7A:2D:CF:E5:42:E9:6A:C9:5B:9B:2F:86:10:14
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:f5:f8:c3:0e:da:1b:df:d3:d3:ae:c7:1a:1d:36:20:2d:
         f6:14:ec:2e:5b:c2:12:55:e8:ad:e7:08:9a:ea:c2:25:5a:70:
         3e:81:a5:73:ae:3c:75:60:42:81:d1:89:cd:ca:1e:6a:a8:ae:
         15:7d:bb:d4:b3:69:a7:d0:8f:ea:f2:3c:c6:53:59:a5:e6:9c:
         2c:ef:1b:10:83:0b:42:e0:15:e9:78:2b:8d:d1:c0:70:15:7f:
         d7:86:2a:fe:0a:62:ee:41:93:14:51:a8:72:89:65:f3:b5:ca:
         12:e2:60:29:53:26:7b:66:4c:2c:ea:b2:8c:0f:cd:22:f5:b0:
         bf:ed:ad:61:14:4b:fd:13:6f:2d:b7:c7:1a:ae:f9:6d:81:b0:
         50:8e:78:63:97:96:1c:5b:7a:64:5b:24:98:34:25:b7:05:5b:
         9e:6d:5b:1e:ac:51:4e:10:33:60:94:dd:db:81:f1:6c:86:9d:
         d3:bc:d8:aa:35:f5:c1:28:ee:0f:49:32:02:35:b9:cb:48:d7:
         ef:fc:41:70:f3:62:58:8e:00:21:bc:01:66:ca:b1:58:0e:f6:
         d3:f4:b7:cd:28:75:ac:d6:16:db:83:5b:11:eb:24:70:df:cf:
         3c:79:9a:19:b1:d8:67:6e:00:05:03:2f:66:57:cf:f9:d9:12:
         08:50:b3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4E9iD/J2WFTVs1YXH36+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDg5ZmQzNDZlNzIxNDg2NjE1OWFjMmYwZWM5Yzk5MGM0
ZjE0YjkwHhcNMjYwMzI2MDIwMTQ0WhcNMjYwMzI3MDIwMTQ0WjAzMTEwLwYDVQQD
Eyg1MjdhYmVhOWYyMGY3YTJkY2ZlNTQyZTk2YWM5NWI5YjJmODYxMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTRuUj1cnsz7nEVAuZ0CbYqs4uZT
8EKkLuTZalP2NY1ELYtezfahkUq+B1ji+bKATBfBj8eUIAW/tzaql6IfTHUVodWV
Az4p4sbRXfU1Q3dXuGracanL1l6adHhMiuOwcfhiCf1gp6+uKCq+Re9s51t5kcZd
vu9Z/w5ZZojI0qLIhkJetrNmnEY53gUHSWNPpetGK68qsicf2n+o3dofSeS3Bl9Y
WC9szA0ZD3VojZsSJtulacmqC4OLh3HIF5I30jWtRT1BqkpylC0pn4G/j+f8ObxH
JFOC+u3/H+Efw+W6dIQ+hk0wIVlLhB0q28FJJKGmWzTK5fN4FuY0KcKlmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ6vqnyD3otz+VC6WrJW5svhhAUMB8GA1UdIwQY
MBaAFHlIn9NG5yFIZhWawvDsnJkMTxS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVpZjAwYm5JVWhtRlpyQzhPeWNtUXhQRkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZTMwZjEtMDUzZC00NjA3LThjNDUt
MDllY2M2ODFhMzg2LzEvZVVpZjAwYm5JVWhtRlpyQzhPeWNtUXhQRkxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZTMwZjEtMDUzZC00NjA3LThjNDUtMDllY2M2ODFhMzg2
LzEvZVVpZjAwYm5JVWhtRlpyQzhPeWNtUXhQRkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKv1+MMO
2hvf09OuxxodNiAt9hTsLlvCElXorecImurCJVpwPoGlc648dWBCgdGJzcoeaqiu
FX271LNpp9CP6vI8xlNZpeacLO8bEIMLQuAV6XgrjdHAcBV/14Yq/gpi7kGTFFGo
coll87XKEuJgKVMme2ZMLOqyjA/NIvWwv+2tYRRL/RNvLbfHGq75bYGwUI54Y5eW
HFt6ZFskmDQltwVbnm1bHqxRThAzYJTd24HxbIad07zYqjX1wSjuD0kyAjW5y0jX
7/xBcPNiWI4AIbwBZsqxWA720/S3zSh1rNYW24NbEeskcN/PPHmaGbHYZ24ABQMv
ZlfP+dkSCFCzHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:26 2026 by rpki-client