Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.mft
File:                     eiMRAVUWRO9_IEyU18QTRmWjxVU.mft (raw, json)
Hash identifier:          7gy0BAHPaVx3PGIzp5o+/X3orh2k/D4FqdN7IPKmj4o=
Subject key identifier:   9D:36:FC:65:C7:CF:BE:B1:C4:B8:5A:5D:74:B3:46:7A:95:48:B4:7F
Authority key identifier: 7A:23:11:01:55:16:44:EF:7F:20:4C:94:D7:C4:13:46:65:A3:C5:55
Certificate issuer:       /CN=7a231101551644ef7f204c94d7c4134665a3c555
Certificate serial:       019D3B9DC461584E32707E6F59FC53063BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiMRAVUWRO9_IEyU18QTRmWjxVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.mft
Manifest number:          96
Signing time:             Sun 29 Mar 2026 22:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 22:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 22:01:28 +0000
Files and hashes:         1: bJWk_l38vT1PtN5_kdtuawiF_zU.roa (hash: hLoFEgf1cWhhRU39fX4IIxMF7XOZYB58cNvTQBA92n0=)
                          2: eiMRAVUWRO9_IEyU18QTRmWjxVU.crl (hash: MDIYi0acNhqAp77DfpnMQTmregqNYG72dJM90IBmVuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eiMRAVUWRO9_IEyU18QTRmWjxVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3b:9d:c4:61:58:4e:32:70:7e:6f:59:fc:53:06:3b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a231101551644ef7f204c94d7c4134665a3c555
        Validity
            Not Before: Mar 29 22:01:28 2026 GMT
            Not After : Mar 30 22:01:28 2026 GMT
        Subject: CN=9d36fc65c7cfbeb1c4b85a5d74b3467a9548b47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:aa:63:42:19:0d:34:f6:af:d3:95:d5:64:
                    c2:e9:43:3e:f1:db:45:f9:97:ad:8a:5f:f4:7d:5d:
                    2f:53:a4:a7:42:80:c4:69:ef:ab:ea:bb:5b:23:fb:
                    5f:91:57:d5:f1:06:30:25:40:e4:09:10:ad:33:85:
                    95:23:67:6b:d0:c7:e4:9d:40:13:70:de:bb:e6:9c:
                    7f:9c:b5:83:e4:f1:72:cc:a9:f8:de:b0:87:92:25:
                    dd:e2:86:18:7c:07:e9:20:50:cb:55:5b:12:b0:cd:
                    61:b2:e2:0f:2e:be:4a:7f:88:08:10:f2:ef:21:fe:
                    85:fe:5c:ab:a2:05:78:dd:ca:a3:bd:63:3e:5e:b2:
                    34:05:7c:3d:3a:1d:da:95:35:dd:4d:51:c0:0f:6f:
                    10:22:e6:93:6f:b6:30:14:32:80:e0:55:72:db:0b:
                    17:2e:ee:74:30:1b:8b:27:bc:ad:04:ff:5d:63:14:
                    52:ef:e0:c4:4c:5c:ee:af:c2:1e:01:4d:f1:3a:cc:
                    5e:af:55:bb:86:37:33:cf:91:d9:de:9f:72:82:04:
                    4c:21:80:bf:08:cc:4a:92:a1:40:2b:12:8f:97:cb:
                    00:a1:33:bf:1d:5c:9b:c4:28:6f:21:8b:41:68:b6:
                    6f:fa:2a:e6:fd:0a:7c:12:a8:fb:f8:50:5f:0f:c0:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:36:FC:65:C7:CF:BE:B1:C4:B8:5A:5D:74:B3:46:7A:95:48:B4:7F
            X509v3 Authority Key Identifier:
                keyid:7A:23:11:01:55:16:44:EF:7F:20:4C:94:D7:C4:13:46:65:A3:C5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiMRAVUWRO9_IEyU18QTRmWjxVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e7ddcb-f2ff-4f3b-a3e2-97c36a8a95db/1/eiMRAVUWRO9_IEyU18QTRmWjxVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:92:2f:56:ce:a6:16:40:d3:15:c4:69:8d:f0:0b:a3:19:
         d8:e4:9f:2c:79:b5:52:04:ba:00:57:9b:8c:34:1f:ff:0e:4e:
         48:46:bf:a9:4c:a3:47:80:51:30:68:86:cb:0d:f2:66:a4:8c:
         12:dc:85:46:72:b4:7f:46:43:85:84:44:a7:70:90:03:9c:63:
         ba:c8:b5:f1:03:d8:07:62:9f:8a:89:5a:d8:ca:4d:ef:dd:c6:
         e4:d6:85:1e:b6:d0:6e:70:24:42:6d:fe:c7:cb:09:55:ca:f0:
         8f:6d:52:bd:11:da:66:e8:0f:ce:ea:96:b5:9f:1f:26:45:8a:
         18:f6:68:9d:79:23:83:e8:21:45:55:e6:20:19:43:84:57:60:
         50:f8:cc:e5:51:70:e3:b7:a7:94:58:17:c3:9a:c5:90:f5:64:
         69:42:dc:d0:58:ff:ce:a0:48:50:97:54:ff:6a:18:0d:ba:09:
         38:c7:40:72:5d:2f:ec:c8:a2:9c:9e:50:ed:39:b5:29:2f:12:
         8e:a2:2e:a2:49:ae:bd:a1:b7:c3:19:11:17:d1:f3:33:1e:34:
         27:78:eb:33:e3:a1:b7:df:e2:a5:5a:84:12:0d:4b:3b:0e:54:
         a2:4b:2e:86:7f:9a:d4:67:63:b1:ed:b6:92:0a:b4:b8:e9:09:
         3c:7e:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 08:47:43 2026 by rpki-client