Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
File:                     EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft (raw, json)
Hash identifier:          iOfWfG4EX/YTyUHEWNjR+b7gKgfHZ2kzQ+1KB7vgaQs=
Subject key identifier:   73:66:A9:67:DD:47:D7:8B:F9:FF:C7:65:2D:2D:03:73:CB:92:DE:C9
Authority key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
Certificate issuer:       /CN=1015129921e7e15faef736024a4337340c857050
Certificate serial:       019D265F182C45820FF01A3613B679690667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
Manifest number:          0212
Signing time:             Wed 25 Mar 2026 19:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:59 +0000
Files and hashes:         1: EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl (hash: 1qd+ilsPj1IAjCewaAd13KNm6WBKC9Nuj9dWDfxX6Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:18:2c:45:82:0f:f0:1a:36:13:b6:79:69:06:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1015129921e7e15faef736024a4337340c857050
        Validity
            Not Before: Mar 25 19:00:59 2026 GMT
            Not After : Mar 26 19:00:59 2026 GMT
        Subject: CN=7366a967dd47d78bf9ffc7652d2d0373cb92dec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:b4:f9:3e:20:a7:f8:10:17:ab:35:dc:58:
                    05:3a:d1:1f:61:5a:61:ef:1c:79:26:82:aa:16:be:
                    1f:b5:7a:67:89:1c:31:4e:1c:e3:42:74:15:0a:7e:
                    ab:21:63:3e:59:8d:62:6a:d8:db:61:f4:e2:bf:c8:
                    4d:43:7d:db:c1:4f:15:02:c8:24:c8:7f:ec:79:39:
                    93:45:9b:65:0e:3c:02:cc:13:dc:be:30:eb:a8:31:
                    ce:c9:ce:d4:13:16:00:24:ec:a2:ba:46:3a:c9:f4:
                    69:06:f8:0e:60:72:04:aa:83:fc:02:74:55:57:71:
                    4e:32:ec:88:11:7e:91:05:92:82:77:ce:44:98:89:
                    9a:29:51:df:17:64:f4:24:71:52:17:0a:08:ff:d3:
                    24:25:d6:23:31:f8:35:0a:4d:3d:95:98:d5:a6:06:
                    8d:01:75:92:f3:fe:a0:46:35:71:d4:fd:6f:25:16:
                    d7:f3:08:79:c9:da:40:86:56:a3:1a:e1:8d:48:78:
                    20:4e:38:57:2b:ca:83:ab:ae:13:e1:3c:90:7d:19:
                    3f:06:87:10:8f:17:43:2a:49:db:90:d9:12:2c:d6:
                    06:31:39:d0:8d:73:39:8a:c3:a5:16:09:2b:a7:f7:
                    b9:71:f8:39:ba:2a:0c:6c:06:b2:53:b0:aa:7f:8c:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:A9:67:DD:47:D7:8B:F9:FF:C7:65:2D:2D:03:73:CB:92:DE:C9
            X509v3 Authority Key Identifier:
                keyid:10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ca:fe:60:81:9f:ba:c6:5f:b5:36:df:e6:f5:55:eb:e3:b1:
         5c:52:67:03:83:cf:3f:4e:7e:67:7f:3a:ab:67:c7:e5:c7:0e:
         22:87:c1:cb:5b:e1:94:b5:2a:4e:24:19:1e:a0:cc:10:69:40:
         59:60:bc:6a:d3:6a:40:a2:f1:d5:ee:09:4a:e1:6e:6c:09:c6:
         f0:d2:a3:38:07:d5:04:58:86:99:db:fa:56:35:0f:38:a3:87:
         d9:e7:c7:67:e2:9f:cb:63:5f:50:70:e8:6c:88:28:7e:e3:42:
         82:f5:28:3a:69:6c:45:17:d5:d8:98:f7:9d:dc:34:90:e8:80:
         e6:70:a9:3c:2b:f0:70:df:2d:19:a1:ef:9e:1f:71:f5:d8:6e:
         78:f3:b3:2b:fc:60:2a:59:0d:4f:9c:6a:14:e9:81:22:01:b3:
         b5:a2:37:16:2b:0a:68:bc:c5:e9:0a:62:72:48:3f:d3:3d:f9:
         4d:b6:f5:bb:14:2d:77:5a:fd:84:1b:88:0d:47:b5:b1:f4:2e:
         50:ac:25:4b:14:ba:ff:9c:cc:11:01:93:61:1d:d8:02:23:13:
         0b:61:34:b3:42:f6:1d:52:0c:12:b0:cd:cd:91:2d:0f:48:83:
         ad:e7:70:c8:37:4c:08:72:71:cb:ca:b2:8d:ec:ef:0b:2b:ab:
         e0:22:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:53 2026 by rpki-client