Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          CCPJ3OmpvuoxdXQiNnS1eejFAXroj4+NJ8JtALM4eSo=
Subject key identifier:   9A:94:57:88:03:FE:42:5C:AD:52:E8:0E:06:17:90:3B:0C:FD:EA:B0
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019D288499F5894BC7B8612D9C6CF6C3484E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          11F3
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: JMMQwhSap1379xNcc9iohWXNOY77zFy5LFEkAjVDY5g=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:99:f5:89:4b:c7:b8:61:2d:9c:6c:f6:c3:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=9a94578803fe425cad52e80e0617903b0cfdeab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:83:8b:ed:ed:23:be:14:26:dc:c5:a8:31:f1:
                    bf:62:61:d9:00:2e:09:d4:f1:1e:ac:3b:3a:a4:53:
                    ff:e4:ee:ae:f6:5f:94:af:b4:50:59:ed:6d:66:3f:
                    f1:9c:54:c4:3b:fb:e6:27:51:83:02:c8:24:e1:c7:
                    03:1e:7b:05:0f:72:d5:5b:03:38:d6:c6:40:30:1d:
                    f5:0e:f2:2a:6b:06:26:e4:36:50:9c:64:f1:0f:7c:
                    32:1a:ac:08:81:7f:81:2b:36:94:d7:72:2a:d8:f7:
                    97:50:c5:72:6e:66:2c:2b:27:a8:6f:d2:de:42:4d:
                    6f:37:ca:66:d0:04:59:a2:62:df:a0:80:53:7d:97:
                    5d:0b:58:9d:bb:70:50:13:47:99:62:6c:42:73:5a:
                    0f:56:5b:54:40:01:01:38:04:04:df:97:2b:ec:16:
                    61:95:2b:43:6f:9b:4b:0a:7b:95:f6:33:f1:0d:a3:
                    5d:bc:b7:6e:01:0a:e3:5e:df:a5:05:09:7d:57:4a:
                    f2:d7:6f:b3:ce:d2:e1:2b:31:39:18:3a:40:79:3a:
                    5e:6d:2f:fc:59:40:67:07:07:60:c3:c7:33:34:59:
                    66:c1:08:90:f1:db:70:38:e6:65:3a:7c:82:9e:e2:
                    14:00:b9:1d:6b:dd:0c:17:67:40:a1:e4:8b:59:9e:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:94:57:88:03:FE:42:5C:AD:52:E8:0E:06:17:90:3B:0C:FD:EA:B0
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:25:68:f1:5b:b9:ff:1c:99:57:78:f0:68:ad:18:0f:f3:e6:
         d2:b2:ed:d2:c3:f0:9f:6b:6a:0e:26:35:f4:1e:cd:20:32:b8:
         77:57:e0:a8:eb:b3:dd:ec:7a:e3:1c:e5:9f:db:c4:1e:66:01:
         64:58:6d:59:63:74:25:3d:e4:b5:1c:db:44:0b:1a:4e:76:c6:
         69:a0:33:75:e6:5d:ad:40:40:5c:85:3d:cc:1e:55:6e:d9:f1:
         df:65:19:bc:d3:29:e3:c1:1a:fa:e9:15:04:d7:33:a0:c3:54:
         6a:58:f7:15:43:12:3d:a0:a1:1e:fc:e3:e9:5a:15:00:74:2d:
         e4:3b:65:01:3a:3a:39:33:61:2f:53:ac:7b:d6:a3:6e:e7:2e:
         e8:57:36:bc:65:27:f7:46:26:bf:dd:7e:3e:e9:41:6a:09:9f:
         68:80:bb:87:b1:3e:53:11:d1:4e:5d:7d:fb:d9:34:b6:16:9a:
         ae:57:bd:a6:e6:13:63:8a:a7:95:13:64:79:36:67:05:10:4d:
         6f:4e:ca:a8:96:bf:85:7d:33:4e:93:64:ce:f5:2b:e6:f5:d2:
         22:ea:63:0b:73:81:da:91:f7:f7:ad:ab:97:3d:f1:91:31:b2:
         0e:6e:28:80:8b:92:28:1d:8d:11:d7:a0:b5:8b:71:87:7e:4d:
         39:50:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:06 2026 by rpki-client