Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          0OVlx/qkvacDxtl5u7/nl6JsGeUwmQVnvJ+sC0358/o=
Subject key identifier:   2B:7E:5E:05:A1:23:25:5D:4E:BB:F3:C9:69:6A:27:24:78:6E:D9:01
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       019D273A89978CB18481C5BF326E20E0CE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          0F96
Signing time:             Wed 25 Mar 2026 23:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:40 +0000
Files and hashes:         1: 5V2uHMYB3AUKGtIMOIip7J3pWIE.roa (hash: SNdMO15bPZaXBCMvAcfZFL9fGPGQ8SDwl5MGeeyye2I=)
                          2: QCoWTqPLbJGw1zUEhRnFeDiw-yk.roa (hash: 5ldKqSvwDttirHKWjJFhqblT3JDzISSPbft9iHSvGCE=)
                          3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: vMhb/soNMwwtvEffROuQj1Y6rnUOx7mn567X8rydDJk=)
                          4: tcrZxlSyhxTj8kiRDMPfiA4u4Z0.roa (hash: X3hmm+WjiPxOc2QFBzEzmGR0EXyXyN6SSxewOy8ufSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:89:97:8c:b1:84:81:c5:bf:32:6e:20:e0:ce:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Mar 25 23:00:40 2026 GMT
            Not After : Mar 26 23:00:40 2026 GMT
        Subject: CN=2b7e5e05a123255d4ebbf3c9696a2724786ed901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:ee:ef:fe:0c:ea:fc:f7:a4:f5:20:82:7a:
                    22:e3:74:a7:37:b1:31:62:1c:ce:95:1c:59:2f:d1:
                    70:43:6b:38:00:97:6e:d2:59:c7:14:64:ea:ed:a6:
                    c2:d6:3c:db:d4:9f:fb:b5:a5:e0:d8:54:e3:40:9a:
                    e9:fe:2d:6b:78:14:62:32:d0:3a:bb:68:d3:da:c4:
                    52:97:9e:8b:61:d6:3f:6b:87:44:6e:29:d4:d5:5b:
                    8f:7c:93:b3:6d:4b:47:53:50:9a:a7:c5:62:51:57:
                    6d:63:fe:f3:b5:92:ba:fd:18:3a:44:29:70:c5:fc:
                    46:c2:af:f7:c2:09:29:52:bb:1d:f5:64:4b:6e:a2:
                    3a:a9:72:87:1d:84:fd:ca:b8:63:b1:d0:f4:ac:af:
                    47:b3:4e:a4:c7:cb:af:39:22:85:59:0f:c3:14:46:
                    55:68:75:99:d8:ec:32:ed:68:b6:b7:45:2f:dc:f9:
                    1e:19:a5:d9:d3:cd:05:bc:f2:4d:fd:56:a3:01:dd:
                    16:70:48:09:41:2c:41:59:af:e7:64:cf:73:64:6e:
                    34:f7:77:cf:36:6f:eb:34:da:91:a3:02:33:03:0e:
                    f7:04:ec:d8:6a:0f:9b:73:63:81:fc:21:27:77:4f:
                    38:ac:c4:68:f5:3e:f2:f8:17:13:9c:92:e0:25:78:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7E:5E:05:A1:23:25:5D:4E:BB:F3:C9:69:6A:27:24:78:6E:D9:01
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:55:84:9d:34:17:aa:ab:03:dd:0d:df:b8:76:d0:71:00:
         fa:b5:76:f7:70:62:d5:a4:c3:96:94:32:c6:bd:96:1f:9c:d0:
         7d:7c:36:f6:fc:8f:d0:81:08:9d:10:30:5b:32:dc:75:1b:5f:
         70:e3:74:7e:8d:e9:d4:66:4a:9c:e3:c6:f9:83:7c:76:dc:01:
         d4:a7:a6:79:bb:45:b9:76:1e:c7:03:d5:3c:16:44:65:d1:84:
         62:5b:0e:c3:e2:9f:99:39:9b:0b:2c:75:5e:d0:b9:07:a9:35:
         30:ac:ed:e9:ce:1e:08:c2:c0:e9:32:07:1d:2f:26:9a:98:9d:
         d0:7b:8e:bf:3f:cc:57:6f:16:b7:d2:e6:df:16:a8:43:cf:df:
         a6:2e:42:18:ba:51:c1:65:d5:5f:44:a0:9f:df:52:44:df:2f:
         df:bb:ab:f1:f6:e2:4f:d5:31:18:80:ce:3b:2e:98:2b:98:7b:
         71:fb:af:fb:7e:1c:5b:6a:9a:ad:18:0b:df:8e:78:37:29:3c:
         9c:40:0b:f5:eb:31:33:c1:c1:ca:c2:d3:de:a0:ec:3f:30:02:
         34:e6:25:74:ee:a6:05:09:6e:b8:f0:92:97:cf:b4:c5:62:10:
         2f:88:f8:d6:43:bf:6a:ca:9b:4a:20:2d:20:4d:77:9f:5f:a4:
         ca:2c:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:25 2026 by rpki-client