Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
File:                     EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json)
Hash identifier:          gYRgKQQHUt+0kBQXHNfxo96JTTXKohI+ut6sq1OofGs=
Subject key identifier:   15:D1:42:0E:C4:AE:C8:63:13:DC:77:85:A9:21:86:17:5A:F4:CE:5E
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Certificate issuer:       /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial:       019D27A9065B7CEA12329C751C8AF10887B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:21 +0000
Files and hashes:         1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: Pi0N/0Yc0fopUo5j21Zer1jVC/FeBjh5SDSvrGXrmNs=)
                          2: Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa (hash: S095x8PjGP0BDIBL70mlfzvokhhapxj9rG8kMLp9d34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:06:5b:7c:ea:12:32:9c:75:1c:8a:f1:08:87:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
        Validity
            Not Before: Mar 26 01:01:21 2026 GMT
            Not After : Mar 27 01:01:21 2026 GMT
        Subject: CN=15d1420ec4aec86313dc7785a92186175af4ce5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:6d:6e:53:d6:18:88:f3:25:4a:bd:ef:a2:
                    6b:8d:a9:a0:61:f5:3d:0b:b1:8f:89:97:1d:74:9f:
                    7e:e0:17:c0:02:eb:f7:c8:1b:87:84:f3:3b:84:38:
                    42:24:be:f0:3b:bb:b9:1a:0d:03:d1:ae:6f:8d:f2:
                    b9:56:ef:a1:bc:0f:98:6a:9b:91:27:d9:a6:99:b1:
                    2c:72:4e:19:c6:3d:ea:34:08:d2:1d:aa:01:17:b4:
                    f8:7a:56:96:c0:b3:6f:61:bf:2f:cc:2b:e4:5b:bc:
                    a7:42:6d:2b:d1:20:62:bb:8c:84:94:fb:45:b6:d5:
                    93:8d:06:a0:9a:e9:d5:ad:83:41:33:c9:11:ad:14:
                    be:ae:7b:c2:15:b2:67:80:63:07:32:af:c5:b5:86:
                    7e:67:60:b9:72:72:23:cf:41:0e:09:2a:33:97:56:
                    73:74:37:9f:fc:2c:30:c9:13:c6:84:43:c8:09:44:
                    ab:9f:32:c3:9d:82:2a:a7:9b:d4:6b:f1:39:d8:2c:
                    84:da:d2:3b:b4:b4:16:75:91:aa:c1:d0:d6:53:e4:
                    41:ea:6a:2a:6a:35:59:9f:79:bc:45:cc:84:6a:38:
                    a4:2e:73:0e:e3:42:6d:f1:04:4e:31:46:81:3f:83:
                    30:5a:83:35:fe:ec:76:e1:01:90:48:05:30:db:47:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:42:0E:C4:AE:C8:63:13:DC:77:85:A9:21:86:17:5A:F4:CE:5E
            X509v3 Authority Key Identifier:
                keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:37:52:38:c2:6a:ee:6a:93:33:7b:9f:33:70:12:90:cb:
         45:e6:1b:c4:d0:05:4d:b6:ec:93:4b:96:ef:f6:49:53:81:4d:
         3a:35:14:c8:22:de:46:41:38:cc:73:e8:51:4c:a0:42:1a:73:
         23:51:eb:6b:1f:b3:87:9e:3b:31:f3:d1:e1:9a:5b:8b:27:fd:
         c7:02:dc:ab:b8:f9:fa:10:0d:fe:15:d5:95:29:c6:61:c7:95:
         eb:6e:1c:a9:2a:18:0d:e7:21:4f:78:28:0d:2f:dd:3d:d4:8e:
         3b:b0:c0:93:a7:54:77:66:92:cd:a4:81:f4:15:fd:ea:b6:8d:
         a4:39:e9:47:3c:0d:52:48:e8:58:b9:db:bc:a7:3c:00:00:7f:
         5e:e4:6d:c2:97:95:84:8b:b0:3f:e0:58:a1:e2:19:e0:21:a0:
         23:cc:6c:e0:04:f1:46:8c:80:19:5e:78:2e:6f:44:7e:e4:b3:
         f3:e4:80:b6:06:df:d0:8a:aa:0a:4d:59:b8:9c:25:e3:fd:e6:
         aa:9f:d3:9e:b6:0b:95:c0:e0:94:3d:0c:75:b2:c6:33:5b:5a:
         12:70:4f:24:86:3a:ab:a8:49:95:6c:f8:0d:6e:64:a8:54:30:
         b9:8c:69:86:fc:4e:27:67:f4:3f:a2:b3:6c:6f:e2:93:10:85:
         1f:03:41:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqQZbfOoSMpx1HIrxCIe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk
NTBkOTcwHhcNMjYwMzI2MDEwMTIxWhcNMjYwMzI3MDEwMTIxWjAzMTEwLwYDVQQD
EygxNWQxNDIwZWM0YWVjODYzMTNkYzc3ODVhOTIxODYxNzVhZjRjZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQltblPWGIjzJUq976JrjamgYfU9
C7GPiZcddJ9+4BfAAuv3yBuHhPM7hDhCJL7wO7u5Gg0D0a5vjfK5Vu+hvA+YapuR
J9mmmbEsck4Zxj3qNAjSHaoBF7T4elaWwLNvYb8vzCvkW7ynQm0r0SBiu4yElPtF
ttWTjQagmunVrYNBM8kRrRS+rnvCFbJngGMHMq/FtYZ+Z2C5cnIjz0EOCSozl1Zz
dDef/CwwyRPGhEPICUSrnzLDnYIqp5vUa/E52CyE2tI7tLQWdZGqwdDWU+RB6moq
ajVZn3m8RcyEajikLnMO40Jt8QROMUaBP4MwWoM1/ux24QGQSAUw20dHMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXRQg7ErshjE9x3hakhhhda9M5eMB8GA1UdIwQY
MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It
ZWEzODQyMGIyNTc5LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5
LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVM3UjjC
au5qkzN7nzNwEpDLReYbxNAFTbbsk0uW7/ZJU4FNOjUUyCLeRkE4zHPoUUygQhpz
I1Hrax+zh547MfPR4Zpbiyf9xwLcq7j5+hAN/hXVlSnGYceV624cqSoYDechT3go
DS/dPdSOO7DAk6dUd2aSzaSB9BX96raNpDnpRzwNUkjoWLnbvKc8AAB/XuRtwpeV
hIuwP+BYoeIZ4CGgI8xs4ATxRoyAGV54Lm9EfuSz8+SAtgbf0IqqCk1ZuJwl4/3m
qp/TnrYLlcDglD0MdbLGM1taEnBPJIY6q6hJlWz4DW5kqFQwuYxphvxOJ2f0P6Kz
bG/ikxCFHwNBcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:28 2026 by rpki-client