Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft
File:                     euYhSLMLZr0KPaOJfs-_2a9PQx4.mft (raw, json)
Hash identifier:          i7P7fiaRMNbK+y/uRRUkbW9y9tkUyDUeSF4wv67guKQ=
Subject key identifier:   B8:5B:7F:FC:26:6B:0C:8A:72:46:D5:6C:B5:7C:65:28:0F:AA:CC:A0
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Certificate issuer:       /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial:       019D2AA925C36F2A24434FDCBE4FA1FB3699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 15:00:21 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:21 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:21 +0000
Files and hashes:         1: euYhSLMLZr0KPaOJfs-_2a9PQx4.crl (hash: Q3uF3vne0ZIGN7nKlIgiu2ZR43hvIXmWj6Aws0O6T1A=)
                          2: v-Nv7hipfRgC0ELcLqdbxhyjmIw.roa (hash: h1T61B0V+nBw/17g00gAAf0Flv8ktJE7uxvotCGlNYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:25:c3:6f:2a:24:43:4f:dc:be:4f:a1:fb:36:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
        Validity
            Not Before: Mar 26 15:00:21 2026 GMT
            Not After : Mar 27 15:00:21 2026 GMT
        Subject: CN=b85b7ffc266b0c8a7246d56cb57c65280faacca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:4e:57:3d:ef:b1:de:a7:42:b6:50:e1:fd:
                    c8:7e:37:28:04:8e:6a:30:4f:d6:1a:20:a6:64:63:
                    23:c2:0f:ca:a3:d6:01:30:98:98:db:d9:49:55:9f:
                    72:67:f6:08:b1:85:1f:23:65:ce:82:c7:8c:14:b6:
                    8f:29:15:a6:96:f6:12:de:98:62:30:e0:91:c1:7e:
                    a7:73:ff:23:1b:ae:44:d3:34:21:21:0e:4b:9b:14:
                    37:b4:03:57:1d:61:3d:c8:c3:31:31:1e:ec:1c:4f:
                    71:7c:06:e3:9b:ac:51:31:0f:79:03:a2:ab:55:08:
                    da:9a:fc:18:38:7f:95:62:16:63:64:f0:13:c8:32:
                    b9:32:a1:6f:f0:9d:35:f8:c0:d0:9d:4d:0d:cd:e5:
                    8c:cd:d3:af:ab:45:f8:9d:68:0b:bb:d9:f2:6e:ca:
                    85:05:1c:d5:75:f7:85:61:ba:5c:3c:a6:85:c9:e3:
                    75:14:ed:0d:5d:37:06:af:c5:ea:43:e7:3d:02:47:
                    39:65:b8:21:56:0b:bc:fc:e0:69:c5:9d:93:c9:fa:
                    8e:c2:9e:05:8e:a4:eb:f6:6a:94:ed:17:d4:60:2c:
                    9b:9b:2c:ae:16:fc:e7:d0:2f:5a:a4:03:72:71:b1:
                    49:e5:9e:4b:0a:b3:27:24:a5:db:5b:51:c9:7d:57:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:7F:FC:26:6B:0C:8A:72:46:D5:6C:B5:7C:65:28:0F:AA:CC:A0
            X509v3 Authority Key Identifier:
                keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:ef:36:47:aa:95:67:43:f0:e6:13:41:44:a7:66:86:ad:
         ed:38:e6:ec:5c:e5:f4:54:07:ca:a1:19:67:83:44:81:05:a7:
         f8:90:db:6b:57:9f:a8:30:29:8e:c5:3c:b2:e7:a1:79:af:e9:
         35:0c:58:34:43:50:24:f0:b9:bf:20:f4:e0:4e:e9:05:6e:e8:
         01:f5:77:1a:71:11:a8:a3:07:33:83:97:57:7f:61:2b:3f:1e:
         aa:27:15:41:11:8d:de:0a:46:1c:27:fa:7e:99:fb:af:67:25:
         b5:07:6e:d1:e1:5f:eb:1c:05:2b:71:0a:b5:85:ac:56:50:3f:
         c6:a4:f5:4a:34:34:4e:68:f5:01:25:84:a7:d3:33:48:42:14:
         4e:23:57:e7:af:bb:89:43:13:95:91:d8:29:a1:a0:a1:93:92:
         e1:bd:75:d7:cc:33:80:c1:3d:6a:d9:9c:cc:f3:31:45:fc:02:
         fc:bd:ee:f4:1f:d6:d5:43:05:44:4e:15:85:69:d9:97:fe:1e:
         5c:6f:e7:bd:d7:ae:00:74:ca:f9:3b:5b:c1:96:a5:80:55:f5:
         b1:f1:b2:5c:66:2c:01:6b:4c:ac:21:d5:00:06:5b:cb:ea:c1:
         92:54:2a:2d:be:cd:3a:1b:8c:05:3a:c9:e5:47:57:95:39:d2:
         3a:5c:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:19 2026 by rpki-client