Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
File:                     eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json)
Hash identifier:          QSq2PPHoQDwd64ngmGCKBHvQKNi6p6P3lfdWQIqhzwY=
Subject key identifier:   37:96:49:59:CC:79:E5:D9:AB:72:BA:EE:99:76:C4:46:2A:16:54:DC
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Certificate issuer:       /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial:       019D265ECBB7B1C1592A170C615EE6183507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
Manifest number:          1817
Signing time:             Wed 25 Mar 2026 19:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:39 +0000
Files and hashes:         1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: KMMoAmJ2v+y/kAqRVf2WJbQYkzVargOCJshMRcs2cdE=)
                          2: lccfsoW3vR6R_hPtm9uXpAiVavE.roa (hash: 6tcCfZjYESMQ8pyCtnpM2RFHSDWt8Iyew4zedOU08ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:cb:b7:b1:c1:59:2a:17:0c:61:5e:e6:18:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
        Validity
            Not Before: Mar 25 19:00:39 2026 GMT
            Not After : Mar 26 19:00:39 2026 GMT
        Subject: CN=37964959cc79e5d9ab72baee9976c4462a1654dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:2b:11:d4:5f:01:b6:35:b9:09:a9:2f:5f:
                    af:36:b9:d6:4d:d7:0b:67:92:0e:69:1f:f5:d2:c6:
                    7d:e6:a2:83:06:52:19:25:bb:2c:99:c7:ee:ed:88:
                    2c:70:f0:76:b7:87:3c:00:af:bd:91:24:eb:55:39:
                    a5:9e:ef:79:7a:eb:d7:3b:f5:7b:f1:71:79:36:f6:
                    b7:e8:57:c5:1d:77:79:c1:99:90:46:2c:a8:be:2d:
                    8a:8c:be:37:84:fb:a6:03:07:c5:a8:91:4b:8c:a1:
                    be:a7:9c:7f:e2:f4:1e:14:b2:09:fe:97:0f:37:0a:
                    ef:5f:ed:c6:85:de:16:ab:c0:5a:96:64:f7:b1:a6:
                    70:8e:41:86:54:d6:b3:c7:06:f1:f5:06:28:d7:0b:
                    13:3b:30:81:2b:5d:87:e1:b9:94:3a:be:85:d9:f2:
                    96:5b:e7:ff:f2:5f:b7:01:28:7a:89:d2:88:ea:5e:
                    5c:13:31:da:f6:c3:13:7c:cf:09:c4:c7:8e:95:4b:
                    f6:b0:a1:89:5b:73:c6:bb:39:b7:e2:ca:bc:94:ef:
                    c3:3d:94:9e:70:1f:25:af:d7:7e:a6:e3:b0:0e:35:
                    f3:5c:a8:af:1d:f5:7b:ff:a1:b1:76:01:06:08:81:
                    7d:0f:40:f9:a1:86:88:9f:cb:00:6e:62:02:41:66:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:96:49:59:CC:79:E5:D9:AB:72:BA:EE:99:76:C4:46:2A:16:54:DC
            X509v3 Authority Key Identifier:
                keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a1:71:7f:3b:90:68:8b:0c:7d:e1:bc:79:c7:a7:ea:5f:0d:
         58:1e:cc:26:bc:6a:a9:38:57:b1:d6:9d:d8:ad:c6:04:08:5c:
         90:d6:c6:4c:43:ac:a2:2e:98:0d:e3:4d:5b:42:ba:0a:41:9d:
         16:dd:64:93:9d:f5:c7:2c:1e:5a:5e:20:a5:fd:d1:c9:6b:5d:
         24:58:b5:6c:e9:4e:a1:3f:e3:57:aa:f1:fd:95:e5:ef:b0:be:
         a3:69:1f:76:c9:96:60:4a:6e:35:7f:88:a6:fe:1a:ad:3b:76:
         83:41:9f:a8:94:2d:c9:e9:f0:94:b8:c6:e9:e7:17:08:67:85:
         35:32:fb:62:de:57:27:a4:5c:6e:0a:a0:40:b1:b1:21:48:11:
         ba:44:a4:ad:d3:80:e7:92:c5:15:2e:3e:c4:d7:07:32:dd:59:
         f4:2b:30:45:64:af:9e:f6:c4:3f:9d:fb:68:a4:6c:c9:5b:ff:
         1d:f9:18:00:eb:e3:3b:a5:07:ef:cd:02:25:df:30:f6:68:85:
         89:24:3f:4a:db:03:5d:3f:7c:6c:27:93:c0:2a:b3:5b:17:3c:
         e9:d3:cb:53:12:47:7d:5b:0d:43:56:c8:63:39:cf:6d:1f:ea:
         6b:08:e2:83:f2:46:6c:51:dd:27:c0:ec:58:34:37:2a:78:bd:
         f8:32:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:14 2026 by rpki-client