Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
File:                     eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json)
Hash identifier:          paGcBMV34NLXvH93593w1YmQWw4KIAWWgUxxmIAv/Mk=
Subject key identifier:   B4:5A:CA:83:6E:9B:87:57:9C:4B:FA:CC:BC:4C:6D:84:F1:C6:66:F4
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Certificate issuer:       /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial:       019E1D910C6CD865BAFC9C8BB742DA0A54E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 19:01:45 +0000
Manifest this update:     Tue 12 May 2026 19:01:45 +0000
Manifest next update:     Wed 13 May 2026 19:01:45 +0000
Files and hashes:         1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: R83L9VTtTsKRgE07WVI5WhEqIYluGhWwmXrtfE8FwoA=)
                          2: lccfsoW3vR6R_hPtm9uXpAiVavE.roa (hash: 6tcCfZjYESMQ8pyCtnpM2RFHSDWt8Iyew4zedOU08ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:0c:6c:d8:65:ba:fc:9c:8b:b7:42:da:0a:54:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
        Validity
            Not Before: May 12 19:01:45 2026 GMT
            Not After : May 13 19:01:45 2026 GMT
        Subject: CN=b45aca836e9b87579c4bfaccbc4c6d84f1c666f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:85:d4:a5:80:ff:97:16:24:09:56:c1:ce:
                    8f:c4:19:61:6c:39:9e:c9:c4:d5:82:2d:40:19:f5:
                    c8:c3:4b:6d:8b:32:11:ba:3e:b6:57:18:e8:d0:30:
                    0d:e4:f1:27:12:77:ca:3e:45:e9:e7:50:db:db:e4:
                    a1:ce:ee:2d:e2:8c:27:f1:29:a2:4f:5a:ec:d9:38:
                    d8:31:6a:b5:58:f1:0d:1d:a4:1f:bd:c5:ff:dc:d3:
                    7b:c3:07:87:32:67:dc:bb:86:55:57:d8:56:47:31:
                    44:1f:91:0b:b2:db:b9:c1:f5:34:a3:5a:c7:4d:c5:
                    84:a3:e9:71:a7:8b:46:0b:fb:12:79:15:14:0e:53:
                    90:34:f2:be:eb:6a:d4:71:c5:e7:48:7f:08:f2:0f:
                    58:12:20:23:ac:df:2c:c3:5e:b8:93:dc:64:fc:04:
                    aa:6a:a2:26:25:18:6e:33:d0:6b:f3:fb:42:dd:1f:
                    88:43:5d:36:74:c3:17:e0:27:fd:f5:3b:c1:70:71:
                    ed:62:a8:6e:13:24:dd:e0:3f:2e:6a:18:01:ac:9d:
                    2a:26:75:69:7b:dc:c9:0b:01:d8:d0:c0:98:aa:ac:
                    6e:d0:48:9d:b5:9b:37:59:13:a8:a9:af:d4:04:cd:
                    ae:2a:4b:b2:f3:db:3c:9b:3a:31:a2:aa:89:52:e3:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:CA:83:6E:9B:87:57:9C:4B:FA:CC:BC:4C:6D:84:F1:C6:66:F4
            X509v3 Authority Key Identifier:
                keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:61:7e:95:f8:44:dd:b2:27:60:61:96:cd:0b:7e:c6:2e:
         52:72:85:65:1b:1a:12:8b:62:fd:2c:c3:01:11:c8:74:34:af:
         85:46:a1:07:16:bb:80:21:a5:3d:17:6f:f7:b9:d0:d6:f3:49:
         96:56:d6:69:9a:3b:b4:a4:f6:ab:f2:e9:1a:02:76:f1:00:20:
         b5:04:33:77:14:96:eb:46:c0:d0:83:c6:72:0d:f3:9b:47:0e:
         86:6e:ce:30:18:97:61:05:fe:92:37:1c:8a:04:d2:16:52:a1:
         5b:af:e1:6b:fd:c1:08:6a:f3:4d:48:1f:5e:a7:59:c6:87:21:
         1c:3f:5e:4e:24:3c:6b:a3:aa:c3:8c:d3:0f:e7:15:04:9b:39:
         1c:84:ff:82:8f:0a:93:b7:4f:24:46:99:0e:7f:19:6d:78:f6:
         4a:d1:7d:9c:f3:1e:5e:f5:6f:35:bd:0b:9d:c2:94:c6:03:51:
         15:f0:1c:ca:5c:56:ef:24:17:89:07:72:05:00:08:fa:c2:e6:
         47:76:c3:84:03:80:c6:3e:51:ec:95:51:2f:5e:84:99:39:c3:
         35:a5:03:15:3e:b3:a0:16:30:57:66:ed:83:2d:35:31:62:eb:
         8f:ac:66:10:f8:f5:4d:0d:b7:61:ab:73:e5:ee:c3:38:98:43:
         c0:a9:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:04 2026 by rpki-client