Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          bctuWHEvq8CtI/WD8Oc/Nq8lhwUR7cbwexUE1L/eAmQ=
Subject key identifier:   E4:92:20:9C:8A:89:A5:D3:6F:E1:A6:51:6B:6E:31:52:60:F0:A9:23
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019D27E0233D1404E93ABE04FD3DB50CAB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          1385
Signing time:             Thu 26 Mar 2026 02:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:33 +0000
Files and hashes:         1: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (hash: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: RVEO78p1pF/7LuJj2NXabw97D5sIJLGnQRB4ZM/+v98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:23:3d:14:04:e9:3a:be:04:fd:3d:b5:0c:ab:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Mar 26 02:01:33 2026 GMT
            Not After : Mar 27 02:01:33 2026 GMT
        Subject: CN=e492209c8a89a5d36fe1a6516b6e315260f0a923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:af:45:81:25:95:d9:79:80:87:ee:54:48:
                    00:4b:64:b2:da:5d:6a:ba:b0:ec:cd:f7:13:2b:23:
                    5e:00:f3:9f:19:e8:7d:5d:43:8a:b9:c8:f8:60:d8:
                    ab:dd:58:a7:25:88:c6:f7:97:1e:b7:b8:96:f5:5b:
                    59:60:7e:a8:db:6a:08:0b:f1:61:0e:a5:a7:5e:89:
                    c7:03:46:1b:39:c6:81:2d:fa:b4:71:95:1d:88:1c:
                    b5:50:fc:d4:ed:8c:34:54:3e:27:50:2d:a1:b1:58:
                    e1:40:32:27:16:17:6c:7b:96:eb:bc:3a:a9:58:09:
                    77:95:52:c5:d7:8c:93:7f:56:7a:23:72:b4:6e:2a:
                    1f:81:db:bc:42:bc:51:d0:56:6f:ef:a3:49:cd:ab:
                    0f:06:23:ba:63:3e:14:fb:20:2d:f2:e9:b3:a9:a0:
                    d2:8b:a2:54:a6:ee:56:df:16:39:5a:59:fe:15:2f:
                    74:18:75:84:17:ce:f1:b3:78:62:02:6c:1c:11:e9:
                    39:8d:bf:42:cb:f8:d0:23:86:61:5b:02:90:06:fe:
                    ac:bd:44:84:0a:7a:b4:ec:71:2f:3f:3e:f1:5c:2e:
                    fb:ce:eb:45:98:d2:6c:39:60:87:18:d8:6d:99:49:
                    c8:ab:a7:4c:76:b8:83:10:36:44:2c:6c:fc:5e:ab:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:20:9C:8A:89:A5:D3:6F:E1:A6:51:6B:6E:31:52:60:F0:A9:23
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:65:c3:55:b3:79:e3:ab:f9:b0:da:26:98:79:69:c5:4d:49:
         0d:15:02:6d:1b:e9:4d:de:c3:1a:17:57:de:45:d3:aa:a5:98:
         22:b8:ee:30:2e:41:ae:c6:fd:2e:19:53:03:d7:89:74:61:41:
         9c:89:34:2e:d2:31:f9:c7:db:1d:b1:57:9c:2c:f7:b1:5c:87:
         5d:00:90:e8:3a:cc:02:bf:a7:1e:96:ad:7f:b9:3b:84:91:14:
         29:89:e3:f7:be:28:d5:5e:1d:bc:ab:50:69:d5:79:97:b7:f6:
         0f:7f:5b:e9:db:28:f0:19:f5:f9:87:1d:7e:cb:73:a5:31:2f:
         75:13:b5:98:9a:78:8f:c3:b3:f3:a0:11:c2:c6:6e:25:cf:49:
         2c:9a:fe:2a:13:fe:d8:35:98:ce:46:f4:20:71:9f:b5:fd:23:
         07:76:44:86:d4:94:46:3b:e5:12:9c:6a:f1:7a:bd:02:61:b2:
         57:cd:49:fa:45:bb:6f:87:55:2b:53:89:23:fe:66:2a:c9:e5:
         6c:5b:ce:2e:d6:39:ea:89:d4:2d:6b:c6:aa:d1:e4:9a:2b:7b:
         76:d9:90:4c:d5:52:42:07:1e:d3:dc:36:6d:12:20:53:50:24:
         d3:a2:72:17:1f:8e:9f:e8:07:a6:f0:2e:80:25:c1:45:3b:4b:
         d0:18:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:07 2026 by rpki-client