Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          EiJZCUsXtYhakQ6t9XYfrLRN8jHBxc+Ar6jl8yhLnQQ=
Subject key identifier:   38:83:20:B1:EC:84:E3:D8:32:72:FC:23:C3:02:8D:20:FB:A0:6E:34
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       019D28169C706978ED4521014BD37EEFFAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          1095
Signing time:             Thu 26 Mar 2026 03:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:03 +0000
Files and hashes:         1: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (hash: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: ZpRsNOG66XMATCVY9jboSkh+TLCVkEaA6p0+lCM51dE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:9c:70:69:78:ed:45:21:01:4b:d3:7e:ef:fa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Mar 26 03:01:03 2026 GMT
            Not After : Mar 27 03:01:03 2026 GMT
        Subject: CN=388320b1ec84e3d83272fc23c3028d20fba06e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:37:1f:d0:54:0d:51:a0:79:f7:6d:d9:73:
                    2f:73:c9:64:5e:3d:68:d8:12:c5:1e:3f:f3:31:09:
                    89:9f:75:c5:be:ed:18:28:9f:17:52:61:8d:b9:a9:
                    b8:5c:c9:13:dd:b6:5b:f5:f0:f4:d6:47:df:48:1d:
                    7b:12:49:64:21:30:66:80:31:83:e4:28:5e:5d:e3:
                    71:1e:d9:df:03:ec:0b:39:40:3d:a7:ce:35:d9:e9:
                    76:7b:1f:00:79:f5:60:35:36:9b:c7:78:e3:37:46:
                    f5:a3:59:b0:13:e7:7c:ec:af:a7:bb:3c:9c:0c:50:
                    3b:84:92:4e:dd:c3:02:9f:d7:a1:bd:d2:87:a2:8f:
                    29:34:a0:b6:e8:c8:fc:d7:21:98:23:d6:0e:04:d2:
                    53:bc:06:b4:42:3d:48:98:f9:78:f6:24:bb:a4:e9:
                    74:f9:3c:c5:5b:d0:02:e4:bd:3e:0a:93:04:f9:e5:
                    55:4a:79:03:c4:b9:aa:ee:4c:62:22:da:a2:82:d8:
                    9e:26:f0:66:82:1f:11:97:ed:98:d8:b8:7d:81:20:
                    4c:d5:ea:f0:9c:ee:ac:ca:b7:40:6f:a1:7d:89:90:
                    fe:cb:9a:00:1d:23:50:4d:d5:9c:18:e9:30:45:51:
                    ef:54:a6:f0:87:2f:03:51:b6:75:23:37:d6:26:94:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:20:B1:EC:84:E3:D8:32:72:FC:23:C3:02:8D:20:FB:A0:6E:34
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:93:c8:90:e5:43:ff:4e:43:c0:a8:1c:89:ed:9c:f7:9b:
         fa:df:eb:d9:d9:64:84:9d:c5:74:d6:db:e6:1d:c9:a3:9b:7a:
         2d:a9:fa:35:2c:ba:77:25:c8:a1:5a:19:71:29:48:a9:37:f3:
         79:27:ca:71:13:e2:8f:23:99:5e:5c:75:fd:c3:fb:54:d9:7a:
         5d:32:e1:06:97:9a:98:68:33:a8:3e:56:23:ec:7a:78:0c:4a:
         c8:40:49:44:09:d4:de:22:ca:ec:67:23:eb:19:84:84:3c:63:
         1e:d5:8d:82:fa:61:5f:ca:97:89:7d:cb:66:85:1e:71:ae:a2:
         e9:24:14:88:97:5d:2e:53:cc:1b:4a:c6:aa:98:f2:90:1e:bd:
         44:2b:95:c7:5a:4b:c6:93:c0:25:e3:e8:42:5e:27:0e:9a:85:
         e5:97:02:ec:d2:c2:e3:59:0d:88:81:54:b9:44:74:0d:c8:58:
         ac:03:d5:0b:4a:39:a2:f4:97:d0:97:e2:0d:db:30:1e:1a:a7:
         75:ba:ba:de:8b:29:15:dd:a9:89:61:a6:83:5d:d6:c9:19:25:
         33:63:9b:dc:e0:47:1e:ee:18:49:54:f2:2f:00:74:0a:f3:d4:
         e9:8a:01:5d:53:33:aa:6f:56:04:fd:14:e3:16:86:22:ec:f4:
         02:27:a9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:43 2026 by rpki-client