Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          1IFnV3kjtGvx/Y/CI4ETFcAESkPU30gGHpFgaX28/Fk=
Subject key identifier:   D8:F0:BB:FC:A9:F2:75:4E:C7:AE:B6:CE:7A:4E:80:4F:C9:A6:D2:4B
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       019D2A3B68BF3595AC2AD8DD856525A5074E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 13:00:29 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:29 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:29 +0000
Files and hashes:         1: FnCe4GQUHfME91aEBmjNKoeoN3E.roa (hash: 2f0BNR92jRHqrOKp3b4PoOH7gnturQoCE8376hKSgYc=)
                          2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: eEI9jxODm+Z41blojMTIut5Tq00gUMnj9affR50W4aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:68:bf:35:95:ac:2a:d8:dd:85:65:25:a5:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: Mar 26 13:00:29 2026 GMT
            Not After : Mar 27 13:00:29 2026 GMT
        Subject: CN=d8f0bbfca9f2754ec7aeb6ce7a4e804fc9a6d24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:7e:6f:b2:39:e7:92:c8:94:6c:20:3a:88:
                    d0:1f:35:f2:0e:3f:d7:61:5e:31:6e:f5:6c:86:c2:
                    f0:32:10:5c:e4:5f:dc:f0:0c:b1:c9:5d:23:f1:71:
                    cb:63:6f:46:f1:2f:36:c2:25:e4:8b:47:c7:4c:37:
                    56:df:a8:2b:3d:91:e6:9c:5e:e6:6b:3f:42:0c:0a:
                    b9:69:36:af:8c:5f:0b:9c:b9:ed:3f:d4:8c:f1:5d:
                    c9:28:f4:c9:50:93:04:b0:c2:75:e3:1d:72:76:72:
                    4f:97:41:18:65:06:ab:3e:28:be:46:e9:b6:d9:3d:
                    9c:a5:3d:9e:5b:55:fd:f8:15:ea:26:1f:62:fe:14:
                    f7:90:01:8d:ef:12:1f:37:d9:95:cc:5c:0c:6f:42:
                    08:2e:bc:a5:39:23:93:25:98:f1:2e:fb:d3:af:78:
                    ba:95:d8:13:71:60:7d:4b:b0:19:f1:77:ce:c0:42:
                    34:9e:1f:03:52:0f:34:59:9c:6e:b1:a8:3d:c1:31:
                    50:00:67:8f:e0:54:c8:86:d5:86:43:5f:9a:d6:ff:
                    f5:ee:02:c9:9e:c5:5f:9d:44:de:94:de:6a:04:44:
                    bd:10:3a:4e:3a:c1:d8:09:38:16:04:cf:90:aa:dd:
                    a7:58:06:f8:af:fb:55:da:61:9d:31:61:23:ae:78:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F0:BB:FC:A9:F2:75:4E:C7:AE:B6:CE:7A:4E:80:4F:C9:A6:D2:4B
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7d:44:3b:68:f1:25:9b:42:c5:98:73:07:db:d8:39:23:70:
         6a:f0:38:f5:a1:41:44:37:83:55:33:51:5d:ed:04:87:58:8f:
         b8:95:d3:f0:73:07:0b:3a:03:b1:53:c7:fb:de:9c:6e:61:23:
         e3:93:66:03:d9:04:0b:2b:25:f2:35:70:2c:1c:05:54:00:56:
         e0:b7:61:43:6c:54:a2:e7:0c:e6:0e:f3:e2:2e:c3:52:8e:d1:
         6e:88:a4:92:7d:83:58:f9:d5:40:9f:16:8a:d3:99:80:75:81:
         63:34:b5:8f:db:12:f5:27:f8:19:2e:e6:33:08:a8:5c:88:6a:
         f6:01:0c:cd:26:dd:de:ed:79:7f:05:0c:6f:62:eb:78:15:76:
         e4:38:88:29:3d:97:f2:24:d7:5d:bf:1b:52:18:cd:cd:9f:62:
         f0:cf:eb:0c:77:ce:8d:cb:8d:09:ea:60:56:22:2f:c7:6e:da:
         87:d1:df:cb:27:01:53:03:ea:be:53:5a:14:a4:54:0a:62:9f:
         8a:2c:59:58:86:b3:29:3d:09:16:3f:0c:a1:7f:7e:03:0e:22:
         67:dd:91:04:96:d3:a4:f0:26:8a:ee:1b:6d:ca:8e:af:f9:02:
         8c:6e:88:16:f1:64:32:73:11:a1:99:ef:f1:d9:39:78:8b:c0:
         cd:e2:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:33 2026 by rpki-client