Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          ZuUNMlr5XvLYAsZLAUSPkOV36PmBdpYZS3yklOurmjM=
Subject key identifier:   B2:69:4E:F1:99:18:42:B6:D2:BB:81:89:83:39:19:6B:BF:4B:79:C8
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019D262819609D56C91E46474C617D00A1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 18:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:55 +0000
Files and hashes:         1: 6oE2tV5xJLygHD8211ohyUC5Fhg.roa (hash: Z/3O7eTXu9453+Wb+f/D4hi5mlRSIZ2Q9SX36foWOhU=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: FhyHVCK2BSRAHdJH9NfwXp62qg7jB6gGKWznt7Mmz+s=)
                          3: FSc2LNK0DXWFbmxIzJTQoPNPaHI.roa (hash: GV3WKNU7MtJ1suHdu7xzv5MkwegHMMBiDtRM53ANEdc=)
                          4: a6C5SFiUk80yaQysAFlbgHQ3BJE.roa (hash: vtb8i4mZAE6TV6J6coLOSP+tnQ8FsVz6tF34wr10+CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:19:60:9d:56:c9:1e:46:47:4c:61:7d:00:a1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Mar 25 18:00:55 2026 GMT
            Not After : Mar 26 18:00:55 2026 GMT
        Subject: CN=b2694ef1991842b6d2bb81898339196bbf4b79c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:77:31:2d:9a:28:c0:25:7c:dd:b0:80:c4:
                    ed:e0:a2:1c:a1:70:45:8f:0c:14:ad:e1:80:0d:63:
                    3c:82:07:23:e6:d2:70:f8:b6:d2:be:94:47:45:fd:
                    c9:d8:4a:c0:f3:74:4c:d5:b1:74:47:2a:6c:04:58:
                    3d:26:41:2c:47:78:2c:02:8e:39:29:ca:06:79:92:
                    db:31:b1:38:6c:08:f9:06:25:26:7f:64:0d:1a:f7:
                    4f:bc:d7:77:dd:e9:1b:30:36:64:68:4f:42:81:bf:
                    7f:8b:de:ee:41:52:a0:9f:2a:ad:ff:c2:4c:3f:12:
                    e6:13:51:26:a3:f4:fd:e0:f9:79:c0:70:76:6a:74:
                    27:0d:bf:45:e6:81:3b:96:0c:41:c0:c9:57:58:59:
                    e2:94:0c:eb:77:cf:6a:9b:d9:99:a3:46:19:c9:5f:
                    b3:5d:2e:c8:88:d7:75:41:17:a3:33:90:f6:58:42:
                    a6:50:a5:18:81:a3:34:93:4b:be:79:62:34:41:1c:
                    6f:34:fb:90:e2:d1:61:d2:81:52:a4:a6:9d:b6:6c:
                    08:3e:19:b3:3e:24:c9:2e:ff:13:7a:a7:1b:78:44:
                    8b:16:97:9e:0d:05:13:99:00:83:7e:9a:d3:1e:96:
                    0a:6a:a1:11:1e:a4:72:ab:fa:d1:bb:7e:ea:27:e3:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:4E:F1:99:18:42:B6:D2:BB:81:89:83:39:19:6B:BF:4B:79:C8
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:e6:0c:e0:8f:80:f3:e9:b9:d3:25:06:5e:d4:22:16:1c:
         e5:68:28:db:02:30:3b:44:5e:3f:56:32:a2:14:f0:b6:fb:b7:
         f1:c9:ea:8e:9b:c1:30:cf:e0:e5:db:d5:b5:18:6b:e2:38:79:
         82:1c:a7:5f:b8:87:0d:66:39:10:3d:ff:88:10:0f:bf:a3:5c:
         26:df:7e:e7:a7:b8:bf:bf:b9:e5:f1:6a:d8:5b:cf:2e:75:af:
         05:7d:a7:98:32:24:5e:0e:52:38:23:e5:ff:f3:50:5d:ed:41:
         8b:e3:c3:c3:de:e4:95:64:10:3e:b7:be:6a:35:ba:f4:db:aa:
         d0:0b:4b:c7:52:94:35:f6:b2:8c:61:a5:97:9b:91:71:c6:6d:
         5e:8c:c7:69:49:47:29:35:80:a9:f5:ab:00:87:de:38:e6:9b:
         14:38:ce:62:e3:b7:df:63:ca:c8:06:7c:55:8f:67:2a:a4:31:
         fa:d6:f7:c9:98:35:80:09:bf:0e:d9:e3:79:e1:3e:44:4f:5c:
         be:eb:6a:d2:c1:f6:2a:12:3b:1b:4d:30:1f:44:b5:24:8c:74:
         4d:58:57:83:5c:57:87:55:8b:be:83:db:9f:d0:f9:d4:a3:ec:
         6e:18:ea:73:b9:81:07:dc:21:20:01:27:c8:7b:cc:8b:43:1e:
         eb:bd:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:45 2026 by rpki-client