Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File:                     eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier:          UbZDl2vX/DNeRuEZxusgxVWR0nOu+qkaNu5AKQOYhEw=
Subject key identifier:   D8:4F:12:78:50:F9:2F:74:47:AC:51:EE:A7:95:A4:32:87:70:8D:63
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer:       /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial:       019D28BB335649A557BEE638F420123F67B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number:          1890
Signing time:             Thu 26 Mar 2026 06:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:49 +0000
Files and hashes:         1: 51DxBzbPYOuEQqlZJUoSRh-Wl5I.roa (hash: lBHR4lK/3PjDa1VfYWpiWC2S5K6Z0gRbqmU6RgprrP4=)
                          2: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
                          3: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: QnAKZBg9ghUCL3Ef0vrWj5FkuzJxLjyQHNKS7LBfFn8=)
                          4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:33:56:49:a5:57:be:e6:38:f4:20:12:3f:67:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
        Validity
            Not Before: Mar 26 06:00:49 2026 GMT
            Not After : Mar 27 06:00:49 2026 GMT
        Subject: CN=d84f127850f92f7447ac51eea795a43287708d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:e3:f3:af:fd:48:85:e3:ae:29:4b:a4:44:
                    69:2f:53:d3:ee:6e:14:37:02:a1:c5:f1:b8:05:b4:
                    2b:00:9d:7e:79:b6:65:58:5e:59:78:3b:94:1a:49:
                    8b:1c:54:39:e1:24:a9:50:5d:16:0a:e8:a3:b3:f2:
                    73:1e:87:a0:45:06:6d:36:f4:e0:8e:d4:cd:1c:60:
                    44:71:f4:97:8d:89:14:93:94:0d:68:e3:c5:24:c2:
                    86:0e:cd:a9:b4:f0:d0:15:be:e4:c5:94:bd:81:1a:
                    20:e8:41:4e:dc:6a:ca:1a:3f:cc:5a:00:1d:1e:3e:
                    f5:1d:75:9d:0f:38:a7:68:f2:3c:ad:d5:3d:4a:ad:
                    2f:69:5e:d0:39:de:c9:ae:69:c6:46:b1:ba:55:b2:
                    7e:93:67:23:98:cf:11:1f:76:17:97:81:5a:c0:08:
                    df:af:de:2a:fc:8d:91:0f:8f:7d:1f:7b:33:de:d3:
                    b0:41:07:7a:bc:86:b9:31:b1:2f:74:76:e3:f8:a0:
                    bc:40:8a:b9:7c:87:10:fc:c5:2a:4b:f1:6a:2f:d8:
                    6f:9a:be:a9:37:52:45:55:fd:a9:a4:1b:e0:be:cd:
                    3a:9f:47:16:2f:f0:63:01:18:e6:c2:f4:c8:2f:a2:
                    f5:32:77:fe:14:c0:c4:1b:81:8f:75:02:88:5e:af:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:12:78:50:F9:2F:74:47:AC:51:EE:A7:95:A4:32:87:70:8D:63
            X509v3 Authority Key Identifier:
                keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:7b:30:cb:e5:1b:08:70:9f:76:97:c0:d5:e0:d1:dd:61:
         ed:6d:72:89:e4:d7:4e:a0:f9:da:03:18:6a:f1:9c:f8:e2:e2:
         03:7a:50:30:1d:79:be:5a:ed:fe:30:b0:7f:15:78:6e:bf:b6:
         3e:4f:bb:f0:bf:da:4e:df:da:2c:ae:87:7e:9b:fb:40:46:78:
         d3:f8:60:0e:d2:99:93:d5:b9:7d:fe:02:cc:5c:e6:d6:40:d6:
         15:73:f6:84:a2:37:36:ff:f3:21:99:e2:b4:b7:d5:75:a8:dd:
         3c:f4:62:9b:fb:5f:34:3d:2a:97:fd:d3:27:1a:c9:bc:0a:bf:
         9c:cd:15:76:7e:9e:02:05:6d:2d:85:09:54:40:5c:29:70:61:
         81:41:d1:7b:aa:85:02:1c:ab:90:5e:26:10:53:f0:ff:d0:62:
         fb:de:18:85:b7:3f:73:7f:e4:79:90:93:1c:07:7a:57:72:12:
         a9:47:ea:a9:b3:b5:7f:06:18:b0:a4:ed:e8:73:96:d4:ca:ef:
         86:34:a7:43:c6:b6:23:f8:0f:99:74:ca:9b:46:09:e1:d7:e2:
         22:43:bf:78:cd:66:65:a6:d1:b6:48:61:8b:a3:63:ff:3f:ae:
         d9:2b:81:ca:6f:46:b6:53:03:76:72:7d:7f:9d:cf:fd:cb:cd:
         40:3d:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:41 2026 by rpki-client