Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json)
Hash identifier:          M6xYMFvYdg1IQOU9QcLMBC8egkXepAv9lmS2OoDg7VE=
Subject key identifier:   92:DC:C7:A7:08:79:D3:A8:AD:F3:0D:79:65:B1:37:30:88:36:A0:83
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Certificate issuer:       /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial:       019D25F10F67A8C0F7D173199E6A8735548E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 17:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:48 +0000
Files and hashes:         1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: gcL1sTEXup8g6dj5AyxMa210vU1G/ACpwIfdoAa2zNo=)
                          2: xu4367rTCq-PaJR0TqEFWPrUVSU.roa (hash: y/FhYnngcjKCDWpWGI5NMxxal3saQVjOboN8MjiFs1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:0f:67:a8:c0:f7:d1:73:19:9e:6a:87:35:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Validity
            Not Before: Mar 25 17:00:48 2026 GMT
            Not After : Mar 26 17:00:48 2026 GMT
        Subject: CN=92dcc7a70879d3a8adf30d7965b137308836a083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:8e:70:87:68:cc:19:0c:1c:93:9a:96:35:
                    8f:ae:82:8c:f8:1a:a7:f3:1f:c7:3b:ef:4c:c4:5d:
                    59:ec:12:bb:16:29:97:8b:95:6e:e6:da:ed:a1:1f:
                    8f:42:27:e8:28:c6:fe:6f:5e:ff:f7:ce:fc:b1:67:
                    6e:a9:04:db:aa:c5:63:3e:1e:0e:bf:bb:68:56:a8:
                    5e:60:40:ed:a3:23:cd:61:d1:09:67:1d:be:94:21:
                    91:ff:82:eb:ad:c7:b6:d4:59:7d:06:fd:8c:4d:7f:
                    61:a0:e9:f0:d3:de:ae:5d:84:56:d6:04:e0:2e:98:
                    22:a1:c9:51:a5:0b:6b:b9:21:91:3b:dd:c2:83:98:
                    29:91:2a:7d:2c:6e:59:74:98:fd:eb:60:ba:a0:e4:
                    56:5d:da:30:b6:f3:47:4d:9f:43:56:8f:89:a4:dd:
                    8f:36:18:11:45:a5:6e:98:15:16:64:b6:bf:4f:c2:
                    a5:00:e4:8e:ea:46:de:b1:ca:a6:bc:5b:a7:14:f0:
                    09:88:20:d3:86:d3:b4:e2:78:39:24:5d:7b:5b:09:
                    c7:45:65:a9:de:d4:7e:6a:49:75:83:a3:1d:3d:27:
                    19:43:8f:0d:c9:41:4c:45:fa:2d:84:b7:8b:e3:7c:
                    8c:46:2e:90:1a:2e:79:c5:bf:13:8c:c9:c8:9c:a3:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:C7:A7:08:79:D3:A8:AD:F3:0D:79:65:B1:37:30:88:36:A0:83
            X509v3 Authority Key Identifier:
                keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:12:41:73:62:12:13:f3:ba:bb:1b:75:da:d0:3c:d8:62:7c:
         68:4f:a8:16:65:1c:6c:3e:7d:a9:ac:67:1a:62:5c:66:95:3b:
         a3:cd:10:49:ce:b3:14:b5:0e:4a:be:c4:30:39:56:cd:c6:22:
         d1:bd:43:34:7b:ab:81:0a:bf:43:75:8c:39:61:3f:fc:fe:ba:
         53:12:63:08:64:8f:70:f9:b6:a0:81:8f:87:44:ac:5e:aa:f5:
         d2:ac:3e:27:f1:48:af:90:47:dd:d9:bb:be:3a:5d:a8:39:57:
         f8:51:10:65:e5:1d:56:a9:44:ec:65:db:12:d6:a8:69:1e:e0:
         26:90:3a:32:1e:1f:89:d2:53:eb:bd:a2:2f:00:c7:93:73:ae:
         27:0f:be:77:16:f4:76:4e:a4:8f:44:fd:d0:d6:e8:39:e0:ea:
         63:96:a9:52:eb:5e:cc:b9:3d:c2:00:de:15:3a:a4:7e:f7:d0:
         18:c1:59:33:b4:91:28:27:d6:ff:1f:e7:04:39:61:d8:0c:df:
         5b:3a:eb:2c:5a:6d:b6:34:9e:48:16:3d:d3:cf:66:69:d7:11:
         bd:b7:2b:ed:e5:db:da:d6:58:7c:a8:6f:b7:e0:04:c0:59:16:
         62:40:50:10:83:83:50:82:d3:e6:c2:24:7f:a5:02:20:2d:09:
         3e:91:aa:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Q9nqMD30XMZnmqHNVSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTZmNzcxOTNmMjc2NGJhODk0Mjg1ZGQyZjY0ZjEyMjZm
ZDkxMjYwHhcNMjYwMzI1MTcwMDQ4WhcNMjYwMzI2MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg5MmRjYzdhNzA4NzlkM2E4YWRmMzBkNzk2NWIxMzczMDg4MzZhMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPOOcIdozBkMHJOaljWProKM+Bqn
8x/HO+9MxF1Z7BK7FimXi5Vu5trtoR+PQifoKMb+b17/9878sWduqQTbqsVjPh4O
v7toVqheYEDtoyPNYdEJZx2+lCGR/4Lrrce21Fl9Bv2MTX9hoOnw096uXYRW1gTg
LpgioclRpQtruSGRO93Cg5gpkSp9LG5ZdJj962C6oORWXdowtvNHTZ9DVo+JpN2P
NhgRRaVumBUWZLa/T8KlAOSO6kbescqmvFunFPAJiCDThtO04ng5JF17WwnHRWWp
3tR+akl1g6MdPScZQ48NyUFMRfothLeL43yMRi6QGi55xb8TjMnInKPs+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLcx6cIedOorfMNeWWxNzCINqCDMB8GA1UdIwQY
MBaAFBHm93GT8nZLqJQoXdL2TxIm/ZEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAt
YmQ3MjhiOGY1MzI3LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAtYmQ3MjhiOGY1MzI3
LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRJBc2IS
E/O6uxt12tA82GJ8aE+oFmUcbD59qaxnGmJcZpU7o80QSc6zFLUOSr7EMDlWzcYi
0b1DNHurgQq/Q3WMOWE//P66UxJjCGSPcPm2oIGPh0SsXqr10qw+J/FIr5BH3dm7
vjpdqDlX+FEQZeUdVqlE7GXbEtaoaR7gJpA6Mh4fidJT672iLwDHk3OuJw++dxb0
dk6kj0T90NboOeDqY5apUutezLk9wgDeFTqkfvfQGMFZM7SRKCfW/x/nBDlh2Azf
WzrrLFpttjSeSBY9089madcRvbcr7eXb2tZYfKhvt+AEwFkWYkBQEIODUILT5sIk
f6UCIC0JPpGq3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:04 2026 by rpki-client