Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          LxJ3FOeW+SiojP6/lFjj1amDnFkuOswV2HU0j8uCC+A=
Subject key identifier:   A8:FF:55:D4:CF:79:09:44:4D:05:BC:9C:B9:F1:29:88:84:97:1D:50
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       019D2AA95BC6CB257CFB40B9123D87ABCC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          0696
Signing time:             Thu 26 Mar 2026 15:00:35 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:35 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:35 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: UfWuPcPusy6bIHM7OmAbj7DJr/vPKdUepsFXVyq5TBk=)
                          2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:5b:c6:cb:25:7c:fb:40:b9:12:3d:87:ab:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Mar 26 15:00:35 2026 GMT
            Not After : Mar 27 15:00:35 2026 GMT
        Subject: CN=a8ff55d4cf7909444d05bc9cb9f1298884971d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:b0:8f:a1:c6:3f:53:b3:91:73:ee:ca:89:
                    72:76:0b:eb:d1:ad:18:6a:98:1b:0b:d1:18:3a:b9:
                    90:c8:08:4a:3a:7b:0b:40:b9:6b:e8:ce:66:69:a2:
                    ae:e9:c7:55:9b:1d:15:46:c8:c0:83:8e:21:16:76:
                    e2:34:bf:27:bf:1e:6a:8d:65:61:18:c7:c3:41:c9:
                    eb:32:59:8b:7c:97:b8:b2:8b:5b:e8:41:92:a5:94:
                    ca:d7:21:8f:0f:90:f3:06:90:0e:0d:4c:8a:d7:99:
                    d8:15:56:72:03:98:18:48:1a:bb:d8:43:b8:c3:58:
                    27:56:87:be:19:0d:19:2d:07:5f:7a:1e:f3:7e:24:
                    7f:57:13:1b:46:23:f5:40:12:db:90:13:ad:b8:d9:
                    25:18:64:7e:2a:d4:2a:00:3c:07:1c:b8:32:86:dc:
                    85:ae:24:38:20:2c:e4:d0:af:27:f3:bc:d0:e8:6f:
                    41:12:94:b7:b7:e8:8f:93:65:3d:66:a1:13:45:18:
                    a4:1d:b0:e9:37:0c:df:5d:09:cc:a1:14:f4:c6:08:
                    17:f9:72:7c:88:7e:50:55:51:56:24:d4:e9:b5:42:
                    8b:0c:05:63:09:c5:03:e1:65:e8:43:df:3a:03:51:
                    f1:68:2c:0e:d5:1f:a6:81:d5:c2:3b:d1:7d:7b:08:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:55:D4:CF:79:09:44:4D:05:BC:9C:B9:F1:29:88:84:97:1D:50
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:22:a0:63:41:60:a1:9b:1e:5d:e1:5e:80:7e:72:0f:48:13:
         88:e8:5b:d2:ed:a3:92:82:92:05:3a:af:ce:04:60:45:44:f5:
         f9:ac:c7:dd:75:0a:b5:17:16:07:09:b7:d3:d9:cb:18:55:15:
         60:6a:c7:bd:45:6d:97:20:46:c9:f2:b7:5b:22:c9:64:24:f9:
         07:00:c3:43:f3:34:3b:3d:97:52:05:09:95:33:77:f2:21:fb:
         ef:1e:c7:ff:b0:c0:f4:fe:82:4c:b5:9d:c1:02:a2:6d:00:7a:
         67:33:07:1b:6e:2d:b2:4b:b3:d8:4e:1b:ee:24:f9:0c:13:dd:
         35:d9:a0:ab:ff:2c:38:e3:f6:50:39:ff:1c:a1:66:c2:ce:d1:
         dc:6f:aa:29:3c:62:fc:46:df:3b:de:b8:c3:63:56:be:80:88:
         19:c1:c5:86:56:56:ee:9d:72:c1:69:b2:02:be:f1:04:81:a3:
         6a:08:db:d9:65:c3:4e:b7:22:e5:20:0c:96:51:ad:03:5d:6e:
         64:58:26:69:cc:ec:8a:05:57:e0:4a:88:8b:98:1e:59:6e:af:
         06:b6:9c:be:0e:ee:fc:9b:0d:ad:6c:ba:57:dc:7d:34:b4:d4:
         7c:6e:a1:fe:6a:5f:7e:0c:fc:f4:62:3b:47:61:92:b3:fa:30:
         25:f0:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:55 2026 by rpki-client