Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier:          oa8oq6xL+s1L5EeZJL0BoWzUFm59py5rnzuKO+6X5xc=
Subject key identifier:   37:8A:A1:86:85:08:E8:1B:8F:8D:69:A1:26:6B:BD:5E:71:AA:1C:DC
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       019D97AAD96D18CE20C514474866097CC736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number:          0BA1
Signing time:             Thu 16 Apr 2026 19:00:49 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:49 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:49 +0000
Files and hashes:         1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
                          2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: Hz+sG4hvPuZx3CyWrhqCBT1g73Ti7ST5KWpOuRxWgQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:d9:6d:18:ce:20:c5:14:47:48:66:09:7c:c7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Apr 16 19:00:49 2026 GMT
            Not After : Apr 17 19:00:49 2026 GMT
        Subject: CN=378aa1868508e81b8f8d69a1266bbd5e71aa1cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:15:74:0a:12:13:34:9e:bc:86:15:4b:bd:
                    c9:a3:b8:73:81:eb:ba:0c:06:57:90:06:8c:9a:34:
                    6a:29:8b:7a:ed:d9:5c:7d:b1:ab:31:63:74:3f:7c:
                    f4:0a:14:a8:c5:f2:84:99:37:26:6d:a9:2d:8e:80:
                    e6:da:af:c9:d6:9f:6c:1a:d7:85:20:bb:14:bf:d0:
                    1a:28:16:df:a4:e8:20:7a:c5:db:16:ca:6b:22:77:
                    22:cf:7b:49:70:ec:52:aa:72:83:5e:16:ed:f4:a2:
                    44:d3:73:3a:ff:be:d7:38:d3:f5:55:60:2a:e4:69:
                    83:60:ce:a0:4b:a2:1b:d2:57:69:22:16:10:5b:87:
                    7e:f7:ae:fa:9d:57:a7:82:cc:c1:f2:06:73:81:fe:
                    7e:e2:94:d2:46:0e:28:e0:00:0f:36:6e:ce:a2:94:
                    7e:cd:ee:cd:5b:d3:2b:a5:03:d9:40:ec:ca:c9:94:
                    9a:3e:8a:d5:74:4e:1f:95:47:b1:fd:00:78:15:b6:
                    75:33:55:2d:89:69:bc:33:57:a8:96:53:50:67:74:
                    f8:f5:01:4e:ad:69:9c:9e:b8:21:3b:de:bd:71:68:
                    df:d8:c7:9c:68:df:16:e7:dd:16:4b:28:f8:10:15:
                    05:cc:5c:9b:2c:ed:10:31:30:fa:71:c3:5a:65:6d:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:A1:86:85:08:E8:1B:8F:8D:69:A1:26:6B:BD:5E:71:AA:1C:DC
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:07:94:83:b4:14:e3:c3:e0:d3:c5:67:1b:53:1c:b2:ce:
         f3:bb:14:cd:b7:a4:8a:04:fc:23:66:e5:84:2c:75:c5:83:a7:
         3c:6c:c6:0d:94:07:d5:2e:9e:3f:cb:c7:0c:c1:75:d1:51:57:
         55:26:69:5d:bf:f8:7e:a1:b6:37:18:dc:11:c1:35:f1:10:bb:
         83:bf:37:c2:bc:f2:20:b3:c8:e4:bd:e0:68:8c:6b:e4:a1:5d:
         7a:55:e9:9a:b0:37:21:ea:b4:a3:b7:17:77:e4:e4:bd:a3:92:
         0c:6a:3d:0c:a4:51:d1:f6:02:57:7c:5f:93:e1:40:fb:e8:db:
         f9:66:0c:df:40:4c:cc:64:21:a3:b9:6b:c7:c1:13:a5:8f:46:
         0b:47:33:0c:75:69:0f:71:f9:e6:0d:b2:35:41:3e:ee:32:62:
         0f:c3:29:35:7d:78:62:9d:1e:a0:83:f9:b0:05:65:84:1b:89:
         8f:db:9e:fe:f3:50:24:74:7d:f4:b6:67:3e:bb:b4:f7:90:37:
         4a:79:d9:62:78:9d:16:68:25:d3:cc:54:8f:bc:8b:79:7c:c9:
         3e:00:68:32:fb:29:81:a7:45:f0:5d:d9:c9:2f:fa:87:3c:91:
         70:e6:53:b2:ba:01:79:b0:6d:da:e2:de:1f:f3:96:63:3a:3c:
         54:36:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client