Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier:          QvLH55DuJ9Z9gy6ap+YyD5moZL92Bfu4std/AIo9elM=
Subject key identifier:   A5:1B:34:A9:A9:3C:6A:3E:42:25:50:4F:72:10:01:96:39:75:D7:0B
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       019CAC0FBFEAB85FCF1348D0802FC982D144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number:          0B27
Signing time:             Mon 02 Mar 2026 01:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:38 +0000
Files and hashes:         1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
                          2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: b/bHrpy7M+gXEkQdgXc2kOf3L3LJNksFKcihglhjLG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:bf:ea:b8:5f:cf:13:48:d0:80:2f:c9:82:d1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Mar  2 01:00:38 2026 GMT
            Not After : Mar  3 01:00:38 2026 GMT
        Subject: CN=a51b34a9a93c6a3e4225504f721001963975d70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:e2:12:b4:14:cc:40:54:07:1f:38:5d:9f:
                    79:49:36:92:75:59:06:ac:67:66:e8:f1:8a:70:f9:
                    f6:bd:9c:2f:79:37:68:59:0a:52:8c:0e:8d:48:83:
                    71:f4:e3:73:e8:52:6e:12:5c:72:e7:54:00:6b:c0:
                    7c:1b:3d:f4:22:0b:48:50:7d:5a:43:94:17:88:20:
                    25:e1:98:5f:1b:4e:22:a5:56:a2:13:34:17:3d:3d:
                    c6:c2:af:22:0f:86:54:c0:09:aa:70:1a:b8:16:c6:
                    75:11:3b:e9:de:6f:e9:f2:94:92:92:81:c2:4a:ef:
                    2f:9f:69:dd:2c:c8:06:e4:a8:0d:c4:bc:ab:25:01:
                    9a:ab:c2:ec:1f:c8:a4:25:76:fa:34:8e:34:68:73:
                    0e:b2:c0:c5:a4:ca:bc:34:1d:49:58:74:b2:57:ba:
                    7e:34:55:3f:02:d3:4c:1e:92:b7:12:0e:47:7f:bd:
                    db:37:e1:f6:ce:18:b3:14:55:87:16:46:63:bb:cd:
                    40:df:c3:5e:43:fc:9b:20:17:61:79:ae:5d:b5:96:
                    c7:59:a8:c1:4f:5a:65:37:93:0d:1d:4b:93:92:ab:
                    03:77:cd:ae:2c:1a:77:f8:e7:6b:7e:c3:ce:19:30:
                    7d:26:69:b5:a4:e8:83:a4:7d:9a:98:eb:1e:28:aa:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:34:A9:A9:3C:6A:3E:42:25:50:4F:72:10:01:96:39:75:D7:0B
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:86:0d:5e:f4:d7:8b:02:05:db:9c:9c:6b:9b:54:d3:a8:
         ad:e6:61:3f:c0:ba:85:01:8e:b5:07:87:a3:8d:83:f3:6a:d0:
         35:02:0d:cc:0b:37:d5:68:f3:93:d5:bd:ca:58:75:3e:c6:23:
         b4:86:27:9b:4c:4a:01:72:e5:82:fc:c4:5c:81:e2:97:db:fe:
         91:0b:af:68:54:0c:2d:7e:2b:14:7f:59:c2:a7:c2:35:d4:cc:
         6f:bc:5e:21:17:5e:c7:cc:f6:43:13:76:9d:b1:ae:4a:36:68:
         f3:42:2d:c7:ed:e3:28:06:96:d4:68:23:5e:11:87:f6:61:56:
         c0:19:81:4c:29:6c:0d:3d:e4:a2:45:41:8b:9d:43:08:cf:cd:
         b9:4b:2a:a7:b4:b2:6d:2f:81:64:a6:d9:91:26:b2:86:85:22:
         3d:02:fa:03:46:bb:74:4e:cb:cc:4d:72:bc:e1:17:c6:01:9a:
         3b:47:87:e3:81:19:8d:27:6b:38:da:5e:15:af:29:97:ee:17:
         53:fe:b9:e7:d9:04:25:8e:ec:8e:11:e5:df:61:0c:23:a3:2f:
         7a:e3:63:a9:44:10:b3:e0:57:a5:58:c0:d2:9b:6c:43:78:2c:
         ab:e7:5c:51:30:64:a5:2b:54:78:e2:1d:62:6a:aa:5b:ce:ac:
         25:26:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:45 2026 by rpki-client