Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          iUVuHh2GYFqgYDZ687LNGF0KJ724kxFLcYvKtsUPxxo=
Subject key identifier:   2B:E7:4F:19:E3:A5:F6:C8:D6:9E:48:83:93:7D:ED:1F:71:4A:70:3C
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019DA29D0CD36F15642BEE13DF3E7E6F1AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0819
Signing time:             Sat 18 Apr 2026 22:01:34 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:34 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:34 +0000
Files and hashes:         1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: zhSdvLkkKMTruJ+CDbd5jiEKWo1dbyeisEMtdhXP66I=)
                          3: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          4: T8RpbOMhHEQDHfF2dUfVcXdvxvY.roa (hash: TQSYcZIIck4VBZbQSRsD/cgVUwlLdvF+hNZjGbNMAH0=)
                          5: TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa (hash: bL4XenmCDJbff/MqTHfiWQNDePBNNE3fmDlYlrfuHMA=)
                          6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9d:0c:d3:6f:15:64:2b:ee:13:df:3e:7e:6f:1a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Apr 18 22:01:34 2026 GMT
            Not After : Apr 19 22:01:34 2026 GMT
        Subject: CN=2be74f19e3a5f6c8d69e4883937ded1f714a703c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:07:fe:20:d2:2d:96:59:2c:2f:e4:6b:a4:
                    83:2a:b0:c5:22:6e:24:66:3c:b9:1c:96:e5:f2:45:
                    a2:fa:96:8e:2a:f4:3c:61:f5:ac:d1:93:49:bc:82:
                    8a:44:13:aa:51:01:1f:54:53:6b:bc:ec:41:c9:51:
                    e6:1a:af:f9:6c:d7:34:a4:b1:46:3d:f2:30:74:ec:
                    8a:53:38:a3:b6:27:81:74:3f:4b:fb:63:81:d8:60:
                    87:3a:7e:1f:3c:a1:bb:de:a7:bb:8c:85:03:8e:21:
                    21:43:93:f7:94:54:5c:88:5b:79:b2:91:78:1a:3d:
                    d5:47:60:ef:e9:36:e6:2c:42:83:e8:df:33:fb:6d:
                    f0:af:f3:26:3b:4d:11:f0:39:aa:ec:f9:74:3d:cf:
                    d2:21:4f:31:b6:f2:66:2c:0b:09:65:42:73:4e:49:
                    9a:56:18:61:4b:14:6c:49:c3:27:ad:fe:1b:cb:3f:
                    f5:a4:29:cb:4e:52:0c:c5:d8:8a:52:91:8a:d0:95:
                    a8:db:cb:42:8a:62:82:21:56:02:45:10:41:78:20:
                    ce:38:1a:39:d3:b3:c0:b9:0a:0e:78:31:d8:e6:fa:
                    a4:41:9c:dd:98:4b:a4:32:bd:85:1d:b0:7b:29:7e:
                    b1:94:ef:aa:b6:d7:e5:3c:13:d8:d9:41:bc:cd:21:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E7:4F:19:E3:A5:F6:C8:D6:9E:48:83:93:7D:ED:1F:71:4A:70:3C
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:04:a9:b9:1e:3c:a1:1b:d7:57:8d:d0:df:4e:db:91:06:1b:
         ee:aa:8a:c9:2b:70:f4:64:6e:2a:dd:d7:9a:0a:f0:8f:91:41:
         3a:82:7e:a3:d8:8a:8d:d9:e9:f8:58:11:34:b2:10:e0:f7:11:
         8b:f3:43:ec:21:5b:b3:9c:75:d8:b9:95:52:98:4e:48:e7:d4:
         8d:da:ee:9f:7b:5d:9d:bb:a0:67:59:a3:99:27:ef:67:16:66:
         51:54:6b:6d:5b:76:82:44:20:c1:ae:46:3c:f7:b5:c6:85:79:
         bd:0b:4d:9d:67:32:0f:46:c7:02:61:68:d5:e7:a8:28:cc:20:
         1c:92:27:d5:6d:4e:3d:32:db:49:a6:64:bb:e2:8c:32:6c:fb:
         e2:36:07:fb:a4:98:87:00:55:78:d7:5c:40:0f:3f:7d:a7:27:
         12:de:03:1e:b3:8e:b8:55:b9:7b:f0:66:40:dc:7c:06:d5:29:
         9e:58:23:4c:e5:f2:8b:a8:6a:5e:bb:ba:82:99:12:02:89:55:
         93:d4:a9:c3:e6:6f:af:cb:77:a4:2b:22:15:9d:c4:ad:10:b2:
         dd:7f:a8:43:07:8a:62:6c:4f:13:d8:fc:44:c0:43:51:da:d1:
         af:06:69:f4:09:8d:f7:cd:67:c6:3a:39:e7:30:ec:fa:f1:e6:
         50:c5:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:57 2026 by rpki-client