Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          9kDl8W7VH3OfdQmajUF2DZaHnfEZgIHsqea+z1umswQ=
Subject key identifier:   6D:E2:28:76:99:5E:7D:87:16:68:2D:63:79:BC:F1:66:90:B4:85:AD
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       019CAE3579485BE0D3F435D2231681BCD8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          05EB
Signing time:             Mon 02 Mar 2026 11:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:05 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: PlSbaYIpX7hlbwjwqSKLyKCZ0Eg+/EsbdB3Z0K03qbk=)
                          2: UMttTqdPGlYVEJ9xSG18eV0MP_Y.roa (hash: ElV3W7IWRaicNCEm+0BYxqdFsKSgxVaeMH7JmOjRFOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:79:48:5b:e0:d3:f4:35:d2:23:16:81:bc:d8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Mar  2 11:01:05 2026 GMT
            Not After : Mar  3 11:01:05 2026 GMT
        Subject: CN=6de22876995e7d8716682d6379bcf16690b485ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:88:22:43:ff:d2:ce:13:4d:5a:33:ec:f2:
                    db:d1:c4:d9:82:4a:38:c1:8c:8f:95:3a:24:f5:00:
                    09:27:9b:09:f1:2f:b1:14:2a:09:1e:3f:d1:9f:eb:
                    d4:a0:3b:52:9f:d6:3e:76:ec:b9:41:44:7c:16:77:
                    c1:89:bb:80:7c:4d:b2:ec:3b:3d:5d:7b:f3:da:31:
                    8a:1d:f6:ba:fe:18:67:89:a5:06:5e:b8:42:d6:70:
                    71:23:d4:6c:db:d7:d5:0e:2b:40:79:6d:fc:bc:08:
                    04:ec:5b:e8:4e:bb:5d:52:9f:b0:a8:6c:0b:a7:a2:
                    ef:dd:bd:54:da:39:ab:c0:4c:c5:fa:dc:5b:fc:23:
                    8a:68:c2:04:5e:d5:ea:89:bb:bf:61:90:6e:48:b8:
                    78:10:96:e0:5c:83:cd:96:70:0c:de:64:ef:be:63:
                    c3:e7:6a:95:52:3f:02:55:7a:dd:a3:b6:05:e9:45:
                    95:d3:0a:ee:63:3e:24:76:d9:59:8f:35:2a:c5:dd:
                    13:aa:ae:db:85:3e:0b:b6:04:46:11:a1:76:8d:9c:
                    05:05:f4:6e:e1:f4:83:6e:b5:b1:e9:b4:b5:55:15:
                    dc:c8:57:e3:41:9f:a0:ee:40:f1:b3:d0:81:dd:b4:
                    70:30:1b:81:3e:84:96:0c:67:94:6f:16:c0:a3:92:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:28:76:99:5E:7D:87:16:68:2D:63:79:BC:F1:66:90:B4:85:AD
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:78:6e:45:dd:a3:b2:54:b0:e9:5b:6f:8a:11:95:71:71:
         75:5e:a8:22:32:95:df:4a:be:fe:2a:33:60:a6:03:fd:69:a4:
         26:81:0d:c3:f3:44:1d:0b:4d:53:3b:62:69:8d:de:9c:ec:d0:
         d0:52:c9:6b:a0:ba:ca:cf:cb:95:41:dd:4c:08:49:b3:05:3f:
         bb:67:0e:75:44:3d:57:c1:59:32:a7:8a:8e:72:b2:94:01:3b:
         5b:a4:fd:1a:12:6d:22:ff:0b:79:4d:7b:0a:5a:50:ce:ac:00:
         c7:ad:88:d6:d5:bf:5e:90:5a:cd:b0:72:3d:94:a0:f3:7b:36:
         47:30:a0:10:54:5e:d3:9f:36:6a:a8:57:f6:4c:d7:c3:0b:a4:
         e8:94:99:a0:f5:a2:e0:c1:ba:80:26:5a:d1:83:1c:ab:f5:20:
         5a:98:64:3a:be:df:b2:8a:37:6d:82:39:ba:ca:6c:bf:15:4a:
         29:dc:16:08:dd:dc:57:14:92:1e:e4:52:b7:8b:77:cc:2c:3f:
         23:4e:d6:6f:20:9c:2a:9f:66:b5:a0:8d:1e:48:e6:7d:7c:39:
         17:3d:ec:88:4b:ef:73:5d:f1:6c:fd:2d:93:b3:62:b2:c4:ac:
         a6:cf:e9:04:46:05:8e:77:ac:43:b0:87:98:bd:c9:4c:07:4e:
         a9:2f:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:56 2026 by rpki-client