Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          m3tt3S4P9SxbcxaJ3SnAzbxSQC6OQl04QRLvQlKEV9o=
Subject key identifier:   EE:2E:B8:58:31:AB:98:58:B5:44:3E:B1:0A:9C:BD:65:27:C1:38:1B
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       019CAED9D4E8DCB1DDF5BC7B976C732CBC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          17C6
Signing time:             Mon 02 Mar 2026 14:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:37 +0000
Files and hashes:         1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: 7SZFI8KQapFSic8wplaHrOmpQjIqR8Fxw4GKm+wta7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:d9:d4:e8:dc:b1:dd:f5:bc:7b:97:6c:73:2c:bc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Mar  2 14:00:37 2026 GMT
            Not After : Mar  3 14:00:37 2026 GMT
        Subject: CN=ee2eb85831ab9858b5443eb10a9cbd6527c1381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:9f:45:6e:8e:fb:e1:a6:c6:fa:39:13:59:
                    76:cb:bf:c1:51:e1:3f:53:27:fa:e0:3e:a3:56:21:
                    f1:3c:17:fb:0e:fd:ca:d9:1d:40:79:13:05:c0:28:
                    16:ba:3c:18:4b:26:00:92:4b:53:90:c4:17:0b:68:
                    68:2e:a9:67:36:06:66:d5:6a:d8:28:73:1c:f8:0e:
                    70:1b:4f:a4:26:0e:75:a5:0b:39:37:75:80:57:cc:
                    4f:26:47:41:ed:da:56:05:f4:d0:2b:f8:78:e3:04:
                    7b:78:a2:03:62:d7:6f:39:56:99:f3:b8:bf:52:cb:
                    84:21:9e:4c:0a:69:01:26:95:e3:65:ad:c9:f8:c4:
                    f4:7b:4b:0d:6e:34:dd:67:72:05:55:26:0b:1f:38:
                    7a:22:b3:b9:6f:72:a6:c4:41:b9:10:26:f1:64:85:
                    e1:00:68:68:47:84:ae:9c:53:ed:e9:1a:13:ec:6a:
                    fe:80:11:88:97:8e:b0:c4:bf:bb:8a:e7:92:0d:e8:
                    fb:64:3f:50:04:31:68:53:14:48:90:b0:a2:19:c1:
                    f3:e9:e6:79:a7:82:87:ba:2f:0d:72:bd:bc:df:de:
                    aa:0a:31:38:61:70:ee:ff:bd:7d:ca:af:3f:59:7e:
                    64:04:0f:5c:b1:57:58:3f:58:90:06:e8:73:c6:0c:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2E:B8:58:31:AB:98:58:B5:44:3E:B1:0A:9C:BD:65:27:C1:38:1B
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:df:76:56:c6:b0:47:6c:47:c0:40:be:01:ed:fc:76:e4:
         d4:de:ae:f0:e6:ed:ed:47:c4:8c:05:ab:f0:c7:91:12:43:57:
         25:f5:a1:8e:d7:8e:41:83:93:a5:25:77:f8:a9:92:d3:f9:b8:
         39:89:8f:a3:ff:c6:9e:cc:49:57:51:86:22:28:eb:4e:4b:b4:
         72:5f:ca:0d:55:fc:04:6b:b7:86:2b:0c:24:f6:c7:d1:ef:ab:
         f1:63:8f:8f:ca:13:99:b1:d2:c1:98:53:32:7f:de:a5:80:4b:
         a4:e1:bf:ad:47:62:25:53:1f:ad:a2:b3:7b:54:4f:a6:85:ba:
         dc:06:10:d4:cb:b5:fc:0a:39:1c:68:aa:1e:c8:07:54:c8:c6:
         b5:07:82:3e:d6:8e:4d:9a:2f:c7:58:ce:19:10:d5:5b:4b:c2:
         9a:49:65:c2:b6:81:45:a8:a9:23:08:8b:f8:dc:f7:43:d7:af:
         15:c0:86:8f:0c:98:c6:ab:fb:7b:44:2a:71:15:2a:06:30:88:
         07:05:fd:ce:15:98:61:cc:33:4d:ac:88:ce:4b:cd:06:ce:a6:
         12:be:40:6f:30:fe:e9:7a:0f:1e:d4:51:bb:b1:09:c7:4a:54:
         68:87:f4:fc:ec:12:42:03:ae:e6:c0:1a:02:c8:f6:6a:d8:88:
         33:f4:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:29 2026 by rpki-client