Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File:                     eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier:          aeMhUnev57vc7jhlQWJ0F3A0U7zEcrBUG6XqrJw8cjM=
Subject key identifier:   A3:0A:DB:2C:44:0D:C4:46:2B:CC:E5:45:F4:D6:77:AD:06:AC:7B:17
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer:       /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial:       019D99626DD58459B907C88E71789180D20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number:          0787
Signing time:             Fri 17 Apr 2026 03:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:57 +0000
Files and hashes:         1: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: w4LQ7vVU1cWxPi5ask8dbtDzdSgpAQ0kTHwiqpL2nwc=)
                          2: jjcLF7vH_6kvhdbuJiucTbxqBvg.roa (hash: 9CdEC+k58JtQfXt8cCMHjsV9l0T5+udg+CTuc06zGlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:6d:d5:84:59:b9:07:c8:8e:71:78:91:80:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
        Validity
            Not Before: Apr 17 03:00:57 2026 GMT
            Not After : Apr 18 03:00:57 2026 GMT
        Subject: CN=a30adb2c440dc4462bcce545f4d677ad06ac7b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:e9:ed:89:23:1f:7d:69:ad:13:e9:a0:7c:
                    f0:6e:fe:b8:cf:64:36:28:b8:2e:0d:21:20:f0:af:
                    c9:2d:fc:d3:38:ec:76:b6:92:8b:a7:f6:9d:dc:30:
                    e8:5d:74:89:06:c0:55:8b:62:27:bc:f9:86:cb:02:
                    ac:a5:b4:7e:a9:a0:96:9b:97:22:a4:8d:ee:4b:b3:
                    62:8c:fc:24:96:95:16:97:90:75:2d:fe:33:13:c0:
                    89:20:5a:17:5b:b6:be:9a:0f:53:f7:80:1d:4b:f6:
                    91:f9:87:1c:77:26:cb:ea:18:48:84:a9:52:0f:90:
                    bf:d6:b2:55:e3:3f:6c:fd:72:fc:8b:b6:2c:93:92:
                    53:85:9e:db:f9:2f:21:a2:3f:67:0e:bb:1f:09:f6:
                    4f:fd:4e:21:f9:53:d4:89:b0:d3:7c:1d:8f:3f:9b:
                    cb:4d:c6:36:e6:73:74:8b:37:5f:75:7c:69:7b:69:
                    2b:37:fe:ed:a4:34:c6:b5:69:c4:52:b1:bb:d2:d7:
                    7d:28:11:df:f0:5c:dd:3c:1d:84:a7:53:29:80:6a:
                    63:1a:a3:19:62:36:e7:31:04:cb:66:5b:6e:32:8e:
                    9f:b1:9a:d6:94:08:8c:b2:8c:64:ef:69:45:6a:1f:
                    e6:d8:62:fc:35:a1:8b:4b:d6:83:71:9e:dc:08:5e:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:DB:2C:44:0D:C4:46:2B:CC:E5:45:F4:D6:77:AD:06:AC:7B:17
            X509v3 Authority Key Identifier:
                keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:0c:cd:c2:73:46:99:c0:ff:8f:a4:37:a4:19:e3:17:3e:1e:
         c5:26:1c:62:ca:34:3b:d5:83:75:46:57:fa:eb:fb:45:12:05:
         c9:16:89:04:24:c0:29:8d:21:b1:c8:db:0f:55:ab:8e:a0:82:
         e8:f1:71:ae:5a:d0:22:b6:89:f8:d1:fd:16:6a:09:f7:a6:dc:
         e9:43:4e:69:9c:9f:50:53:3f:fd:de:de:89:91:64:b0:93:c9:
         75:58:f2:11:d4:b2:b4:30:2e:35:3f:33:e8:19:5c:8c:f3:68:
         72:06:10:42:60:e7:1b:f7:97:36:e9:e7:b3:34:29:77:2f:b3:
         c5:ed:91:ef:fc:a0:7c:4b:6b:33:fb:48:97:fe:1d:08:fb:40:
         3b:29:a5:a6:c8:4b:ef:5d:09:75:ac:ba:e9:df:9d:31:10:11:
         6d:a9:ab:03:94:21:f2:81:df:53:ee:dd:34:cf:80:a9:81:50:
         41:25:2b:c3:99:a9:32:91:0d:9a:eb:7f:72:07:51:71:73:66:
         02:8b:48:49:5c:56:6b:a2:47:d8:df:7b:34:a5:99:d3:81:c4:
         69:68:95:51:14:df:6c:0d:72:29:aa:be:ae:6a:ba:dc:af:50:
         fa:71:61:f5:90:4a:5a:0f:f2:24:b1:25:3b:83:10:11:b7:ca:
         7a:02:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:29 2026 by rpki-client