Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          5Hs2/2JPdfVsf6Bqwer7etHtWrH7BoAPPIOzoMLz1qU=
Subject key identifier:   80:8A:0D:09:9C:34:64:B4:EA:E4:61:40:D6:76:12:63:43:00:95:16
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       019CABD921F79C76248AD1B782CFBB9362B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          1841
Signing time:             Mon 02 Mar 2026 00:00:59 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:59 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:59 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: WLogV18Msyvxi92DuZhE/vg7AOPd3h3WmKRLriAWAB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:21:f7:9c:76:24:8a:d1:b7:82:cf:bb:93:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Mar  2 00:00:59 2026 GMT
            Not After : Mar  3 00:00:59 2026 GMT
        Subject: CN=808a0d099c3464b4eae46140d676126343009516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:65:e3:47:29:e3:1f:14:48:0b:5e:12:f8:
                    14:3f:f3:98:6b:39:a1:dd:27:fd:e3:69:c9:40:84:
                    dc:ec:4a:d0:9e:3e:9c:2a:a7:ff:fd:af:ec:d9:a9:
                    d4:28:e6:11:0e:1b:b8:7f:15:76:13:ef:ab:a2:64:
                    6b:41:4d:81:db:2a:7a:38:86:89:f5:87:d6:e0:35:
                    39:2f:ad:b5:6f:d3:77:0e:3a:bf:e4:8d:43:9a:34:
                    7b:5f:94:9a:38:02:f2:09:1c:c1:f9:73:11:46:8f:
                    0b:7c:b2:c2:3c:ed:e3:1c:75:66:f7:c2:53:5b:6a:
                    87:3c:c0:1b:58:31:10:e5:16:3d:2f:b2:a8:12:1c:
                    99:ad:49:84:08:37:67:4d:d3:0b:c3:cf:23:cc:a7:
                    49:54:42:e7:69:0a:de:a7:40:a6:67:25:90:9c:98:
                    25:fd:35:56:98:05:78:0e:73:4c:1d:98:33:93:5f:
                    d5:71:7f:28:1b:c0:a1:45:88:37:6c:c0:33:f1:22:
                    c8:09:e5:95:65:fd:90:31:c9:a6:39:e0:15:e9:9e:
                    e9:c7:79:fd:3b:d1:d0:54:71:e0:c6:64:41:ff:bf:
                    50:18:32:42:57:11:c3:6f:fa:75:71:a4:4b:53:12:
                    9e:03:ce:1c:23:11:44:83:d3:77:71:71:8a:20:16:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:0D:09:9C:34:64:B4:EA:E4:61:40:D6:76:12:63:43:00:95:16
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:55:61:09:a9:99:b6:07:e6:cb:4a:87:ea:29:1e:92:8b:
         ac:80:a3:bd:38:b8:79:d8:ed:91:5a:f5:52:7f:ce:90:e2:95:
         ed:94:ad:56:62:c4:de:c7:c7:6a:b2:15:5a:f9:9b:0d:0e:13:
         b2:28:54:f9:47:e7:11:75:ef:55:c3:11:24:e1:4b:8b:f0:73:
         cd:cf:ad:11:eb:aa:de:9b:99:ef:b0:e8:62:df:33:a5:1f:28:
         3d:2f:19:cc:7f:bb:d6:f6:58:4d:7b:df:27:2a:ce:5a:cb:15:
         71:f6:ea:6f:2b:a3:6f:8c:0c:91:89:b8:14:de:2b:aa:4b:c0:
         7a:f6:e4:7c:03:70:26:29:07:72:1b:ad:94:6b:35:55:bc:fc:
         d6:be:0b:de:d8:6b:12:48:57:38:df:8b:cc:57:64:aa:15:f2:
         b5:c9:23:f1:64:2b:a4:72:cf:99:5c:24:98:d9:cb:b4:a6:57:
         a8:b6:ac:f7:e6:97:96:b4:80:f4:77:da:26:89:6c:3f:1a:dd:
         ac:14:00:77:be:26:5b:6c:23:38:42:e1:21:35:83:49:14:6d:
         df:40:26:5a:9e:d7:d3:ba:a0:d5:da:e1:a0:8f:c2:45:a8:36:
         78:2e:48:4c:39:fc:8e:66:52:e8:d0:cf:ff:c0:48:5f:85:7f:
         86:9d:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:53 2026 by rpki-client