Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File:                     pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier:          QnKvW0xVUhX0cvKwZgSS7Lbi66DTEUlRPH4qpItHyk8=
Subject key identifier:   2B:92:46:31:9B:74:90:25:2A:36:BD:18:62:5A:22:11:81:3C:EC:F9
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer:       /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial:       019CAA2193E5516388D898A2A4FDD9E6C496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number:          0F2D
Signing time:             Sun 01 Mar 2026 16:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:53 +0000
Files and hashes:         1: VxCQxc08P0DZgAyO7KWudQ0O7Z8.roa (hash: jH4w5LTxZTZZ58UjnOoWvUcYyFEbQg4ioEzvd4CJ7H4=)
                          2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: a8egvNJnau5/0eXLk9wLJJI4jqUsPn5u5k5kFjI+Noc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:93:e5:51:63:88:d8:98:a2:a4:fd:d9:e6:c4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
        Validity
            Not Before: Mar  1 16:00:53 2026 GMT
            Not After : Mar  2 16:00:53 2026 GMT
        Subject: CN=2b9246319b7490252a36bd18625a2211813cecf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:63:63:3d:69:c5:63:ae:9b:73:bf:ad:64:
                    43:c0:49:ec:5f:8b:7e:24:bc:b6:af:9f:69:cd:7b:
                    ef:c4:9f:bb:db:17:ab:8b:78:e2:ed:fe:a9:86:9f:
                    4e:6e:c7:01:b6:13:29:ca:31:ad:83:b4:07:8b:7c:
                    43:23:dd:a7:35:2f:17:fa:fc:de:bb:10:98:23:b1:
                    63:50:e8:59:f8:ae:0d:42:8e:00:41:a8:75:f3:b5:
                    3b:2e:dd:38:13:68:e7:40:dc:e6:99:a8:54:84:cf:
                    cd:c2:f8:30:1a:f2:bc:f8:06:89:c7:45:96:48:6f:
                    7e:ac:13:67:ed:b7:7a:07:3b:8c:30:91:e1:cf:7b:
                    2e:59:41:75:7c:5f:a2:70:b3:08:2e:3b:44:c8:48:
                    a4:6c:de:5d:24:20:eb:e0:97:de:a8:a3:c9:28:11:
                    67:d0:e2:97:f1:76:17:79:be:53:63:33:56:fb:16:
                    03:5a:93:76:ab:4b:3b:66:c4:53:13:c1:50:ec:b9:
                    5a:a7:49:5a:62:46:81:2e:3d:ed:f7:c8:61:7d:10:
                    fd:58:b9:03:aa:bd:05:91:92:60:22:ff:e9:2f:91:
                    59:13:66:10:6c:0c:a1:8b:8f:6e:8e:e0:3d:93:0b:
                    60:fc:c8:fa:06:09:b3:d5:ce:92:97:49:82:81:af:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:92:46:31:9B:74:90:25:2A:36:BD:18:62:5A:22:11:81:3C:EC:F9
            X509v3 Authority Key Identifier:
                keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:79:76:f2:90:ff:31:d4:24:8a:d6:d3:be:96:24:6c:5e:d4:
         72:47:6d:ca:61:58:e4:75:7c:42:af:63:1c:89:80:0a:61:c1:
         4c:47:07:35:84:8b:70:c9:75:ba:0c:6e:3e:79:96:44:1a:e7:
         b3:0c:1c:11:2a:58:b9:29:16:50:e3:3d:09:e5:20:58:eb:e6:
         cf:e8:c6:4e:7c:3e:2e:e9:1c:e7:9d:c4:27:4a:18:72:82:62:
         ab:9a:a6:ac:93:53:77:38:e9:4e:77:93:29:49:0b:27:ee:21:
         0c:79:5a:ca:a3:e2:08:b6:4f:c2:46:34:ba:7c:4d:2c:c8:ac:
         c9:27:1d:bd:98:ea:01:e4:36:73:60:7e:0c:8d:77:fc:0f:78:
         84:28:ad:0d:e0:d6:9e:17:58:96:10:57:41:5b:3b:1e:81:fa:
         19:59:fd:6f:93:8e:5c:22:11:54:e9:6e:ba:40:4f:7c:73:f9:
         e9:b5:dd:09:24:7a:fd:51:4b:63:f8:d5:c1:9c:a2:2b:da:b0:
         53:20:9a:87:eb:2f:d5:c2:d3:ed:6d:4e:0f:95:f7:7b:cd:82:
         2b:de:b3:93:e5:a9:86:cf:10:c5:e5:51:67:49:55:88:1c:f9:
         b5:f7:06:b7:ba:b0:90:46:4c:1b:6b:82:7b:a9:54:84:57:f3:
         5c:37:91:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIZPlUWOI2JiipP3Z5sSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjEwODJjODBhYmFmOTVmYWQ3ZWE2MGYzYzVlYzBlMDVl
MjhlZGMwHhcNMjYwMzAxMTYwMDUzWhcNMjYwMzAyMTYwMDUzWjAzMTEwLwYDVQQD
EygyYjkyNDYzMTliNzQ5MDI1MmEzNmJkMTg2MjVhMjIxMTgxM2NlY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ZjYz1pxWOum3O/rWRDwEnsX4t+
JLy2r59pzXvvxJ+72xeri3ji7f6php9ObscBthMpyjGtg7QHi3xDI92nNS8X+vze
uxCYI7FjUOhZ+K4NQo4AQah187U7Lt04E2jnQNzmmahUhM/NwvgwGvK8+AaJx0WW
SG9+rBNn7bd6BzuMMJHhz3suWUF1fF+icLMILjtEyEikbN5dJCDr4JfeqKPJKBFn
0OKX8XYXeb5TYzNW+xYDWpN2q0s7ZsRTE8FQ7Llap0laYkaBLj3t98hhfRD9WLkD
qr0FkZJgIv/pL5FZE2YQbAyhi49ujuA9kwtg/Mj6Bgmz1c6Sl0mCga9S2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuSRjGbdJAlKja9GGJaIhGBPOz5MB8GA1UdIwQY
MBaAFKchCCyAq6+V+tfqYPPF7A4F4o7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83NDc4ZGMtYzk2ZC00YmU1LTgwODYt
MjUzYjhiNDFhNzVjLzEvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83NDc4ZGMtYzk2ZC00YmU1LTgwODYtMjUzYjhiNDFhNzVj
LzEvcHlFSUxJQ3JyNVg2MS1wZzg4WHNEZ1hpanR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHl28pD/
MdQkitbTvpYkbF7UckdtymFY5HV8Qq9jHImACmHBTEcHNYSLcMl1ugxuPnmWRBrn
swwcESpYuSkWUOM9CeUgWOvmz+jGTnw+Lukc553EJ0oYcoJiq5qmrJNTdzjpTneT
KUkLJ+4hDHlayqPiCLZPwkY0unxNLMisyScdvZjqAeQ2c2B+DI13/A94hCitDeDW
nhdYlhBXQVs7HoH6GVn9b5OOXCIRVOluukBPfHP56bXdCSR6/VFLY/jVwZyiK9qw
UyCah+sv1cLT7W1OD5X3e82CK96zk+Wphs8QxeVRZ0lViBz5tfcGt7qwkEZMG2uC
e6lUhFfzXDeR5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:45 2026 by rpki-client