Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          uoHhyjhe1xEQcfDyAErd6uiLvBY4zhS1QYECZheecs4=
Subject key identifier:   5B:E9:77:9C:C8:50:31:EB:5F:27:A5:B8:EC:27:AB:30:F3:24:43:0D
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       019CAAC648C678BDA2A8ADA8C4ED91A8B5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 19:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:47 +0000
Files and hashes:         1: VzaJRpkfGV8ksiy395nPBGdmpqo.roa (hash: B/HImlbnA+P1Pd7oVL6uWttamYm0OW3WVOv4Cpsd9x4=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: ZCmUDHHV69MSZ2XN5o68OktLrg3vjiP7BnLnVw+R53c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:48:c6:78:bd:a2:a8:ad:a8:c4:ed:91:a8:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Mar  1 19:00:47 2026 GMT
            Not After : Mar  2 19:00:47 2026 GMT
        Subject: CN=5be9779cc85031eb5f27a5b8ec27ab30f324430d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:a5:2e:46:76:2f:40:20:aa:79:ec:8d:28:
                    10:17:dc:83:07:1c:b8:bf:9e:23:49:30:53:d9:2f:
                    a3:04:a1:9b:c8:27:40:d3:85:37:3a:13:69:39:68:
                    40:91:7a:7a:c8:63:d4:dd:52:9d:7c:c5:c6:29:03:
                    32:01:2f:3e:04:05:95:f3:3a:0f:14:1f:02:b0:ef:
                    d8:9c:04:15:60:3e:0b:40:8e:8c:36:01:66:f9:f4:
                    a2:2e:45:b9:c9:dd:00:94:95:ec:13:a9:54:da:c0:
                    f7:d6:0a:9c:44:6c:a9:bd:d8:b6:54:e1:a0:e6:fb:
                    6d:79:c3:a9:dd:50:ab:db:9f:9e:96:98:c6:d2:ec:
                    8a:fe:a6:8a:80:f3:0d:07:40:ce:38:9e:a5:c4:2f:
                    89:90:bc:fc:fb:7d:94:f3:44:f4:53:f8:8a:ca:3d:
                    11:d7:aa:ad:12:75:68:81:26:38:29:d9:36:66:bb:
                    1a:72:c8:6f:9b:29:05:5d:dc:c8:98:09:e3:41:4e:
                    24:0d:69:1b:d2:4d:bb:54:a8:90:9a:72:7c:f5:a7:
                    1c:aa:ee:bb:da:46:97:98:3a:f1:3e:92:ca:a3:ec:
                    c2:5c:b2:03:37:6f:b5:49:46:a1:17:34:0c:8f:27:
                    ee:3f:fa:d3:1e:00:0a:d4:ca:6f:34:e8:4d:2d:46:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:77:9C:C8:50:31:EB:5F:27:A5:B8:EC:27:AB:30:F3:24:43:0D
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:ab:fc:de:be:5a:1e:a0:34:e1:55:9b:72:66:8b:2c:11:
         c4:52:66:49:23:bd:da:9a:79:a2:72:76:16:cc:bf:3c:06:92:
         bc:7c:d9:7a:e1:19:cb:3b:3c:1c:d3:ad:f0:73:42:b2:d1:16:
         5a:56:7b:23:d3:ac:6c:43:2c:79:f0:3b:b3:24:85:5a:df:ea:
         bc:4f:6b:d8:aa:c0:28:cd:1e:58:bb:95:18:f3:c8:bc:2d:ab:
         11:79:b1:3f:f0:1d:cc:53:e3:b6:0b:d8:6b:7f:f1:e0:39:28:
         3c:85:2c:cf:c2:a1:24:28:e3:f4:9d:cf:84:9f:1e:8b:3c:4d:
         61:bc:b7:99:b9:c6:4a:98:73:dc:61:f6:1d:28:45:13:a8:4d:
         83:a8:d6:2c:b7:11:46:04:00:0f:71:6b:fc:0b:3e:e9:99:ad:
         64:d0:33:58:e3:95:89:ae:99:e1:85:72:8c:9e:16:a6:7a:99:
         ca:54:db:a6:b5:da:26:68:c2:22:5b:aa:41:ad:b8:6f:49:ce:
         06:5a:0a:31:83:10:6a:c3:d7:23:ee:ab:89:a9:92:60:9a:62:
         56:db:fb:77:ea:bc:a4:4e:47:b2:88:fe:96:c7:b2:3a:95:36:
         9d:24:47:30:e8:da:fb:05:11:49:b3:58:be:b8:08:82:92:11:
         a8:6e:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:18 2026 by rpki-client