Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File:                     EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier:          cMS4JMszFGWD8yxlnPzkPhHYuEN8VRrsAM85vVAtzMk=
Subject key identifier:   73:DB:62:59:CA:E6:B1:77:1B:01:68:6E:DE:4C:71:24:42:E5:EA:28
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer:       /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial:       019CAB6BC4870EEA73D3873329BAC5290AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number:          0EED
Signing time:             Sun 01 Mar 2026 22:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:32 +0000
Files and hashes:         1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: 6lLTjtliw7EBffNQpwok/0SeCJEgqRohZQoGTr6srrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:c4:87:0e:ea:73:d3:87:33:29:ba:c5:29:0a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
        Validity
            Not Before: Mar  1 22:01:32 2026 GMT
            Not After : Mar  2 22:01:32 2026 GMT
        Subject: CN=73db6259cae6b1771b01686ede4c712442e5ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:5d:a6:fb:e3:4e:0f:58:67:49:9b:69:3b:
                    60:c5:2d:3b:5f:24:bf:01:24:d4:f4:f7:ff:b4:a8:
                    c7:16:48:b3:7f:53:4c:8b:1e:7b:a6:89:0c:e8:21:
                    b7:8d:e5:5a:36:1d:36:b8:0b:66:08:a0:14:62:77:
                    70:c1:a3:82:ec:05:f9:e1:b3:2b:0c:16:f7:28:8a:
                    30:a6:b3:c2:9f:c6:d0:c9:e9:07:4a:1e:dc:24:a6:
                    fa:f7:8b:04:84:c0:65:7e:13:19:08:6c:40:a6:c9:
                    e3:60:fe:50:41:3f:e3:69:66:a3:be:97:d8:47:40:
                    22:08:64:d0:a7:53:94:0c:e6:17:69:f8:16:4a:0e:
                    40:41:7d:a9:fc:f1:83:27:c5:3d:76:ff:1c:62:0c:
                    c0:a4:4f:c9:14:e3:33:a3:36:3a:a6:41:49:67:c6:
                    5e:e1:3d:9c:d1:38:51:98:c4:33:ce:ba:b8:71:57:
                    fe:db:7e:1a:fb:29:80:a4:e6:e0:03:b0:ce:77:07:
                    53:68:80:a9:a2:cd:ab:a0:f7:93:21:34:7b:3a:da:
                    68:73:1d:c2:35:9a:7f:82:cc:42:f9:92:ba:70:04:
                    a2:2a:5c:47:48:26:54:b4:49:0a:51:11:e8:6e:62:
                    46:87:66:7e:97:ea:47:03:16:b9:42:80:7c:ed:f5:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:62:59:CA:E6:B1:77:1B:01:68:6E:DE:4C:71:24:42:E5:EA:28
            X509v3 Authority Key Identifier:
                keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:62:2c:0a:14:41:a7:7b:bb:37:fd:b5:93:b1:41:67:e2:d6:
         a3:b6:35:11:e1:3b:4c:21:80:b9:0d:b0:35:c0:fe:78:58:b8:
         23:17:73:9c:1d:35:68:de:58:ff:2a:4b:97:78:91:65:c3:7a:
         58:01:82:b8:9e:93:7f:fd:b7:61:7d:f7:39:87:70:91:a9:7b:
         01:15:48:98:e2:c3:0d:c4:1b:70:ac:35:64:42:de:3e:01:0a:
         5f:7a:80:5d:ab:67:8b:15:45:0a:e9:5d:a1:b1:4f:cd:de:a9:
         60:20:49:9c:b5:3e:a4:6e:f7:cd:5d:4d:58:2e:b4:3f:c8:23:
         ed:29:1f:cd:d6:c4:e6:92:3d:11:ff:e6:d4:6e:94:bc:24:35:
         92:e9:03:d6:e1:0c:1f:51:6b:f3:77:01:93:69:3b:06:8f:95:
         03:78:28:01:55:0a:18:b6:93:0f:9b:ef:7d:2a:f9:1c:59:97:
         35:82:3d:e5:e0:8e:3a:0e:93:60:c5:10:a1:79:94:b9:fa:73:
         64:4c:b8:d8:2d:51:94:cf:db:0b:0e:2e:87:b8:e3:58:f0:68:
         a4:48:6d:1e:26:d8:22:09:d1:c4:26:77:9b:a0:21:95:fc:eb:
         2f:9a:a7:65:31:d0:fd:4a:f7:ed:72:09:84:ba:59:f1:5e:0e:
         6b:d7:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:58 2026 by rpki-client