Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          X0FQ9+4YXt5Mk6g9+Ajx6dvGJwKEDUt98SeSUG2yPG0=
Subject key identifier:   18:36:F1:13:0C:6F:8D:5C:3C:B4:A3:EE:BC:29:DD:02:D7:E8:0E:CB
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       019CAAC706490F412535D46662DE62FD1180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          06ED
Signing time:             Sun 01 Mar 2026 19:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:35 +0000
Files and hashes:         1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: wBlx4cf93q2GSNxASk9qghdByibhcrDOJ/b6VM1ffHI=)
                          2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
                          3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:06:49:0f:41:25:35:d4:66:62:de:62:fd:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Mar  1 19:01:35 2026 GMT
            Not After : Mar  2 19:01:35 2026 GMT
        Subject: CN=1836f1130c6f8d5c3cb4a3eebc29dd02d7e80ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:1d:ea:2d:d7:87:fc:83:15:08:0e:d3:84:
                    ee:78:54:e2:4a:18:21:35:90:1c:05:ad:13:ff:d7:
                    28:b0:9c:bd:82:06:bc:9a:fd:fd:cc:67:df:03:8f:
                    8a:7f:8a:19:4f:cd:57:e8:cc:1a:c6:f8:62:a8:3a:
                    0c:9d:5e:b3:1f:9e:65:c6:ed:31:c0:96:98:65:d1:
                    ba:a0:5e:75:d6:0e:db:9c:95:85:d2:89:29:48:1d:
                    5c:a2:c6:86:c0:ee:1d:b4:f2:70:fb:fc:8a:bf:9b:
                    64:c5:b7:68:4c:b8:75:8c:f5:5c:05:ee:88:de:c0:
                    e2:3b:75:4f:02:0e:3b:2f:9a:04:af:e5:69:cb:44:
                    a9:40:8a:d7:1e:97:d3:f0:71:b1:2f:5c:e3:36:7d:
                    50:6a:50:d4:2d:ae:6a:00:69:6f:7c:ad:34:9a:19:
                    e5:bf:d3:33:fc:b2:74:8a:88:74:44:88:8d:c2:4d:
                    f7:c7:00:2c:6e:9d:de:f8:ef:1e:2e:18:fc:eb:8f:
                    03:56:3f:a4:9c:aa:79:6b:b6:16:54:e5:81:6d:ef:
                    38:d6:4a:72:83:7f:99:11:12:50:2a:38:4f:c7:5c:
                    29:ba:90:ae:d9:4c:c1:fb:ee:77:80:98:45:f6:c6:
                    7b:91:a5:ab:18:94:e7:d6:bf:57:ac:ac:46:6d:15:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:F1:13:0C:6F:8D:5C:3C:B4:A3:EE:BC:29:DD:02:D7:E8:0E:CB
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:f4:4a:45:27:9d:a5:b9:38:7a:ba:50:9e:b4:d4:63:13:
         9f:6c:4f:c2:63:65:a6:87:31:5a:80:d8:27:90:b9:0d:55:c4:
         29:16:27:87:30:b2:66:03:6e:de:e9:50:56:8d:52:11:37:c9:
         6e:ec:e5:ab:ab:4b:ca:1c:f5:f0:c1:93:da:02:b8:fb:48:64:
         0f:a2:ed:54:4d:4c:fe:4f:a7:0b:70:32:24:c3:7e:3a:c4:90:
         9f:ce:d4:a5:0d:a8:03:b8:c2:ab:d1:12:b4:90:50:05:a0:d7:
         8e:2d:77:fb:d1:e9:d5:d8:00:7c:d8:17:c1:ee:99:db:c9:b5:
         83:17:2f:d0:b7:4a:f8:22:bc:2d:35:fd:f6:84:26:4e:5f:a3:
         60:6d:79:6e:53:0e:84:91:95:10:40:7f:3e:51:1b:05:a9:40:
         54:c1:90:b8:95:fc:4a:55:a8:59:c7:4b:33:0d:d1:b7:c4:62:
         2c:15:2d:73:59:01:8e:4e:7f:a4:e2:53:06:3a:09:26:2d:57:
         8a:ac:67:1f:10:bf:8c:ae:f3:5c:37:41:3c:14:a7:17:01:16:
         43:df:8d:90:94:fa:d9:35:fe:4b:04:4f:93:1d:7b:83:64:7b:
         1a:74:8e:4d:3a:18:5d:5d:a7:af:92:2b:3e:4c:53:6e:45:b0:
         23:2d:82:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:16 2026 by rpki-client