Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          jRuUIy+VMpuaJhYf6fUKt+1anAu9YGEqNKckKe/fJI0=
Subject key identifier:   C0:90:4E:FE:DE:03:88:1C:F3:59:C0:DA:10:42:4D:21:4C:D4:EB:6E
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       019CAC7DB518E41F0297C5D02102E79576F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          1055
Signing time:             Mon 02 Mar 2026 03:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:45 +0000
Files and hashes:         1: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (hash: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: NKc5ctDhjR3In+zDgFfdkwf1zXF6IS3DWSMHtgZDmLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:b5:18:e4:1f:02:97:c5:d0:21:02:e7:95:76:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Mar  2 03:00:45 2026 GMT
            Not After : Mar  3 03:00:45 2026 GMT
        Subject: CN=c0904efede03881cf359c0da10424d214cd4eb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:83:9b:11:84:d4:28:f8:99:71:8b:08:f9:
                    23:70:7c:63:f0:e6:73:a4:ff:cc:ac:51:bd:4d:4f:
                    1f:49:2a:cd:ad:46:8a:bd:bc:b5:7b:3c:8c:bf:b4:
                    ca:69:f7:39:13:f4:68:72:72:cf:a1:ba:a3:6a:05:
                    07:e1:12:2f:78:55:d9:0d:ba:ce:d1:d7:c5:94:97:
                    8d:53:e3:11:e3:e4:6c:9b:73:0e:d9:6e:8c:d9:25:
                    cf:10:c2:b6:e4:4e:3e:a5:c8:47:64:ee:05:23:24:
                    c9:26:f9:ba:7e:7d:39:92:58:bb:80:bd:de:c8:f9:
                    bb:a5:59:06:4d:c7:cc:f3:60:97:ef:7b:7e:04:1a:
                    6b:46:09:2b:91:c6:ee:e6:fc:96:47:cc:a1:99:cc:
                    e9:dc:cb:d3:4b:c0:97:99:9f:0d:7b:5b:8c:51:a1:
                    c2:7e:30:16:9f:84:cd:d7:fe:fe:b5:a6:56:a9:d2:
                    7f:6e:ae:84:48:15:c5:eb:c4:44:42:1f:e7:7a:ee:
                    6c:87:a1:63:3e:37:c3:90:1d:e6:84:73:8a:70:88:
                    1f:6d:2c:b2:00:c6:bd:cf:ae:6a:b8:bb:ec:10:bb:
                    cd:45:8b:fa:99:c5:2b:b1:f9:f7:0e:7b:4c:6b:dd:
                    c2:c0:0c:b6:18:90:ca:72:b5:7d:17:f7:50:66:86:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:90:4E:FE:DE:03:88:1C:F3:59:C0:DA:10:42:4D:21:4C:D4:EB:6E
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:38:90:79:70:ef:a5:c0:14:8e:95:1a:66:d7:be:ab:c7:
         f4:0a:99:8e:ad:87:e9:c5:3f:10:b1:2b:19:34:0c:c9:44:76:
         82:72:6a:25:7e:21:32:9c:c4:51:86:54:ff:c2:45:8f:5e:b8:
         6b:ad:da:d1:a9:70:ce:72:4d:18:ff:85:65:e3:79:04:7b:8d:
         ad:5b:77:87:d9:0c:b7:97:bd:9e:6e:24:d2:aa:55:fe:cf:87:
         50:1d:e1:cc:00:e8:3b:4e:f8:c8:1e:98:57:71:9d:5f:17:16:
         40:7a:7a:12:56:bd:b6:bb:9f:17:1d:6e:d9:e8:9c:89:6c:32:
         4f:ea:52:be:3b:fd:fe:f2:38:ac:14:12:ea:e2:d7:43:0a:c5:
         13:d4:0c:86:a4:60:9c:35:d2:ea:2e:bf:fd:d3:64:b3:d1:da:
         81:c4:22:2b:01:88:43:da:17:bb:56:e2:f9:c5:16:19:14:57:
         cf:15:04:cc:aa:43:f0:ae:ef:83:1f:82:75:e3:4d:ad:e1:c7:
         64:cb:59:57:d3:dd:a3:a8:d9:a5:05:c7:5b:6f:ff:48:52:6c:
         71:7e:33:99:d0:c4:ce:6a:03:5f:3c:ec:86:d4:a4:4d:dd:e4:
         4e:64:d8:ce:18:f7:0e:84:ec:8f:d3:f5:f2:ba:e2:e0:e7:34:
         55:b6:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:43 2026 by rpki-client