Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
File:                     ews7OUhl5LhbaGo59V7UvmU2pII.mft (raw, json)
Hash identifier:          5U6FwbumRmzyUC9mMH3J6KQCLEV5Yeh+iiBu6J+QgZ0=
Subject key identifier:   2F:BD:9B:CD:41:50:C7:5F:E6:5C:DE:17:24:55:B1:49:08:66:BF:82
Authority key identifier: 7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82
Certificate issuer:       /CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
Certificate serial:       019CB1A40E9C5E1E07AB5D3C4FF85B0EFBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
Manifest number:          092E
Signing time:             Tue 03 Mar 2026 03:00:44 +0000
Manifest this update:     Tue 03 Mar 2026 03:00:44 +0000
Manifest next update:     Wed 04 Mar 2026 03:00:44 +0000
Files and hashes:         1: ews7OUhl5LhbaGo59V7UvmU2pII.crl (hash: ghmOecuamDYZoh6sfLvoVhD7HVES+HLRjrChuHJtVkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:a4:0e:9c:5e:1e:07:ab:5d:3c:4f:f8:5b:0e:fb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0b3b394865e4b85b686a39f55ed4be6536a482
        Validity
            Not Before: Mar  3 03:00:44 2026 GMT
            Not After : Mar  4 03:00:44 2026 GMT
        Subject: CN=2fbd9bcd4150c75fe65cde172455b1490866bf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:ab:36:ca:d1:12:72:71:c7:c7:67:30:9d:
                    ee:8b:87:d7:17:45:ee:18:33:dc:cd:47:19:93:64:
                    d2:67:2a:31:01:0f:28:52:48:c8:27:22:33:da:28:
                    a0:e8:9d:f4:62:2d:57:a9:87:29:3b:b8:50:9e:86:
                    ec:eb:0f:a1:03:f1:a7:f5:2e:4b:0e:30:b5:72:a8:
                    b7:97:10:4c:68:1e:a4:e0:33:4e:cf:2f:de:de:2f:
                    84:a0:f8:e2:de:98:68:32:3f:92:0c:dc:67:4d:6d:
                    39:e1:bf:fb:d5:b1:fb:d5:50:9b:2f:bb:f2:24:16:
                    bb:b3:08:29:65:b8:fd:22:58:b2:10:8b:d5:19:d5:
                    c8:7f:ab:d2:26:63:f3:cb:bb:05:28:76:cf:9e:51:
                    54:b7:19:6a:e2:85:1a:0f:f2:d8:fa:94:45:87:fc:
                    27:80:ff:5f:43:26:a8:70:4b:b7:15:97:ac:85:37:
                    da:25:ef:6f:61:2f:8e:3f:5f:7a:a7:83:49:fc:ab:
                    9b:39:2f:be:92:32:65:dc:12:72:41:6c:70:4e:10:
                    99:aa:de:05:d6:1d:52:85:75:a7:72:0a:5d:0a:98:
                    4c:3b:92:34:da:11:1d:d7:07:f4:1e:dd:7a:bb:47:
                    a8:72:6b:27:a5:3d:68:80:d2:ac:69:3d:f3:34:1f:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:9B:CD:41:50:C7:5F:E6:5C:DE:17:24:55:B1:49:08:66:BF:82
            X509v3 Authority Key Identifier:
                keyid:7B:0B:3B:39:48:65:E4:B8:5B:68:6A:39:F5:5E:D4:BE:65:36:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ews7OUhl5LhbaGo59V7UvmU2pII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/db38ab-c3cf-4622-87f6-2c8d0011e88a/1/ews7OUhl5LhbaGo59V7UvmU2pII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:4c:6a:28:fb:25:8a:95:ad:9b:0d:29:8e:11:56:4c:44:
         c2:a5:1c:a8:c3:91:10:fa:02:aa:60:2a:45:67:58:92:2a:1d:
         a4:48:8a:1f:12:88:04:cc:74:9d:fa:4e:dc:8e:75:49:e6:d4:
         a3:ef:2e:ad:cf:69:bd:d0:c7:b4:af:ec:88:1e:2d:cb:2b:ea:
         f2:35:da:29:3c:dd:51:65:9d:cf:da:98:4f:db:47:3e:d2:6e:
         88:fe:c5:66:99:0e:c4:ff:0a:68:f7:84:93:2a:38:94:24:af:
         06:80:37:50:59:ca:47:c0:93:6c:0a:21:2c:bd:bf:1b:20:d3:
         bd:6f:9c:38:ff:d4:dd:e7:45:d0:be:5c:48:8b:79:03:17:71:
         d1:68:6b:8b:a6:9d:a1:2e:0d:48:bb:49:15:4f:d1:cb:4b:1e:
         a3:85:7a:25:37:06:34:0f:06:e8:e4:85:2f:04:2a:b1:10:f9:
         c5:80:1a:c7:a2:3a:57:7b:ac:ae:6f:52:84:d8:31:72:13:5d:
         ad:a1:ab:ef:f2:7b:31:78:b8:cc:9b:86:49:de:a0:93:3c:6e:
         7b:0a:4f:a1:19:75:aa:7d:58:6e:de:38:80:cb:04:ec:7e:9b:
         c1:8e:11:e9:46:3c:22:0d:68:65:94:47:a1:8a:cf:d1:01:22:
         bc:4e:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:40:52 2026 by rpki-client