Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          94P07YNCJxTFlejZ/yjaiaN5G1zRuwyzA5PFllNi/Ys=
Subject key identifier:   C1:56:7B:AF:5D:1C:23:F4:4D:0F:40:9C:77:47:EC:15:9C:E5:12:6F
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019CAAFD64283F693D5BD2ADBB2D3B3E6394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          087F
Signing time:             Sun 01 Mar 2026 20:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:58 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: GZAOhLJJRJviDmAQ8ewXjBMU4sp223Z3EkJVVRwcKNM=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:64:28:3f:69:3d:5b:d2:ad:bb:2d:3b:3e:63:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Mar  1 20:00:58 2026 GMT
            Not After : Mar  2 20:00:58 2026 GMT
        Subject: CN=c1567baf5d1c23f44d0f409c7747ec159ce5126f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:c3:e6:56:7b:7b:a6:33:b2:df:f8:7e:3f:
                    d0:c9:17:98:20:3c:10:02:ec:90:b2:1b:47:58:ff:
                    73:1f:6d:20:c7:d6:31:78:b5:16:0b:d7:0a:15:61:
                    bf:36:fc:95:25:f2:d0:62:78:f3:fb:66:a0:18:72:
                    d0:c2:2a:c4:8a:fb:ad:40:ed:a2:98:e8:2d:22:9c:
                    66:32:14:1a:79:98:4f:71:63:78:54:6b:c4:b2:59:
                    96:86:8a:3e:c3:15:7b:65:0a:5e:e6:30:ef:94:d3:
                    de:b6:45:a7:12:b1:65:02:d8:f8:27:6c:0f:0a:31:
                    4a:08:23:d1:f3:57:3f:b6:b4:34:b0:e0:96:d8:af:
                    9c:6b:2e:04:d5:76:d9:ff:b6:a3:48:f2:8b:e7:56:
                    83:25:6f:8b:96:82:dd:ef:58:f6:0a:e9:0c:3e:b4:
                    fa:a1:b1:c4:53:05:f0:69:08:76:56:0a:c1:cb:57:
                    10:b5:94:4b:d6:a5:5d:9a:55:49:66:44:85:82:80:
                    59:8e:ac:7d:c8:f2:4b:22:a5:09:4d:af:13:8e:89:
                    34:bb:37:56:bd:c8:da:7a:d3:03:37:55:8b:8a:99:
                    bb:b6:b6:59:99:d7:3e:e1:77:71:57:28:4d:49:41:
                    35:02:4a:58:c0:72:fe:4e:02:a7:f1:79:0f:a0:20:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:56:7B:AF:5D:1C:23:F4:4D:0F:40:9C:77:47:EC:15:9C:E5:12:6F
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:ee:9e:e7:07:46:17:cd:f8:58:17:bd:29:3b:cd:43:35:
         54:bf:d4:36:ae:e0:2e:9f:81:28:51:1d:eb:fd:a2:79:de:cf:
         d9:c5:bd:83:c8:e0:62:c4:3c:f0:a4:5c:7a:dd:59:df:ea:d3:
         00:01:bf:07:61:59:dc:1d:aa:d4:72:5e:85:d5:a2:bb:0e:6c:
         91:2d:0b:54:1c:89:39:fd:51:43:10:4d:d6:6f:6d:8e:c2:9b:
         87:8c:77:1c:9e:b8:19:f4:21:72:57:e4:14:ea:f6:08:7d:ba:
         37:99:37:4e:3a:03:81:96:52:56:5f:be:b2:bc:07:d4:f1:34:
         18:7c:9d:31:0f:57:42:90:93:93:40:7b:8e:48:f7:7e:63:eb:
         16:47:75:60:1e:d4:fe:08:3f:4c:f9:35:0e:f5:0b:38:af:ad:
         aa:c2:e2:79:f5:d1:23:cc:02:72:25:32:dc:a4:2a:3c:06:a9:
         7c:57:13:6d:56:21:88:4d:5e:77:88:02:18:d9:8f:ba:60:41:
         77:82:af:aa:71:7a:bf:7d:c9:3d:8d:29:6d:28:5e:04:26:7f:
         5c:8f:b3:cd:f6:3d:fd:52:0a:a4:2a:0c:1e:a1:aa:ab:cb:54:
         90:35:02:f5:2e:68:13:83:c3:0a:bb:97:ab:29:a0:34:10:c2:
         60:70:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:38 2026 by rpki-client