Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          iqiYgHUyc3Xgf3fzY/+Py53z5f2W5GbbJnY4BG3bDZs=
Subject key identifier:   EF:EF:8C:EA:02:A4:12:E2:44:AA:DC:5C:85:83:FA:09:9F:10:71:E5
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       019D98503227C670642B01943E6EC86F02D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          18BF
Signing time:             Thu 16 Apr 2026 22:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:25 +0000
Files and hashes:         1: FnCe4GQUHfME91aEBmjNKoeoN3E.roa (hash: 2f0BNR92jRHqrOKp3b4PoOH7gnturQoCE8376hKSgYc=)
                          2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: znCP3z1CF80Xn/EYJntFxy81oKEcIQhJf9S1TCVEHEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:32:27:c6:70:64:2b:01:94:3e:6e:c8:6f:02:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: Apr 16 22:01:25 2026 GMT
            Not After : Apr 17 22:01:25 2026 GMT
        Subject: CN=efef8cea02a412e244aadc5c8583fa099f1071e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:9a:ff:7f:2d:cb:97:ec:77:d5:bd:a9:84:
                    3d:e3:b8:e8:07:f0:ec:c1:f6:5b:1e:ba:6b:fb:3d:
                    7d:88:35:c2:e9:a1:c8:da:8e:78:7d:a7:08:16:b2:
                    4c:d3:53:b9:44:4a:78:c3:53:dd:a6:08:a5:7c:20:
                    8b:a4:cc:d8:e1:2c:3e:70:65:71:65:c1:3e:c9:aa:
                    e7:d9:d0:05:60:5b:24:bc:ad:c8:24:b4:60:33:43:
                    41:2d:79:23:f2:e9:77:96:d8:ad:1f:90:5b:ab:ba:
                    08:c0:c9:e4:2b:00:04:2f:cb:11:0a:5c:38:76:d0:
                    b8:c8:88:1c:6d:fd:ef:1f:c3:99:60:0b:00:af:2f:
                    ea:85:5e:f9:66:a1:9e:74:5a:64:ed:93:ba:c3:83:
                    f9:81:9f:06:99:40:ec:63:56:7b:ca:3e:35:f2:0e:
                    a1:3b:44:eb:3d:02:b8:81:17:30:20:d4:96:ce:bd:
                    17:2b:55:a8:86:1a:36:71:23:bd:3e:98:b5:b7:59:
                    41:cd:a0:49:15:2a:cd:2b:2b:65:d3:d3:cc:1a:07:
                    f0:a3:23:9f:81:1a:f4:8a:63:28:bf:28:04:7b:30:
                    9d:f1:50:9a:c6:b5:93:bc:19:f6:94:ad:39:16:cc:
                    7b:0f:b6:16:91:02:6c:03:1a:29:49:3c:48:bb:a6:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:8C:EA:02:A4:12:E2:44:AA:DC:5C:85:83:FA:09:9F:10:71:E5
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:15:7b:9c:b7:eb:89:d3:b2:14:24:59:e9:ed:9e:02:dd:02:
         54:ec:4f:67:73:33:56:28:91:4d:16:0c:ba:1e:20:c2:f2:6b:
         09:78:43:16:57:a0:51:4e:a2:fd:f3:1d:94:67:45:8c:57:90:
         61:7a:70:26:3e:f5:b2:5f:84:dd:6c:75:94:ad:29:67:e2:0f:
         e2:04:eb:d7:c7:c8:d0:35:6d:45:9d:97:93:f9:57:18:4b:20:
         e8:8e:69:bc:00:9a:b8:35:b3:eb:f9:4f:be:cf:c6:ec:27:11:
         89:5d:60:13:c5:3d:6e:e1:b9:78:44:19:13:5d:b3:db:7d:1c:
         a5:d6:14:b5:d4:6e:fd:68:bf:ed:64:95:1c:c7:c6:67:73:ac:
         ee:47:af:64:c5:4f:09:17:36:2a:0b:94:c0:13:a9:da:a1:41:
         71:41:bd:0d:16:ea:18:61:94:48:ec:34:27:8a:e5:27:d4:8b:
         10:0f:0f:06:89:68:e3:68:4b:00:e7:ec:be:19:b8:88:e6:53:
         2e:b9:75:f3:22:5d:1b:a3:03:f3:b6:bd:f5:6b:91:be:ff:74:
         99:55:4d:71:dc:66:f4:95:3a:05:20:2d:d3:dd:b0:9f:14:d2:
         46:f0:22:ae:36:b4:ea:be:cf:18:0b:d4:cb:f7:6f:d9:ac:6e:
         8a:8d:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:17 2026 by rpki-client