Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
File:                     eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft (raw, json)
Hash identifier:          g6/tVCjC8jWVfv7TBf+klkW82DwDu+/po6fVaw4BqiM=
Subject key identifier:   A2:05:F4:72:86:FF:CC:78:D8:C1:C2:35:03:07:A0:FA:2B:0C:D1:C5
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Certificate issuer:       /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial:       019CAA2168D37CBA7DFF4674CA774F811A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
Manifest number:          0A34
Signing time:             Sun 01 Mar 2026 16:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:42 +0000
Files and hashes:         1: cP56mDhi1TxfAMozw1551ynxj18.roa (hash: z+zkiQAAIFWOGUwsRIFAJ34UptZlbfJ1T2p0RIzTeo8=)
                          2: eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl (hash: R70KDCB15blkS1Fl0KQAVE5wPZMupMdxKLaEDZFld3E=)
                          3: j0P_cGlQZQy3YF4RlXCRZteA6S8.roa (hash: kT8irSc09jAZGU8OrTBiKMRPHDxtPWszWFRDREVEqCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:68:d3:7c:ba:7d:ff:46:74:ca:77:4f:81:1a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
        Validity
            Not Before: Mar  1 16:00:42 2026 GMT
            Not After : Mar  2 16:00:42 2026 GMT
        Subject: CN=a205f47286ffcc78d8c1c2350307a0fa2b0cd1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:0a:f8:4f:6b:66:93:ec:e2:17:d0:20:07:
                    4b:64:04:f5:a4:a2:40:e5:f9:54:c2:22:49:b4:62:
                    9d:39:19:0b:6c:1c:6c:5d:3a:8d:58:67:73:cb:dc:
                    d5:4f:81:99:4d:bc:66:2a:ab:41:cf:85:73:98:04:
                    1c:5f:fa:67:4c:68:f2:ad:47:00:f6:f7:32:99:4a:
                    ab:87:71:57:f9:1c:35:35:6c:20:f8:df:f7:5e:10:
                    22:fa:12:c0:65:cd:5c:0e:f4:ff:1b:44:2b:a8:4b:
                    7b:e7:12:b1:4a:7b:4c:d5:8a:43:f4:2e:d1:23:c9:
                    64:05:6e:de:8c:a7:4c:59:aa:a5:96:b6:ce:f3:e3:
                    b3:72:c6:90:49:a2:f2:2b:bc:0d:22:a0:98:8c:f5:
                    14:d2:d4:03:27:b6:48:8c:77:e2:45:ae:39:28:3e:
                    6e:e4:fd:3d:b1:b4:f1:1f:37:50:0f:ab:d6:d4:7e:
                    f4:2e:ab:fd:cb:72:30:00:b6:57:85:3a:c3:a7:46:
                    38:34:c4:19:95:44:81:32:7c:0d:0d:3c:9f:b8:2f:
                    a6:97:6c:d1:11:2b:85:d9:2c:e1:3e:ef:31:0c:61:
                    b0:ca:19:96:b1:eb:7f:f6:62:10:2b:02:09:9b:f9:
                    fd:0d:06:d4:e0:89:3c:f8:c3:6d:5e:8d:61:ee:b6:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:F4:72:86:FF:CC:78:D8:C1:C2:35:03:07:A0:FA:2B:0C:D1:C5
            X509v3 Authority Key Identifier:
                keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:54:a3:54:6a:81:f2:c6:e2:1d:eb:6c:53:5a:c9:c1:aa:71:
         66:78:59:2c:29:c4:f9:bb:4e:c2:d1:dd:ae:c7:81:73:46:b1:
         a9:66:6e:01:99:40:62:1a:b2:7e:66:a6:c8:70:a2:a8:ad:51:
         c5:89:31:3e:e9:4c:4a:b2:89:87:07:44:29:8c:5b:06:ee:43:
         03:5e:8b:e2:dd:f6:02:a1:ef:28:b8:04:70:60:91:bc:65:00:
         f5:f0:d2:ac:07:8d:e4:e0:b0:9a:3f:e9:80:47:e0:3c:6a:45:
         d2:91:d9:57:9f:69:a3:bf:a2:eb:ec:92:08:64:4f:ac:8a:39:
         97:6d:97:bd:25:28:6c:70:fe:7d:2c:f2:a4:b8:e8:a9:28:ce:
         35:41:31:b4:b2:34:ab:01:37:3c:08:49:57:04:54:0d:59:ca:
         6c:0a:e1:6a:11:00:31:a6:36:3d:d1:22:f1:b6:4f:8c:b5:10:
         e2:97:93:85:d1:f8:5e:70:46:42:b7:3f:f1:44:6e:4b:63:2a:
         2f:a2:d2:92:20:44:b4:32:fe:0a:d3:29:24:53:28:86:d3:fa:
         14:34:90:1d:bd:c7:1e:86:f3:86:38:cd:b4:c2:48:1a:82:02:
         1b:d7:60:03:17:08:e9:c3:4b:8d:f7:e1:40:de:59:62:df:7b:
         32:18:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:09 2026 by rpki-client