Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          /jkfD6PkNpV70umd0T4mbv424uY1z2MybU1TzvK9lbY=
Subject key identifier:   7D:5E:24:C3:C3:AE:9E:8B:B0:E2:0F:48:B4:84:F4:20:C3:98:B1:A6
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019D9A751DB265949927D1BA050AEADE7B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          0FA4
Signing time:             Fri 17 Apr 2026 08:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:59 +0000
Files and hashes:         1: 9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa (hash: LvAW/dorcWJs7ZFyV1eDoNVGXIMQa9jTmGb0oFcyF74=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: isP+xmERUWbiYdnYJh9IME+TXHnDoTduEwVW8rRSQJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:1d:b2:65:94:99:27:d1:ba:05:0a:ea:de:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Apr 17 08:00:59 2026 GMT
            Not After : Apr 18 08:00:59 2026 GMT
        Subject: CN=7d5e24c3c3ae9e8bb0e20f48b484f420c398b1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0b:e5:fb:03:52:6b:d0:7c:48:90:2b:f0:b1:
                    f3:20:03:10:84:e7:86:2a:b3:b4:92:f2:0d:e0:6b:
                    c0:60:c2:4f:5d:7d:84:10:bb:37:8c:21:4b:1a:82:
                    d1:f5:41:00:e2:7e:44:ce:3c:78:80:19:bb:40:1c:
                    4d:a9:5a:43:92:d6:0c:af:22:b3:0f:ad:55:ae:bd:
                    75:03:41:a9:b8:c6:bb:97:f1:b4:14:25:4c:07:92:
                    3f:9e:24:4e:a9:ae:fc:e6:36:a9:a9:c0:6f:b0:bf:
                    71:6b:e0:53:e1:35:4c:0f:d6:9b:46:a7:fe:07:0e:
                    4c:3c:ef:9e:1f:b4:f4:46:20:54:20:da:00:fc:e7:
                    a3:b7:ca:99:73:1d:7b:6d:21:85:ca:63:0b:6c:13:
                    30:58:7a:f2:71:b4:14:1e:fc:24:0a:e5:ca:73:02:
                    60:26:0b:28:15:68:f9:bf:b2:ac:ba:ad:5d:fb:b7:
                    9c:68:52:6d:48:55:d4:29:0b:ac:2b:76:a4:63:43:
                    74:c5:db:4f:11:71:65:7e:1b:ca:ca:ff:dc:46:56:
                    d1:c1:b4:b9:6d:e8:6f:5a:33:72:89:d9:bc:59:9f:
                    f6:e3:e8:be:bd:67:21:29:16:48:67:8d:97:6c:97:
                    6d:f0:09:b5:d1:13:4b:6e:d7:15:be:1d:94:29:62:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5E:24:C3:C3:AE:9E:8B:B0:E2:0F:48:B4:84:F4:20:C3:98:B1:A6
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:48:df:e9:9b:87:fc:9e:bc:0b:c7:ad:c9:cd:1f:7e:00:c6:
         68:95:b0:bb:22:f5:02:d7:ec:a2:84:31:0e:21:bf:1a:97:60:
         05:22:fb:a4:63:18:83:37:e0:41:3b:69:ee:81:1c:9c:55:73:
         70:a4:1b:dc:7b:0b:2a:d8:14:6c:21:7c:29:d7:bf:94:df:82:
         b2:54:62:46:d4:c6:45:27:b5:bf:be:fa:ac:96:40:22:32:16:
         0c:a1:d2:60:d7:21:f8:a6:d9:5d:2f:fa:ff:56:f5:8f:4f:f4:
         58:a5:1c:82:29:1c:06:02:0a:4b:8f:b9:de:54:ee:b3:25:26:
         04:95:c7:07:c7:73:f1:61:e2:0e:50:7a:58:c3:e6:c1:b8:e4:
         66:e3:c2:cb:d8:af:8d:70:cf:f2:f3:a1:39:f1:c6:e0:a6:9f:
         ee:95:a1:c7:30:19:30:c9:68:ed:65:30:79:18:a7:4e:18:d6:
         d7:55:5e:bd:2a:28:13:d9:b6:5d:db:f2:5a:ea:e5:59:83:4b:
         d9:7f:32:a7:b3:3e:e3:7a:35:46:5e:77:ee:ba:ca:d9:c1:0c:
         36:7c:50:44:04:86:26:c4:ab:63:52:86:49:04:56:ca:f4:ca:
         a8:82:cb:00:51:a0:04:bf:f3:b6:f7:42:62:59:85:a2:61:62:
         f0:f1:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:02 2026 by rpki-client