Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          JjWZUuRzsnAcMFT/SOJvVk8VWHInHcHDdcRWacVZ71Q=
Subject key identifier:   1F:47:4A:DC:66:E2:F0:C2:E9:30:C8:FA:88:05:0C:7E:F5:C2:CF:85
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       019CABD8F391D85B872BA0E3F8D4F502403D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          0C54
Signing time:             Mon 02 Mar 2026 00:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:47 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: zaACGsmlKijShNg/avPxJZgmSkrwrufMPe9wVbdkXGc=)
                          2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:f3:91:d8:5b:87:2b:a0:e3:f8:d4:f5:02:40:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Mar  2 00:00:47 2026 GMT
            Not After : Mar  3 00:00:47 2026 GMT
        Subject: CN=1f474adc66e2f0c2e930c8fa88050c7ef5c2cf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:8b:cd:aa:f2:95:b6:f2:8b:c1:29:71:b5:
                    5c:49:be:6d:dc:e8:f2:a1:e4:d1:13:ac:49:f1:0c:
                    3c:53:94:94:e2:6a:0e:4e:00:9f:30:13:de:0a:68:
                    37:9c:23:98:6d:95:9a:a2:bc:b0:a5:73:0f:aa:eb:
                    5b:13:30:59:5d:4b:4e:d4:d0:76:08:6d:ed:78:a4:
                    e7:80:0d:7a:ce:ec:ae:b4:09:50:fc:3d:20:38:0f:
                    06:35:37:90:c9:1b:df:08:45:80:4d:97:5a:5f:39:
                    b4:86:68:a9:4b:40:40:95:8b:65:e0:91:d5:d2:e6:
                    ea:36:7a:8a:39:53:7e:7a:70:45:09:6a:11:1e:9e:
                    77:d8:d8:94:dd:79:b8:e8:3f:ac:c1:a6:0f:4f:73:
                    a8:4e:6e:52:50:11:cd:59:ad:37:9a:ce:73:9c:2f:
                    ed:05:78:74:5a:c2:94:1e:e6:29:76:48:3a:ad:95:
                    fb:5a:f5:87:63:c9:a0:82:97:01:fd:a1:15:9c:7a:
                    29:f9:8d:1e:ce:c6:c7:cb:bc:2f:76:f4:96:c7:22:
                    70:db:4d:62:5d:78:6f:97:c9:79:7d:08:46:d2:ff:
                    58:6a:71:a9:ca:74:1b:c2:85:4c:0f:dc:1e:ef:d5:
                    4e:f5:96:8d:1f:ee:71:d6:0f:89:c5:9e:7f:04:17:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:4A:DC:66:E2:F0:C2:E9:30:C8:FA:88:05:0C:7E:F5:C2:CF:85
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:3a:73:f1:55:0e:e6:84:4e:67:d4:a3:ca:ea:af:31:29:
         d1:47:f2:35:60:50:63:53:7a:62:20:f8:df:e7:2d:c7:a0:e8:
         19:4d:19:d3:54:a4:44:51:29:86:01:1a:a7:4c:0b:84:df:0c:
         9c:d3:2c:09:26:17:14:7d:65:bf:07:94:e8:c9:e5:7d:0e:91:
         33:77:fc:00:dd:ba:fa:fa:1b:fd:45:65:a6:9f:11:d9:be:9c:
         78:fb:69:0a:5b:12:bc:d2:09:ab:c4:29:9a:b8:be:e5:60:f1:
         00:4a:2d:ab:cf:cb:7a:19:84:9a:b8:0d:88:e9:6a:d4:44:0a:
         e8:d3:b0:09:00:b0:3f:e3:e1:2e:90:96:4b:21:bb:5c:30:2c:
         36:57:50:2d:84:cc:f8:86:5b:c9:bd:97:a3:a8:c0:2e:1a:26:
         29:42:b3:4b:0f:80:b2:f5:71:ed:41:9a:63:2c:ae:27:26:d5:
         b9:4c:c2:f2:cf:5b:d7:83:e3:9c:c5:be:d6:53:a5:1a:da:e6:
         22:7c:99:20:dd:b6:b5:36:7f:6d:32:a0:76:08:f7:f9:a1:bb:
         43:c7:b6:f8:ee:63:3d:5c:2f:92:4d:e6:fc:11:da:14:ef:cd:
         fb:a8:93:c1:b2:a3:bb:4d:8c:52:52:a1:c0:f7:9f:19:df:d4:
         19:f1:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:15 2026 by rpki-client