Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          qJbQ0j6oDQYR49OdcXuFj89n1iRRJ7qedFTjO9ttORI=
Subject key identifier:   D8:C9:0E:E4:3D:54:F5:D6:7A:84:A2:AC:0F:20:5A:22:92:82:A8:5C
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       019CAAC6A543E36AB516BA16212C0F9590B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          17A4
Signing time:             Sun 01 Mar 2026 19:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:10 +0000
Files and hashes:         1: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: l/yGTjRy5nsZUhPjW+osvRGCcw/ZJ1andJN+LZkjFL8=)
                          2: m7QNAE122Qw_e1vUF3Iyvg8BQS4.roa (hash: RxqoOg9Ver8Jsfn6rkF0Jn88P/Wd6SYCEwBwCZH02WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:a5:43:e3:6a:b5:16:ba:16:21:2c:0f:95:90:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: Mar  1 19:01:10 2026 GMT
            Not After : Mar  2 19:01:10 2026 GMT
        Subject: CN=d8c90ee43d54f5d67a84a2ac0f205a229282a85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:2f:9d:c4:d3:f8:7d:60:a7:93:d3:9e:fd:
                    2a:3c:12:0f:7a:fa:5f:3b:d0:e3:b9:2e:6f:b6:2b:
                    ed:56:33:92:eb:25:d6:83:ce:0d:b2:ec:26:e6:a3:
                    e3:19:32:ce:be:25:6b:07:52:98:0d:de:6f:a0:d2:
                    93:78:34:eb:ca:1a:a3:a4:5f:e9:75:2e:cf:5b:5f:
                    66:ca:14:90:36:99:f3:84:4c:1d:ef:6e:2e:88:d0:
                    81:91:10:f3:5a:0d:91:1a:f5:08:e4:93:bd:44:e5:
                    fb:6f:48:55:56:76:e2:a2:2e:bc:6a:14:60:4a:53:
                    50:10:e1:34:35:e5:ff:07:06:f3:60:58:2e:80:28:
                    99:5f:bd:22:9d:fd:01:98:fc:08:56:03:b5:06:6a:
                    fa:0c:0a:81:11:26:9a:cc:fc:1f:cf:56:c2:40:a4:
                    19:77:fa:fb:4a:c9:69:e2:09:40:d9:59:c0:29:61:
                    23:fc:00:21:63:46:f7:66:b9:b6:e9:80:9b:57:49:
                    ea:05:71:07:ea:ec:6b:59:62:a8:2b:8d:62:3e:20:
                    d8:76:a4:35:7a:5b:f6:83:65:7f:64:c1:a5:45:2a:
                    a6:38:89:99:a1:99:3c:af:5f:2f:4a:51:34:fa:f2:
                    56:de:b0:01:19:03:bd:6c:fa:22:d0:03:25:b3:68:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C9:0E:E4:3D:54:F5:D6:7A:84:A2:AC:0F:20:5A:22:92:82:A8:5C
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:e4:a6:c6:48:5a:41:2d:64:06:37:eb:89:bb:68:30:a6:
         d9:d4:9c:e7:be:69:47:b4:22:b4:b4:66:d0:ad:b4:dc:95:b9:
         5a:d0:62:c4:15:80:ed:da:bf:25:ba:27:f6:67:0e:b5:c5:48:
         c4:0e:2a:a6:16:62:c9:5b:1a:e1:f8:53:22:0a:4c:08:ba:10:
         f3:65:30:e5:61:0b:35:dd:a0:f7:8d:c4:db:90:52:1d:63:f0:
         3c:ef:99:d6:3b:d9:01:7d:5c:6a:e4:e3:06:fd:d9:1c:b1:b1:
         d9:b6:f3:ca:8a:3a:cb:fa:96:60:02:01:58:84:6e:b7:5f:fa:
         7d:3b:60:4c:75:ac:cd:e1:eb:b7:e2:ef:cd:2b:1d:c2:b9:a7:
         82:38:2d:9e:5a:85:36:85:88:42:76:31:6f:0f:ed:ec:a3:b7:
         f3:ee:b6:54:62:8f:a1:59:15:0e:5c:44:46:2c:9a:3f:e8:0a:
         ac:f3:42:ca:01:7a:13:6a:0f:84:ef:ac:32:c9:df:db:d8:45:
         f9:72:59:22:ae:70:e6:61:43:11:ed:f8:74:77:c3:e7:04:ee:
         de:74:a5:71:36:8e:eb:31:19:a9:81:72:fe:25:10:ad:a8:7b:
         3d:c2:20:61:46:3a:a4:60:e9:08:aa:1a:0c:d6:a0:26:fd:fc:
         87:84:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:44 2026 by rpki-client