Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          tfnOBEbnR2Zmfnu/2nBr1VVHM5WlF5AE1zQZkCQ77dk=
Subject key identifier:   C1:E2:5A:57:10:C6:5C:00:FF:11:90:E1:CA:50:28:D3:A3:EF:AF:FB
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019CAB342116DC677ED8F5EF03B5BC75AA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0DA9
Signing time:             Sun 01 Mar 2026 21:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:45 +0000
Files and hashes:         1: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: Sb2BMZAzS3+2UxTLlI300Ek7Zv6RWsWcBRUOrS7JO8I=)
                          2: MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa (hash: /l+JnqGiTQwDPE5vvTHQU+XCg4rivjzP4ZBaPNog3Q4=)
                          3: SMb-rYCNgB0GGUftiR0-0tMpWdM.roa (hash: uzxaI3f+u6QODKvTbBU5GWkNbNSg2FXZc5mS8nAJPjw=)
                          4: XWNOS1F1apSFln8lh8Msd5YKTd4.roa (hash: OvuPGjMv+zBsjGEY9dUfxrPrbBlbWPiCni7u0TxxErQ=)
                          5: aTwl_06eKgN-7Ji1g80MtelQtJg.roa (hash: /CzAIKlGk8B5id0rpbTAezRaHR40d5ivxFrB/UK/mW8=)
                          6: h8VusyvFygMniL7AA6ANP70RnB8.roa (hash: s7z2PciT+JcsK78pungkQ14zfBEzCrpixiOQvhEcI4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:21:16:dc:67:7e:d8:f5:ef:03:b5:bc:75:aa:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Mar  1 21:00:45 2026 GMT
            Not After : Mar  2 21:00:45 2026 GMT
        Subject: CN=c1e25a5710c65c00ff1190e1ca5028d3a3efaffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:17:01:68:8f:3c:2e:63:fc:bc:b7:e8:b9:
                    1c:30:ea:31:43:df:9b:37:df:0a:53:6b:c4:e2:7a:
                    c6:69:91:98:4b:c2:47:0a:0c:0a:1f:9b:ea:83:dc:
                    d3:89:c8:49:e2:4c:50:78:ca:ca:bb:d6:73:05:8f:
                    e0:17:33:5a:70:86:c4:db:bd:26:c4:de:d5:ea:2b:
                    a0:ee:59:2c:bb:f0:4e:71:a7:7c:ef:7d:d2:bb:17:
                    c5:cb:db:be:18:db:b9:d3:e5:5a:75:9e:f7:40:f7:
                    52:32:96:a9:0b:13:39:49:cc:59:17:da:46:25:d4:
                    93:3d:e0:90:5a:94:e1:c0:78:d1:04:07:da:c0:3f:
                    ca:e9:34:2f:cc:5d:38:fc:d4:23:db:aa:1b:e9:07:
                    b1:f7:80:7a:53:87:82:a0:78:ea:be:9d:52:6c:22:
                    76:3d:e7:d3:7a:29:3d:94:f9:a5:1a:2a:ff:6d:5b:
                    bd:cb:77:62:69:e7:ce:10:2f:15:d3:7f:ff:c7:4f:
                    2a:18:7d:33:3a:4e:c2:ca:20:c0:6e:0e:4d:22:9c:
                    aa:61:02:e6:ed:9c:85:a9:c0:a9:73:05:70:8b:35:
                    9a:97:d9:5b:89:7a:9f:7d:47:d6:9a:04:11:2e:ed:
                    8a:91:38:54:3a:3e:a7:5c:70:38:35:ec:7b:dc:79:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:5A:57:10:C6:5C:00:FF:11:90:E1:CA:50:28:D3:A3:EF:AF:FB
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:86:b1:a5:c0:c0:2a:e3:7b:b0:d0:b5:87:a7:bf:af:53:
         ca:50:fe:8e:d3:00:2e:c3:18:b4:ec:d3:f8:d5:13:2d:eb:65:
         31:98:e4:a8:ad:2e:7a:1a:6b:20:c5:cb:25:16:3b:94:6b:3b:
         ec:a1:c9:51:0f:96:b8:42:da:86:45:e2:39:7d:50:2d:81:34:
         fd:78:7d:cb:5a:20:18:07:88:09:cc:1b:78:be:02:04:16:f9:
         74:3a:d3:1d:92:37:a2:00:5c:a5:2f:f9:99:58:c9:2b:b0:25:
         74:b7:95:71:db:e2:00:52:76:42:6f:17:ab:6f:5e:0a:8b:2f:
         03:99:63:8f:2d:de:a1:71:9f:14:19:df:af:f7:48:de:a2:d9:
         17:4e:8a:87:49:63:27:2a:06:c5:bf:95:ae:d7:a0:a5:1e:08:
         67:66:ac:42:ae:b4:2b:9f:47:5d:57:5e:59:2d:9c:20:21:79:
         3e:01:bb:a9:e4:1e:64:b6:c1:ca:64:ee:e6:f6:51:8c:42:14:
         60:df:eb:5d:0a:17:90:44:91:5f:ee:ee:51:76:bf:f6:2c:b0:
         40:e8:3f:6f:65:a2:7f:f6:fb:7a:00:0d:32:c7:32:36:fe:e0:
         4a:ab:8b:e4:c6:79:2a:87:70:9e:a8:77:77:9f:af:1c:93:46:
         0a:3b:84:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCEW3Gd+2PXvA7W8dapLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2JiYmZlZjU5NTA5ZTcyNjM5ODZmNzgwNTg5YWIxZTc5
OTg0MjMwHhcNMjYwMzAxMjEwMDQ1WhcNMjYwMzAyMjEwMDQ1WjAzMTEwLwYDVQQD
EyhjMWUyNWE1NzEwYzY1YzAwZmYxMTkwZTFjYTUwMjhkM2EzZWZhZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeQXAWiPPC5j/Ly36LkcMOoxQ9+b
N98KU2vE4nrGaZGYS8JHCgwKH5vqg9zTichJ4kxQeMrKu9ZzBY/gFzNacIbE270m
xN7V6iug7lksu/BOcad8733SuxfFy9u+GNu50+VadZ73QPdSMpapCxM5ScxZF9pG
JdSTPeCQWpThwHjRBAfawD/K6TQvzF04/NQj26ob6Qex94B6U4eCoHjqvp1SbCJ2
PefTeik9lPmlGir/bVu9y3diaefOEC8V03//x08qGH0zOk7CyiDAbg5NIpyqYQLm
7ZyFqcCpcwVwizWal9lbiXqffUfWmgQRLu2KkThUOj6nXHA4Nex73HndYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHiWlcQxlwA/xGQ4cpQKNOj76/7MB8GA1UdIwQY
MBaAFOt7u/71lQnnJjmG94BYmrHnmYQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMt
NGFiNTMzMWNkOTM1LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMtNGFiNTMzMWNkOTM1
LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHeGsaXA
wCrje7DQtYenv69TylD+jtMALsMYtOzT+NUTLetlMZjkqK0uehprIMXLJRY7lGs7
7KHJUQ+WuELahkXiOX1QLYE0/Xh9y1ogGAeICcwbeL4CBBb5dDrTHZI3ogBcpS/5
mVjJK7AldLeVcdviAFJ2Qm8Xq29eCosvA5ljjy3eoXGfFBnfr/dI3qLZF06Kh0lj
JyoGxb+VrtegpR4IZ2asQq60K59HXVdeWS2cICF5PgG7qeQeZLbBymTu5vZRjEIU
YN/rXQoXkESRX+7uUXa/9iywQOg/b2Wif/b7egANMscyNv7gSquL5MZ5Kodwnqh3
d5+vHJNGCjuEOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:22:51 2026 by rpki-client