Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          9LNnOZice9QHJ2qwmQMlpD71QcGV4pucMD9ry1aWh7g=
Subject key identifier:   E0:8E:FC:CD:0E:1E:E6:9A:26:36:25:A2:3F:82:A9:3D:C4:79:64:FE
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019CAD59AE8F5A181680CF6E086119C84CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          1078
Signing time:             Mon 02 Mar 2026 07:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:01 +0000
Files and hashes:         1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: QDzXTzH3oeUb7xDR4Dfjl/syTGOm0gy+4OS55bD0OFA=)
                          3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
                          4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:ae:8f:5a:18:16:80:cf:6e:08:61:19:c8:4c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Mar  2 07:01:01 2026 GMT
            Not After : Mar  3 07:01:01 2026 GMT
        Subject: CN=e08efccd0e1ee69a263625a23f82a93dc47964fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:2b:1c:a2:86:8c:f5:3d:ef:0c:0c:b3:04:
                    ac:c8:46:88:d0:0c:d2:75:9b:3f:2e:c4:72:e9:b3:
                    88:38:d1:aa:b8:11:b2:42:eb:00:90:66:f1:c0:09:
                    2a:c5:41:89:80:5d:74:a7:54:42:fb:1f:b7:d1:44:
                    c0:b2:6f:cc:4e:90:f6:b5:a1:98:77:ac:11:22:31:
                    ee:e4:db:ca:4b:17:11:f0:51:f0:63:0c:22:c2:cd:
                    64:89:18:90:7a:f6:44:f4:f8:ee:8f:15:91:96:df:
                    ec:34:89:e5:cd:3f:24:41:2e:a9:1b:15:4d:29:50:
                    5c:01:b2:be:f9:fd:ff:24:89:12:57:5d:91:91:78:
                    d4:a9:56:22:ef:6a:c1:30:ca:d0:ca:ab:3b:3e:3c:
                    cc:80:ab:12:4e:49:4c:59:19:55:e9:05:a6:f0:e8:
                    76:1d:bb:48:0a:8b:e3:f7:6d:41:a3:22:cb:f4:93:
                    df:2c:3f:53:5b:a9:b2:57:08:fd:d6:4f:e2:48:9d:
                    97:0f:ea:03:0a:0a:4c:9a:74:c8:a0:33:17:a6:45:
                    ca:7f:b1:20:59:00:cf:d9:6c:69:5e:e9:9c:39:ed:
                    ee:53:d1:c7:4b:91:f5:2b:0a:4a:06:25:23:5d:e3:
                    9d:aa:c5:ac:18:16:fd:2e:16:a6:77:a4:e0:31:5d:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8E:FC:CD:0E:1E:E6:9A:26:36:25:A2:3F:82:A9:3D:C4:79:64:FE
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:95:8d:74:33:51:21:b6:25:08:48:1f:ed:43:7d:87:31:b9:
         93:f8:ed:7f:ee:e0:76:eb:14:ab:fe:f0:d0:00:8a:63:8b:50:
         3e:17:c9:ac:1e:e9:a7:47:6e:5a:fd:9e:db:67:ce:f9:f6:a5:
         85:b6:11:a4:84:9c:28:ff:be:88:6d:b5:6c:30:3a:40:8e:b6:
         eb:98:3f:68:a5:f5:76:45:29:0f:b5:c4:3f:77:97:00:67:f0:
         db:68:d6:a8:2f:44:e3:5c:62:e6:51:aa:0e:e0:15:32:c7:3f:
         53:39:32:af:1c:69:30:16:ff:4b:55:6f:22:21:c6:45:46:1e:
         5d:3f:ae:59:fc:d8:42:8f:d7:d9:f5:a4:fa:e5:7b:53:d8:30:
         f5:b3:44:3b:8f:59:26:98:b7:91:5d:eb:f5:20:2d:52:5a:f7:
         21:9f:40:2e:2d:f4:ee:ef:6f:c7:c1:e8:f1:97:21:ec:a8:d5:
         c9:c8:ee:a0:81:13:0b:f9:fc:c1:58:ff:a2:ff:0d:27:58:bd:
         bb:5a:5a:11:70:ff:9c:87:58:6b:d4:32:5a:e0:b7:25:f2:ed:
         89:41:d7:d7:4d:ba:63:bd:7f:4c:7c:82:cf:b1:5b:67:98:12:
         ef:34:d8:0a:6d:bf:00:3f:e8:41:b1:f3:2c:9d:e3:07:8c:68:
         81:89:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:23 2026 by rpki-client