Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
File:                     EEwNyHsCIy5J3FTU_79Ele4DNlU.mft (raw, json)
Hash identifier:          g2q0j4kKU3RrM1tQA/0DHB0VCM9NjLPIaG7FrTGsMRo=
Subject key identifier:   37:D0:D0:95:04:C1:41:6A:A5:AF:95:C3:E8:F6:55:C1:B4:8C:E2:10
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Certificate issuer:       /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial:       019CAD908FEE373793BD2C6EEC52A905D36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
Manifest number:          0D3C
Signing time:             Mon 02 Mar 2026 08:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:58 +0000
Files and hashes:         1: 2K8VsxQeomyYY4ob5guI3fFsEy4.roa (hash: fqG24VOZHl+9Rho8nvKnqFMohW4wCO727IrwbMlKh54=)
                          2: EEwNyHsCIy5J3FTU_79Ele4DNlU.crl (hash: EyTZZEzSqcqX18mls8YgaZJeTTwmpZXkMc8yBZg5jQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:8f:ee:37:37:93:bd:2c:6e:ec:52:a9:05:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
        Validity
            Not Before: Mar  2 08:00:58 2026 GMT
            Not After : Mar  3 08:00:58 2026 GMT
        Subject: CN=37d0d09504c1416aa5af95c3e8f655c1b48ce210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:65:ab:6d:7c:c6:cf:e1:ca:b6:52:dd:db:
                    4e:5f:72:8f:88:53:d7:60:7f:b8:ad:4c:0c:f8:11:
                    5f:5f:c1:f2:83:b6:14:a0:44:5d:3d:35:04:a2:58:
                    06:9f:b8:f7:90:a0:72:10:3b:fc:04:ca:1c:e0:25:
                    6d:eb:6a:a6:09:90:38:1b:2e:da:4c:17:15:fb:f4:
                    d9:9b:37:56:99:78:ab:ed:b1:7f:d6:0a:48:7e:29:
                    80:1f:29:92:04:e5:3b:5e:4b:1b:1f:24:01:fb:6e:
                    15:4c:32:3e:61:27:18:de:cf:fb:27:4b:d7:b7:1a:
                    10:ef:2b:d8:3a:92:31:5d:c2:65:f2:b3:43:16:30:
                    c2:6d:45:0d:ac:b7:4c:12:d5:3b:72:83:0b:ae:85:
                    a9:30:d3:08:57:be:3d:82:63:2b:ca:b9:5d:a2:ee:
                    6b:15:16:d6:58:61:68:9f:13:9f:82:9d:79:cc:f8:
                    ef:51:0a:2f:5a:61:56:49:4c:61:77:b3:d9:56:d0:
                    9b:e7:b6:04:ee:97:26:e9:b4:b9:ef:c0:81:21:4f:
                    54:c1:82:6d:20:bb:67:dc:e3:99:a4:7a:24:6b:08:
                    09:b5:d2:c9:0a:a3:96:b6:1a:c5:42:9c:fa:6b:13:
                    22:e7:28:a9:27:87:38:c0:cd:1b:b5:65:fa:3f:80:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:D0:95:04:C1:41:6A:A5:AF:95:C3:E8:F6:55:C1:B4:8C:E2:10
            X509v3 Authority Key Identifier:
                keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:da:3c:a8:8f:9a:95:27:4d:bf:25:95:a6:a7:d2:da:1a:
         89:34:b8:84:40:18:13:a9:23:8d:83:53:2c:26:48:00:a1:05:
         03:6d:b8:d6:45:4d:61:90:bc:5b:95:f9:a2:87:92:38:9d:85:
         49:3d:eb:82:cb:bc:1e:5a:ad:f4:df:60:57:cc:28:50:f0:fc:
         31:d4:70:87:45:6c:58:16:cb:4b:f9:d2:37:51:11:8d:c2:8b:
         ba:9f:08:aa:b3:29:11:7f:c3:59:92:a6:08:b8:c0:6d:7c:59:
         1b:a1:41:81:42:4c:8b:3b:b3:e2:61:3e:ce:7c:6c:fc:6a:b0:
         e1:df:8a:a7:7a:87:f5:60:6e:58:6f:10:c5:01:d2:d9:0c:44:
         66:88:9a:65:6f:89:c5:25:14:fb:ea:3d:3a:29:5f:62:3a:f1:
         34:58:d2:3c:c7:39:c8:b8:2e:e8:1d:21:49:89:21:3e:20:71:
         ba:da:9b:bd:e1:8b:3b:7a:14:20:0e:cd:15:01:7c:f4:19:96:
         23:f9:af:14:60:33:0d:88:34:a1:d3:2d:40:4c:de:a8:d3:55:
         2a:fb:71:08:b4:cf:d2:bc:86:26:45:c2:b5:e8:24:92:08:1a:
         9c:a6:0e:b8:40:98:59:4d:15:cc:cd:81:05:49:2d:a7:e2:4e:
         9c:09:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:54 2026 by rpki-client