Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          EfKCTeqMOZ0WRr9i3y/sBuNO9uTz2J9THxkHt2OY/Zw=
Subject key identifier:   9C:E0:C0:8E:24:59:FD:49:40:73:64:0A:49:69:4C:2B:29:58:3B:F5
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       019CACEBACF32232AFABD5FFE57C07D81611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          12A4
Signing time:             Mon 02 Mar 2026 05:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:52 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: EPbUZVmEDY1/8hRa9SnYb7dXYFALvyvb/XQD+R3iI50=)
                          2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:ac:f3:22:32:af:ab:d5:ff:e5:7c:07:d8:16:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Mar  2 05:00:52 2026 GMT
            Not After : Mar  3 05:00:52 2026 GMT
        Subject: CN=9ce0c08e2459fd494073640a49694c2b29583bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:6a:d5:87:5d:7d:c1:92:e4:66:30:23:db:
                    e6:10:69:f8:72:80:20:79:b1:17:0c:75:b9:06:99:
                    54:b2:56:10:42:90:e9:f6:0b:da:09:21:41:1c:c9:
                    dd:52:a7:fc:52:1d:c6:08:71:f5:a7:3a:e6:56:18:
                    72:4c:3d:2a:55:ab:c3:8a:82:3f:2f:5e:aa:72:65:
                    2e:3b:6a:4f:c2:d0:69:95:73:18:67:dd:a2:be:55:
                    c2:95:91:9d:47:e1:23:d1:31:b7:4b:54:d0:1c:fe:
                    00:fd:d3:e6:3f:d2:cd:5d:15:ea:51:67:9a:f9:b7:
                    09:b8:ee:88:33:b4:a4:d5:75:ae:12:a6:de:46:9a:
                    b6:ef:13:81:c6:9d:1d:01:3b:cf:d4:36:9d:c6:b6:
                    8e:a2:cc:cd:27:20:89:f9:1f:61:ed:99:89:47:76:
                    ae:29:a5:02:43:fc:7c:38:31:2f:b7:9c:1b:10:88:
                    a6:b6:fd:2b:65:7c:0f:b8:69:37:d2:bd:c0:a9:b4:
                    33:16:59:9d:e2:b5:d8:a5:a8:55:78:67:15:80:e0:
                    f0:d3:78:bb:a6:c1:27:45:50:c0:64:32:a6:5f:f8:
                    86:97:56:59:45:77:0d:48:dc:0b:a5:67:7a:29:93:
                    16:41:60:7f:bd:08:d6:1c:b2:a3:77:37:49:9d:61:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:C0:8E:24:59:FD:49:40:73:64:0A:49:69:4C:2B:29:58:3B:F5
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:14:cd:e1:78:33:9b:b0:a2:f7:77:67:df:08:4b:9d:3d:
         18:6e:df:84:b6:17:a0:d8:89:7b:75:90:cf:6d:98:a2:7c:a4:
         06:11:4d:a2:c0:52:5d:ac:b2:f6:96:5f:82:c1:31:1b:18:4a:
         2f:40:73:c7:58:2b:78:02:94:b8:70:17:90:bd:3d:3e:f7:b9:
         cc:a6:81:56:96:63:02:d0:f4:36:96:31:14:d0:b8:4f:6b:d1:
         29:2b:c3:7e:89:1d:ca:37:6c:52:e1:bc:2c:f7:66:ec:60:95:
         cb:58:24:47:2a:c1:8d:22:ff:7c:a2:dd:c7:56:d9:2e:93:ae:
         27:17:65:28:fa:53:6d:95:1a:4e:ca:d0:ff:f6:bb:f0:30:49:
         e1:ca:34:2d:a1:2b:61:8b:8b:fd:1a:cb:b0:e3:41:19:6d:6c:
         d8:de:a4:08:f4:c1:57:b8:1f:b0:58:10:2f:36:71:8d:61:10:
         d8:29:45:63:15:01:b1:83:05:0e:fd:f2:6b:bf:dd:5e:c2:86:
         30:f6:95:dd:da:dc:d7:ce:5d:e0:ee:be:c2:f9:e9:46:35:c7:
         82:aa:e4:42:7a:ec:17:1d:36:44:05:93:5c:d7:d0:e8:50:d7:
         6c:c2:ba:1f:9b:3b:54:20:10:a9:96:2f:76:9b:49:95:5d:d4:
         9e:70:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:03 2026 by rpki-client