Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
File:                     eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json)
Hash identifier:          zy0lThTeid/1K8rHSglHrpsYKSKSNc4/b9fVBAFi8Y4=
Subject key identifier:   83:B0:EC:42:C6:E4:F9:37:E5:0E:C5:4F:B4:77:3E:BA:B7:61:93:5C
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Certificate issuer:       /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial:       019D269642703CE5B739A63BC1574B53DA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
Manifest number:          1348
Signing time:             Wed 25 Mar 2026 20:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:14 +0000
Files and hashes:         1: XCzfh62vqtaLoBLmnf7KwpKjJEA.roa (hash: KTbdtDtJvNQ824N7s/PkrhI3vieli+GuTfSDO92U57s=)
                          2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: enAJYMjQPCYMmu3SfvMKcC9b1lQRtX6PRxluFH+lC9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:42:70:3c:e5:b7:39:a6:3b:c1:57:4b:53:da:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
        Validity
            Not Before: Mar 25 20:01:14 2026 GMT
            Not After : Mar 26 20:01:14 2026 GMT
        Subject: CN=83b0ec42c6e4f937e50ec54fb4773ebab761935c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:05:54:a0:d5:54:d2:c4:3c:85:60:39:ff:
                    3f:c6:0d:31:fc:9b:e4:34:3d:17:0b:36:2e:95:ee:
                    50:9f:73:20:9c:51:04:cc:12:a3:55:80:eb:1d:9a:
                    16:b5:7d:fe:5b:29:ec:68:61:9e:66:1c:22:a1:65:
                    53:a1:91:f9:5d:2a:c6:6c:d8:13:06:a1:80:39:f9:
                    1e:06:ff:b6:68:c8:c9:d3:e1:8d:2b:12:c5:64:07:
                    72:4a:0b:a4:35:9c:03:c7:d1:6e:9d:bc:6e:74:1e:
                    c0:9e:45:f4:53:12:6e:7f:06:02:7e:1b:0c:ed:12:
                    7f:4b:a2:f9:ca:89:74:7c:59:ae:3b:b3:4c:54:cc:
                    77:fc:b4:c2:20:45:85:aa:c9:02:5e:9d:b2:fb:41:
                    89:7a:5f:9e:7c:da:eb:f9:06:e7:e2:fb:cb:0e:9c:
                    da:c1:39:4e:f3:66:bd:b9:a0:b7:32:99:09:68:9e:
                    df:16:80:7e:3d:90:df:d8:72:22:cc:af:62:fb:45:
                    44:3b:de:9c:55:97:f0:74:fa:bf:6e:4e:4f:98:a7:
                    e1:6b:dd:64:88:96:6b:7e:63:c8:ee:71:7e:60:81:
                    85:19:7c:ab:c3:4b:75:3e:7e:62:5e:bc:3e:61:d3:
                    af:49:d3:48:49:8d:e3:66:3a:99:33:3e:3c:84:25:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:EC:42:C6:E4:F9:37:E5:0E:C5:4F:B4:77:3E:BA:B7:61:93:5C
            X509v3 Authority Key Identifier:
                keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:8a:93:0c:40:85:0c:69:fe:af:f0:0a:38:ac:b0:c9:c6:b9:
         df:a4:c9:09:a6:5a:9a:86:b5:ff:e8:91:31:8d:c2:33:95:0c:
         80:bf:35:91:18:de:6b:62:3e:3e:54:0e:89:64:83:df:3a:09:
         f4:12:a6:78:fc:c1:4e:98:96:53:16:a5:a9:68:59:21:16:95:
         a5:c5:c8:14:0e:29:09:1b:8e:ff:07:f6:91:30:78:41:6a:c5:
         60:fa:0c:77:66:36:8d:fc:42:85:f8:d7:cd:4f:64:0f:73:d0:
         a2:b2:f9:b7:3a:96:d3:a2:82:05:aa:0d:ec:15:a9:fa:b1:19:
         67:df:7b:46:97:ea:e8:28:99:8a:89:e9:e5:a4:2e:2e:ce:11:
         a2:4f:d9:da:ac:a7:c1:ed:f7:8c:40:f8:73:d8:dc:37:c0:b0:
         e1:0b:ab:bf:1c:0b:e2:ad:33:6d:8e:b4:82:9b:cd:e9:b0:74:
         14:db:39:7f:e6:8f:4f:68:ff:61:48:8e:f1:6f:5e:55:c9:00:
         b7:03:85:06:55:12:c3:61:2a:8c:f7:95:3d:4a:d2:4d:5f:58:
         54:c1:04:ff:4d:b5:01:ea:7a:f3:27:a5:3b:b3:87:13:48:24:
         18:f2:d0:64:fa:81:ef:55:21:0d:fa:ce:2a:8a:fa:88:45:a1:
         71:a1:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:09 2026 by rpki-client