Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File:                     e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier:          EfN1TCrd1PsuabIkcOtUDrusc99GfXlCo8mBMhxx/50=
Subject key identifier:   79:E2:76:9C:42:19:E8:A2:CF:A6:8D:A8:7D:CD:8B:3F:5B:49:6E:A1
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer:       /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial:       019D2B4E80CB1D6DE44CD4518083B1028A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number:          054D
Signing time:             Thu 26 Mar 2026 18:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:57 +0000
Files and hashes:         1: Gws5btNNtPdjaSz9VbluBPmvlcM.roa (hash: d+e95WhTHyM+HX2sAVv1c3YdJyjnOdJdLOShrMr5pvY=)
                          2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: HuRYCpJsy0U2OuF2qrM7B+7fzp+uIoImErR5rP/UQqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:80:cb:1d:6d:e4:4c:d4:51:80:83:b1:02:8a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
        Validity
            Not Before: Mar 26 18:00:57 2026 GMT
            Not After : Mar 27 18:00:57 2026 GMT
        Subject: CN=79e2769c4219e8a2cfa68da87dcd8b3f5b496ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:b6:31:41:65:d2:07:67:43:e6:f8:b1:03:
                    bb:01:c7:a3:cb:bf:bf:64:b0:6d:0e:5c:03:68:1b:
                    4c:1a:98:7a:d9:bc:db:f3:12:d1:a5:5b:a7:54:39:
                    ab:75:a5:00:bf:94:34:da:4b:31:21:b3:f7:59:e8:
                    da:8a:f1:cc:03:ba:96:71:5e:88:f8:f4:a1:71:39:
                    f2:c2:e9:a1:4b:87:8d:5f:74:0a:13:61:7e:b2:a3:
                    df:5a:28:56:3c:39:58:92:cd:73:51:4f:e5:fc:87:
                    e3:b8:e2:24:2b:3e:26:3d:32:82:5c:a4:9d:7b:39:
                    a8:d0:29:5d:d4:7a:c6:de:2f:2c:6d:3b:07:46:85:
                    ef:55:36:e1:a6:08:c2:75:c2:26:87:23:66:bb:6b:
                    35:e7:cf:e9:a5:bf:0c:c1:2b:e7:db:8d:d2:67:a1:
                    d8:6b:e2:a5:e5:0a:90:7b:f7:52:b6:58:d2:55:d0:
                    c0:df:30:c8:27:a7:e7:8c:a5:f6:f6:c2:54:b4:fe:
                    24:26:04:f4:37:b6:2c:fb:99:6d:f3:68:3c:c4:9f:
                    58:f5:04:a4:a8:51:26:9e:e8:dd:d6:15:06:17:8f:
                    68:45:05:20:72:88:6e:b6:b9:3b:a0:88:b6:5f:69:
                    40:01:47:94:48:14:12:1e:cb:21:83:f6:26:49:0b:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:76:9C:42:19:E8:A2:CF:A6:8D:A8:7D:CD:8B:3F:5B:49:6E:A1
            X509v3 Authority Key Identifier:
                keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:ca:16:79:86:a0:df:7e:49:eb:0a:f0:d7:1c:e3:50:53:
         a7:28:cb:60:a5:6f:fe:1d:cf:95:a2:0b:64:5d:1e:1d:9d:17:
         6c:f4:cc:64:a9:25:29:81:bb:bf:0d:22:4a:e0:cc:56:59:6d:
         1e:16:9b:5c:66:52:05:2a:09:8c:f7:9f:6c:47:ec:94:10:08:
         3f:98:33:d6:0b:68:fc:9a:39:89:9d:df:78:cc:ea:01:29:ee:
         0c:6a:e4:90:c9:12:37:72:b4:f7:89:ae:fe:83:28:71:2b:7a:
         be:c1:ae:d4:30:4c:47:8c:5a:86:06:53:9b:3d:38:67:87:f3:
         0b:ff:63:a9:7d:3d:fa:ed:a2:a7:e4:a6:3e:a1:33:ef:86:0a:
         be:e5:fe:ae:04:3a:ce:96:7d:3a:79:29:7a:72:60:e0:df:64:
         da:70:65:b2:85:01:f9:e8:25:27:71:ad:ba:8d:08:d8:5b:ec:
         97:f6:f4:be:ca:a5:d4:8c:34:0f:f4:1f:9f:14:04:e3:bb:bc:
         6f:82:9e:76:37:0f:80:46:a1:a9:26:40:5d:b7:f6:82:0e:aa:
         a1:bf:ce:41:fe:ff:1d:17:ae:21:97:1d:2b:51:ce:6e:70:6a:
         7f:a7:9a:a8:fe:19:f1:2f:8a:7f:5c:74:0a:29:25:b4:f9:e1:
         9f:3e:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:33 2026 by rpki-client