Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File:                     eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier:          vXosZI0v9T2+NgU6oyez3TwyK1xsfmdcmXXxYEXG1NU=
Subject key identifier:   E1:80:1F:F4:2B:A5:F2:18:EF:5F:44:D1:89:8A:6C:F7:7E:C6:AB:27
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer:       /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial:       019D28BB11E0C6A0D2FD3AC4F56007DC74E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number:          0811
Signing time:             Thu 26 Mar 2026 06:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:41 +0000
Files and hashes:         1: _rvy-296w0a-j-Nw33bBfHPQ78Q.roa (hash: Bg8gLL5anRmVsyv6lsSlg5Xf04g+qeE2nvlaXoMSo6g=)
                          2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: cWezAyyNAUMIJrmvW6CsLmJZaOh1M6LCy2ioByqJ5z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:11:e0:c6:a0:d2:fd:3a:c4:f5:60:07:dc:74:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
        Validity
            Not Before: Mar 26 06:00:41 2026 GMT
            Not After : Mar 27 06:00:41 2026 GMT
        Subject: CN=e1801ff42ba5f218ef5f44d1898a6cf77ec6ab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:91:aa:21:8e:46:dc:cb:db:6d:a3:26:1e:
                    9a:ee:f1:d5:02:8e:4a:25:a9:ef:8b:50:b8:21:21:
                    ff:c5:46:b4:40:a2:79:3e:10:dd:93:96:8c:c3:b2:
                    cb:c3:de:d3:54:e9:bb:b5:44:ba:8d:2e:e0:f6:78:
                    59:77:97:77:b4:2b:1e:e5:95:54:92:a1:31:16:60:
                    2b:d4:ff:66:52:af:2d:06:7a:84:af:54:1c:0b:92:
                    75:ec:1c:cb:db:25:97:22:d2:dd:86:c9:79:64:c3:
                    71:dc:6a:2c:8b:d4:c3:2e:cf:f6:5e:1e:54:d8:4c:
                    61:a7:06:0b:3e:3a:e2:ed:6d:6e:94:b3:da:99:9d:
                    0a:fb:7a:15:35:b1:8d:a2:9a:95:15:4a:04:23:18:
                    80:30:8a:0f:88:c2:a7:cb:8c:e7:9f:c2:e7:03:c1:
                    03:a7:80:fb:fd:c3:78:b0:4b:9a:d4:28:a4:b2:de:
                    3d:84:9a:1e:b5:ef:44:44:3d:6a:2e:04:fa:fb:88:
                    61:db:47:f9:84:be:43:e8:8c:be:c4:e7:3b:a3:a2:
                    53:a2:26:f8:03:2d:0d:f1:5b:27:68:58:e0:8d:99:
                    f5:3f:8f:b0:ee:0d:b9:1c:d4:70:1e:9c:92:9c:95:
                    e5:78:f1:51:5c:8c:1a:e0:89:71:2f:36:8d:27:2d:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:1F:F4:2B:A5:F2:18:EF:5F:44:D1:89:8A:6C:F7:7E:C6:AB:27
            X509v3 Authority Key Identifier:
                keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b2:14:3d:d3:d5:34:3c:78:6c:f5:5d:7f:ba:d9:10:25:81:
         ff:dd:cd:23:af:83:36:fe:75:c1:84:7b:c3:d4:20:cc:45:35:
         f1:40:59:75:6a:65:94:61:c8:58:41:e4:42:d2:31:13:d2:7c:
         78:c9:d4:8d:94:51:da:2a:50:49:2e:86:e6:40:ca:7b:c1:dc:
         5f:14:f3:f2:aa:f3:2c:eb:da:50:67:97:b2:28:48:af:d8:81:
         ff:9d:c8:b4:3c:82:0d:36:78:2e:f9:b9:64:71:ed:51:56:1d:
         e9:bf:cf:c3:0b:f8:dc:04:09:55:4f:e9:70:90:a1:3e:8b:85:
         28:c2:af:72:8a:48:ca:8b:90:9d:f6:38:2a:d4:d4:68:5a:3d:
         46:ed:97:cc:90:de:60:59:51:6b:00:6a:df:94:30:61:3b:ee:
         cc:47:9b:e0:f8:17:ab:99:ff:ff:80:a7:8b:07:ba:36:aa:3a:
         cf:61:16:d6:50:86:3a:7c:aa:9d:7b:bf:05:1b:2d:a3:ad:a5:
         db:1f:c6:bf:be:28:ca:d1:21:26:f4:bb:45:c2:e5:a5:e4:b5:
         40:8d:70:fd:bb:7b:aa:5c:c9:da:e5:f8:c6:ef:70:24:1c:88:
         b2:72:62:df:b8:b8:e9:d8:4d:b0:81:36:f7:b6:62:c6:40:c4:
         3b:96:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:08 2026 by rpki-client