Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File:                     eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier:          yJhS8nixhMa+s+IGzRh3+R5g/8iEb2eppw4dU+esk4Q=
Subject key identifier:   6F:32:E1:C4:DA:1C:B5:BE:D8:98:F0:D9:00:78:BC:93:2E:CE:10:D5
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer:       /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial:       019D29973800C63F0DFB142174C442773C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number:          1525
Signing time:             Thu 26 Mar 2026 10:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:09 +0000
Files and hashes:         1: eFIkHLGyOWtI88D-W07OWbj9UaI.roa (hash: yGXkgrRDM12DJQ8ZdY8dTLzVgsSMaN3SFaLy13WWzIM=)
                          2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: wXJWWEuvnGV2/xP4cQs3+HU9zOgd2Lhgbc1C2lYTkq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:38:00:c6:3f:0d:fb:14:21:74:c4:42:77:3c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
        Validity
            Not Before: Mar 26 10:01:09 2026 GMT
            Not After : Mar 27 10:01:09 2026 GMT
        Subject: CN=6f32e1c4da1cb5bed898f0d90078bc932ece10d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:9b:73:0c:d5:96:85:45:cf:3a:d4:39:7b:
                    b0:f0:85:90:26:be:3d:f5:c4:81:5f:14:dd:19:57:
                    33:a1:62:c1:25:ef:25:bf:ed:48:01:c2:41:de:b5:
                    56:79:5f:32:dd:0d:2e:17:a7:19:2e:a0:8b:77:99:
                    3d:d8:7d:f9:9c:40:d5:5c:eb:48:b5:ac:ac:e4:a7:
                    0d:e7:ff:3e:fb:8b:b1:0d:02:90:30:7d:a7:a7:32:
                    9a:fb:9c:42:f8:4f:28:ed:37:1c:9f:d3:3a:54:b1:
                    c3:8f:f0:b4:5c:8b:cf:01:02:90:ea:b1:86:31:2c:
                    c7:2c:5c:fc:73:5a:13:1d:f8:1d:5a:41:d4:9e:ea:
                    03:fb:1a:fd:fd:ab:5c:8e:5b:5f:1c:d7:ef:c6:0c:
                    7c:76:74:c2:13:08:3e:84:c0:b4:c9:fb:47:2f:c7:
                    1b:e8:0f:a8:bc:a8:3f:f1:7a:74:e1:d7:e7:ed:23:
                    52:6f:0e:9c:00:8c:36:27:5c:fe:30:23:0d:68:cf:
                    d8:41:b4:2f:13:73:65:75:45:19:04:64:d4:c6:b5:
                    76:e4:c3:14:64:4f:68:41:c7:af:a1:f1:ab:eb:ad:
                    1f:9d:f2:7d:13:b3:f6:0a:42:96:62:65:32:ed:98:
                    9c:61:69:54:f0:3b:56:dc:8f:c3:5d:b8:bf:f9:4d:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:32:E1:C4:DA:1C:B5:BE:D8:98:F0:D9:00:78:BC:93:2E:CE:10:D5
            X509v3 Authority Key Identifier:
                keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:a1:5c:d8:3a:b4:bf:5e:e5:a6:da:24:01:23:6f:a2:05:
         f9:ca:1a:47:4c:43:9a:33:13:f1:b8:d2:cb:57:89:cf:41:3a:
         e4:10:dc:58:15:24:94:8f:d6:1a:04:80:f1:07:c3:02:f4:d5:
         ca:1b:34:35:b3:64:01:13:95:6e:2d:0e:8b:08:c0:8c:01:ff:
         3b:a0:fb:fd:4b:54:de:71:7a:a0:98:f9:81:a3:40:0c:ff:a5:
         40:1f:92:83:0f:a9:b9:1b:7d:34:c5:97:ea:2d:93:34:bb:d6:
         9b:35:68:87:36:a1:ae:a9:c9:a3:1b:7c:bf:5e:21:30:9a:76:
         24:3f:2a:1c:90:9a:55:03:bc:eb:06:45:87:af:63:bd:aa:37:
         7c:8c:4c:e5:8d:f5:83:68:82:d1:48:45:50:19:fd:5a:a3:27:
         9a:eb:85:01:87:6e:3e:1d:22:de:93:ac:c4:78:ec:dd:75:cb:
         ca:1e:f3:71:7b:8b:b0:d6:86:a9:e5:b8:b7:1f:2f:56:15:8a:
         6b:5d:b6:da:6c:73:4e:9c:e7:80:a3:2d:b0:88:6f:fd:99:ac:
         44:95:52:69:03:97:c4:58:42:71:39:51:82:76:c2:a5:d1:23:
         a3:a7:d4:de:ef:9b:af:03:40:dd:82:70:b3:7e:a9:f7:e7:05:
         00:74:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:29 2026 by rpki-client