Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.mft
File:                     eOwtR-N15oiEpOBC9wGxaUXhLgs.mft (raw, json)
Hash identifier:          VqckWgR9kWIPXnvFWR6dT0o/bLxPZF4aidKpm9BpS3I=
Subject key identifier:   75:06:89:C9:19:95:4A:EE:77:28:09:56:6B:55:66:01:F6:86:27:75
Authority key identifier: 78:EC:2D:47:E3:75:E6:88:84:A4:E0:42:F7:01:B1:69:45:E1:2E:0B
Certificate issuer:       /CN=78ec2d47e375e68884a4e042f701b16945e12e0b
Certificate serial:       019E1E3607DC85C0E6ED4D1377FCEF6F15E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.mft
Manifest number:          0151
Signing time:             Tue 12 May 2026 22:01:57 +0000
Manifest this update:     Tue 12 May 2026 22:01:57 +0000
Manifest next update:     Wed 13 May 2026 22:01:57 +0000
Files and hashes:         1: bPrvh2lteYIIPVciG2hNCTuNxJ4.roa (hash: vL5d+UXUZiwiJq8y9yRxTnXBOAGN3bB+/8wDo4X0aG8=)
                          2: eOwtR-N15oiEpOBC9wGxaUXhLgs.crl (hash: nTBFJw3ngKm9Rm7MF4IEtSgRhjgJORMmk2+JrN0e1zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:07:dc:85:c0:e6:ed:4d:13:77:fc:ef:6f:15:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ec2d47e375e68884a4e042f701b16945e12e0b
        Validity
            Not Before: May 12 22:01:57 2026 GMT
            Not After : May 13 22:01:57 2026 GMT
        Subject: CN=750689c919954aee772809566b556601f6862775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:04:1c:3e:43:59:f2:dd:3b:fd:e0:9b:65:
                    33:5e:a7:18:b1:5e:9f:c1:68:26:27:cf:44:76:6b:
                    aa:b0:54:82:6f:4f:ca:32:20:29:9c:11:67:45:bd:
                    3e:97:8c:85:33:23:39:5c:5d:16:f2:62:95:3b:3d:
                    51:39:14:97:29:b1:81:48:fa:cc:98:63:12:ce:1b:
                    1e:68:3e:38:a5:2b:16:fd:99:e5:81:8c:1b:ef:1a:
                    6e:44:03:9b:0c:99:7b:a9:d7:c8:eb:90:af:b2:b5:
                    f4:0a:90:f5:9e:a1:58:62:6a:e7:3f:8a:55:df:4a:
                    7a:48:81:8a:75:e7:ca:a6:23:17:47:1e:78:3b:d5:
                    e2:dc:70:65:bb:64:a8:9e:6d:d2:b8:10:e7:69:69:
                    40:eb:69:b2:d7:9f:77:eb:fc:ee:21:a9:d8:f3:ea:
                    68:d0:41:80:3e:4e:8b:3b:dc:d0:7f:ba:49:92:e4:
                    fd:be:a7:bb:06:b9:f3:ab:93:9d:9c:59:11:8b:00:
                    20:d3:d7:fe:a0:06:d4:c1:03:a7:0e:cc:0a:98:56:
                    8b:33:d1:ed:17:0a:43:64:4a:b8:b1:56:1b:f5:82:
                    48:54:d8:e6:49:e0:82:8d:e4:12:20:73:01:aa:df:
                    4b:0f:05:d2:ff:9a:32:9d:21:71:f7:ca:3e:6e:c5:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:89:C9:19:95:4A:EE:77:28:09:56:6B:55:66:01:F6:86:27:75
            X509v3 Authority Key Identifier:
                keyid:78:EC:2D:47:E3:75:E6:88:84:A4:E0:42:F7:01:B1:69:45:E1:2E:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:51:07:bc:73:b9:25:4d:f3:f8:aa:59:04:3e:84:4f:e6:
         4c:d3:aa:bd:c5:52:e9:65:80:3f:fa:72:a8:af:60:96:fb:4d:
         40:44:b7:58:52:48:7b:fb:96:a0:2d:c7:1e:48:24:4e:4d:e2:
         01:ae:4f:74:13:c5:e6:3d:44:e0:ab:eb:0e:b1:93:2d:05:bf:
         e7:5d:e5:b8:fc:f8:f8:e1:90:41:52:ea:82:63:6c:ef:a3:99:
         16:a3:c0:8f:11:94:6b:4c:e3:ef:34:b0:7e:f3:92:b2:7c:9d:
         5e:a6:75:ef:6a:d1:84:63:ac:25:82:d5:a5:c3:85:20:c7:19:
         00:ff:e5:74:2d:50:6a:77:9f:ce:e5:ff:a3:7c:9a:66:fb:d4:
         b9:41:4e:72:c3:aa:c4:de:b8:53:1c:60:62:80:83:58:9e:56:
         01:2f:b7:13:56:a3:2a:1b:37:0b:10:19:39:e2:c3:5f:45:71:
         f6:d0:64:35:0b:9b:d6:09:56:76:5e:3c:ad:41:7b:af:d3:5c:
         1f:6b:04:52:a4:e3:66:1b:04:9e:ed:d9:be:07:fa:ba:43:b6:
         a2:de:41:22:c7:cf:aa:d4:ec:a6:2d:76:47:a0:33:0f:b9:14:
         7b:04:3f:86:7e:eb:de:47:6f:48:ca:93:c7:51:b3:9c:15:fa:
         8f:54:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:40:19 2026 by rpki-client