Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          GuzKngVy0mEnu+kWW/QrOSS98mEjlA75aYTThUhwpcY=
Subject key identifier:   41:75:F3:F3:FA:A9:D9:A0:1F:E5:AE:78:90:E8:FB:3E:16:02:FB:0D
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019D265F045022834D0EC6A9D5D6845B56F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          18A6
Signing time:             Wed 25 Mar 2026 19:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:54 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: j+/Z8Nkh6/GauICAYRZuna7Nz/zJe4eIiG0tZJKTwCE=)
                          3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
                          4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:04:50:22:83:4d:0e:c6:a9:d5:d6:84:5b:56:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Mar 25 19:00:54 2026 GMT
            Not After : Mar 26 19:00:54 2026 GMT
        Subject: CN=4175f3f3faa9d9a01fe5ae7890e8fb3e1602fb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:b4:c4:33:2a:80:74:0d:6c:f9:4c:86:f4:
                    a9:7a:96:07:a4:e5:95:f7:42:e0:cb:21:7e:ed:18:
                    ab:a6:fb:87:0b:99:15:6a:ec:41:2a:49:50:f0:74:
                    5b:06:b1:51:e7:0c:d0:ea:95:84:e2:eb:1a:ef:21:
                    00:44:8f:d0:01:36:f3:57:96:af:96:3a:6e:aa:12:
                    c3:8a:c2:f7:23:b3:ee:c8:f0:af:77:96:4e:31:e0:
                    10:52:80:bb:a8:f3:a8:69:d7:be:5f:06:bf:5e:82:
                    5d:2b:59:10:c8:ef:fb:46:08:9e:51:59:db:a5:a6:
                    a7:31:60:9a:9d:90:fe:ae:64:8b:52:1c:16:df:b6:
                    e0:77:51:4c:e6:15:66:92:f3:0f:a7:10:ba:06:01:
                    67:93:cd:16:e6:7c:2a:a5:f7:92:be:b0:43:95:ac:
                    60:0a:44:9f:b9:a7:a3:22:27:35:05:67:ae:3c:81:
                    86:3a:f9:e0:a7:e8:07:9a:37:10:6f:7f:f7:39:cd:
                    0e:33:67:1e:30:26:95:39:2a:1d:6d:46:98:0d:f2:
                    f1:26:f1:10:95:1c:8d:8c:36:ea:b4:cd:5f:3f:23:
                    fb:88:2c:60:c4:68:4b:d4:08:50:7f:50:4d:11:9f:
                    a6:a8:6d:0a:bb:56:69:62:8e:54:cd:12:76:4f:af:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:F3:F3:FA:A9:D9:A0:1F:E5:AE:78:90:E8:FB:3E:16:02:FB:0D
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:06:7b:40:9a:e0:9b:5f:14:f2:88:82:a2:05:f7:ee:f1:
         c9:9c:3e:ce:68:59:18:c1:40:0a:08:ed:67:57:dd:09:8f:3a:
         c4:5a:7d:cd:1b:75:43:ce:f4:b7:8a:60:3d:3d:59:77:11:8b:
         17:a3:81:24:33:12:44:51:e9:dd:b6:7f:5d:49:81:6d:4b:e8:
         fa:23:11:a7:b5:32:9b:c5:7e:0c:c0:a3:87:c9:e6:0c:71:28:
         7f:82:88:a7:ab:ae:97:f0:19:cc:ed:17:76:16:b4:b6:7d:eb:
         57:b1:5a:15:40:ac:d7:20:25:3b:83:82:6e:1e:5b:29:35:8c:
         8b:2e:02:a7:75:6b:e4:56:a4:28:99:84:17:ac:5c:46:ae:49:
         16:58:f5:7e:8a:98:61:ce:b8:74:2d:d7:aa:c6:e3:71:45:c5:
         9a:2e:9b:e1:8d:7a:fb:02:42:2d:72:45:34:50:e3:2e:f8:55:
         c5:6e:28:c6:93:bd:f2:7b:6b:3e:96:10:fa:4c:76:a4:5c:8e:
         97:49:c4:cd:f6:36:00:78:e3:86:79:66:a3:fb:1d:e0:59:a5:
         6f:36:71:f6:4f:2e:20:7c:1f:98:77:a0:1c:b1:6e:20:5a:45:
         6a:47:99:21:eb:c3:b8:06:8b:79:0b:b3:be:2d:20:5d:7c:31:
         51:0e:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:41 2026 by rpki-client