Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
File:                     epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json)
Hash identifier:          Jw4Gld++f0emEnxqrTWA7pKuapXjJn919SNGrTdAzAA=
Subject key identifier:   58:DA:B2:00:AE:62:E7:16:8B:6A:8D:84:11:38:9D:61:54:87:CF:C1
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Certificate issuer:       /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial:       019D2816F97480E966B1D1EE22E6253CE0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 03:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:27 +0000
Files and hashes:         1: Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa (hash: mySiqQ6DoaxlXWJI/8R41UPuL/Gn5DnjGC/YLKdLsNg=)
                          2: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: mn9M8OH3oQtr0SCP3P7HLi4u/NW852OQg9G104rgXM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f9:74:80:e9:66:b1:d1:ee:22:e6:25:3c:e0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
        Validity
            Not Before: Mar 26 03:01:27 2026 GMT
            Not After : Mar 27 03:01:27 2026 GMT
        Subject: CN=58dab200ae62e7168b6a8d8411389d615487cfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:e5:a1:f5:4c:60:be:33:91:8b:69:48:d4:
                    5b:d3:bb:44:3f:41:7c:36:8b:00:29:d3:f8:76:84:
                    8c:8e:f1:20:b7:03:ba:d4:2b:4f:a6:d1:64:55:18:
                    9b:94:6a:02:d8:df:12:81:bf:42:cd:6c:65:ea:51:
                    fe:15:d5:5e:2b:b2:a1:fa:5c:bb:02:23:d2:e4:42:
                    9b:91:db:9e:79:60:02:be:70:d5:9b:3a:8d:52:8d:
                    b0:b9:64:9b:ab:3f:a7:60:02:c3:b7:8f:85:6d:87:
                    e7:e8:9e:ae:e7:37:bf:4f:e9:d4:ef:f3:82:95:52:
                    21:a9:7f:49:7a:11:ce:5c:c5:67:ef:6a:06:04:f6:
                    de:92:68:5c:bf:2d:6f:15:47:69:51:3b:0a:28:48:
                    2f:8c:68:08:3c:17:8f:42:a5:24:da:dc:74:e6:55:
                    6f:bf:66:26:54:4d:7d:45:fa:1b:90:11:6f:65:c0:
                    92:3e:aa:66:61:fb:3e:0f:01:75:48:43:a1:92:57:
                    46:c8:1a:49:8a:fd:ad:9b:7c:0d:7a:b3:9a:61:dd:
                    21:5d:47:98:dc:7e:6d:80:da:34:7c:74:cc:a5:48:
                    53:b9:fd:0d:80:c4:5e:0b:8b:b1:09:8e:35:c3:c7:
                    c3:e2:81:17:32:c7:cf:17:94:e0:46:fe:e6:a2:a0:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:B2:00:AE:62:E7:16:8B:6A:8D:84:11:38:9D:61:54:87:CF:C1
            X509v3 Authority Key Identifier:
                keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:45:d1:22:26:a1:36:48:84:11:cb:35:50:8f:41:f5:be:30:
         29:5e:19:00:cf:37:d9:ac:bc:a8:5b:e4:7e:16:27:2a:0c:fa:
         20:e4:b3:09:8a:64:b4:c6:fc:30:8a:13:ce:9c:ed:df:a7:61:
         64:f6:c5:81:48:c4:49:d3:17:42:e8:83:56:59:9d:5c:4e:3a:
         42:aa:c2:b4:1d:af:b8:e4:d5:a8:57:7a:8d:b1:96:58:21:b4:
         9a:fe:81:c6:0f:8b:c9:c3:99:e7:74:3f:f2:a2:4e:74:96:d6:
         85:f7:a9:a1:a6:ee:d6:52:6e:ea:fb:21:66:8d:98:ad:77:06:
         7f:0f:05:48:92:5d:78:0e:a0:c4:b6:98:2e:78:c2:d5:21:3f:
         cf:18:c5:25:f0:2c:6d:58:95:8d:43:dc:1b:7e:55:84:f6:a1:
         ae:5c:0c:89:65:71:ed:51:26:a5:66:b4:c1:62:23:40:65:64:
         2c:46:fc:1e:d8:83:22:7d:3b:97:2a:fd:f3:4e:e8:0a:b7:3a:
         ef:46:38:34:b6:25:93:48:b8:39:fd:dc:25:f4:df:7e:3f:37:
         89:3d:9a:32:34:ec:50:fb:e3:16:77:23:2e:ec:ec:69:c2:86:
         83:f6:f7:78:25:7a:3e:d4:5a:3a:dd:dd:06:db:71:6a:58:92:
         49:75:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:56 2026 by rpki-client