Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
File:                     eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json)
Hash identifier:          ox0zB5ilEMLNLh1b9uIcL2sQWuxf1YCRdWLkekZpogA=
Subject key identifier:   FB:07:BA:37:97:B2:46:B6:3D:18:45:B1:A1:71:1D:75:ED:3A:35:7A
Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Certificate issuer:       /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Certificate serial:       019D265EFBAF4AC888B189265803A502B3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:52 +0000
Files and hashes:         1: EZCwycKupK72kXY5TYKnJInErsM.roa (hash: POKu/vlmNB7+n/NzihgIJqPuXnS4TGL1GaOCLIcj0pg=)
                          2: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: rhzDZ/WkmQ2iW9GYM1a45GshA9wnyRc525ccuzmMLDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:fb:af:4a:c8:88:b1:89:26:58:03:a5:02:b3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
        Validity
            Not Before: Mar 25 19:00:52 2026 GMT
            Not After : Mar 26 19:00:52 2026 GMT
        Subject: CN=fb07ba3797b246b63d1845b1a1711d75ed3a357a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:6b:9b:32:6b:6f:c5:9c:3d:93:98:83:49:
                    5d:95:89:96:78:76:f9:57:fc:24:21:e4:44:63:83:
                    97:e1:82:07:f5:e2:01:56:06:e7:2a:a1:8b:7b:09:
                    68:7f:a0:40:2d:40:62:33:24:1a:aa:7d:11:c8:c4:
                    f2:66:6f:29:9d:2f:d1:8c:1d:c0:ed:d2:c6:3b:0f:
                    3e:38:9a:8f:bd:8e:96:3d:b4:77:ac:0c:61:c5:17:
                    f9:ce:86:8f:c3:ef:3b:e2:c1:69:0f:a2:fa:a6:b6:
                    47:b1:fb:38:9a:93:b4:d9:c2:59:f3:61:7a:7e:23:
                    3e:eb:bb:f3:f1:6b:4b:ac:74:62:d1:27:70:b7:77:
                    bd:7c:84:09:a5:12:8b:7b:6b:f9:71:18:40:14:4e:
                    59:97:31:ff:d8:93:c0:7f:0d:ba:3d:b0:d0:7d:e1:
                    43:13:78:a0:b2:09:f9:3d:53:90:4f:0d:00:57:53:
                    87:a9:f8:e8:71:51:78:4c:d5:3d:c9:fc:69:dd:31:
                    d0:6c:f3:ad:9c:4a:17:94:df:1a:dc:8a:c3:5a:74:
                    58:f4:ea:86:62:ad:07:73:cf:10:ad:c3:49:cd:46:
                    cb:de:bb:33:63:c6:28:99:b3:11:f4:12:7b:b1:72:
                    6f:5e:38:f9:d7:86:19:80:e1:3a:89:ea:bc:bb:88:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:BA:37:97:B2:46:B6:3D:18:45:B1:A1:71:1D:75:ED:3A:35:7A
            X509v3 Authority Key Identifier:
                keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:7b:01:52:57:90:28:21:17:7d:d1:3b:1f:f9:7a:55:91:
         42:0d:7b:e1:1e:90:55:49:9c:78:f5:02:74:49:48:61:cd:15:
         20:0f:71:e0:e2:59:ae:e6:bb:10:88:ee:e2:c9:0d:b7:05:cc:
         42:f3:03:52:d7:ee:ea:e3:49:3e:87:44:ef:13:32:8a:90:1d:
         a1:d0:22:14:e3:9f:00:08:53:79:9f:15:88:9e:da:30:53:77:
         bc:3f:41:e2:b1:b5:98:54:82:8b:c5:5b:bc:81:ee:05:71:1d:
         72:72:d0:2c:08:aa:d3:08:a4:b4:69:7c:f0:fc:01:32:64:48:
         33:0a:0c:e0:d0:9e:c6:30:c2:c0:91:de:1f:a5:9e:9e:6e:48:
         16:96:20:a4:c7:5b:2f:eb:44:33:62:a4:a4:ea:4e:da:9e:6d:
         db:8b:93:54:53:d0:25:5d:b9:bf:5f:d9:fe:06:a0:3e:ab:2d:
         30:2d:0b:77:01:01:fe:82:ba:ac:12:76:46:53:d2:4e:6b:76:
         5d:0d:bc:8c:fa:21:1c:7a:bc:04:e3:4a:23:6c:e9:2b:41:8d:
         a9:3b:a2:b0:3d:aa:93:45:9e:c8:b7:aa:e2:92:cb:0b:8e:51:
         e4:bd:18:ba:c6:ab:2a:51:6c:cf:94:85:c5:d6:c6:e5:91:c4:
         2b:a2:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:08 2026 by rpki-client