Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          aPD+r5blrDs+D9qckORmjLDHyt2FhbJ4Fyr8Mkdylnc=
Subject key identifier:   69:70:54:0F:EC:BC:C5:3E:B0:FD:C0:04:60:9F:AE:99:71:5F:17:D2
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019D25831E2E16834FF93BAD47B66CD520E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          11E7
Signing time:             Wed 25 Mar 2026 15:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:43 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: QvQXGeGRuMRswX/xJzXtpcIXXN9E7DxwI77cRHwErDU=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:1e:2e:16:83:4f:f9:3b:ad:47:b6:6c:d5:20:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Mar 25 15:00:43 2026 GMT
            Not After : Mar 26 15:00:43 2026 GMT
        Subject: CN=6970540fecbcc53eb0fdc004609fae99715f17d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:86:d8:dd:e6:13:d9:85:9d:66:ff:11:6a:
                    d8:76:94:85:a3:d9:21:7b:23:b1:3e:a3:21:bc:2e:
                    08:0e:a8:9c:c1:a9:f6:20:53:4e:d7:a6:b5:7a:9d:
                    bb:ca:88:ba:85:15:83:97:68:79:9e:c0:bf:0f:01:
                    5f:70:70:8b:cb:70:3e:c8:94:c5:a1:13:44:4b:5b:
                    61:f6:9e:39:21:89:28:37:70:93:56:44:28:25:c2:
                    2e:a3:7c:d0:5a:07:c7:b6:36:9a:71:0e:2e:ff:6d:
                    4d:a3:03:df:11:6e:62:84:f9:a8:e0:df:df:b5:60:
                    3c:0a:40:c9:8e:68:7e:ae:54:20:7c:50:02:8e:ea:
                    f4:1c:60:57:3c:1b:d9:70:3a:d2:60:8d:1c:8e:16:
                    3d:bc:c9:bd:21:ca:f4:c5:18:6e:cb:9a:b4:8d:21:
                    82:73:3a:39:40:83:d4:6b:f4:ae:14:7f:20:60:37:
                    4a:d0:41:2e:90:13:13:e5:11:82:f7:4f:ee:5e:3a:
                    da:5e:15:cd:3f:45:64:0f:07:63:26:74:68:34:68:
                    5f:a9:88:d3:53:19:00:a1:40:4f:aa:93:dc:7d:c3:
                    60:b8:9f:ff:ac:45:96:82:4f:2d:ed:19:ca:03:6a:
                    7a:14:ed:7d:7e:26:b4:9d:87:51:bf:1c:59:95:7e:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:54:0F:EC:BC:C5:3E:B0:FD:C0:04:60:9F:AE:99:71:5F:17:D2
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:0e:62:48:97:d7:84:78:6b:ba:fd:e7:ca:b7:63:60:7f:
         b6:64:2b:f4:0d:82:69:c1:ed:8b:dc:e6:e9:b7:24:91:24:0e:
         2e:98:2e:1a:c8:2d:b8:fb:72:9d:62:0b:20:40:8a:02:c9:f6:
         3c:d3:17:b2:73:d1:dc:37:04:6c:7e:d8:dc:16:d5:f9:57:71:
         71:e3:84:2a:47:71:cb:26:3e:b4:93:59:8f:4e:6b:78:fc:91:
         71:66:07:1d:58:a6:ff:b4:81:5e:b5:46:06:e7:60:98:70:cd:
         2e:62:10:1f:7b:8a:85:ea:41:95:bf:0e:be:09:38:d5:68:ff:
         b8:f4:7b:05:a7:19:90:ec:63:b7:15:89:78:fe:8f:4a:24:19:
         cd:66:70:bf:9e:de:cf:66:65:ec:7f:fd:5f:1a:59:b3:9a:b3:
         f1:13:0a:0e:01:1e:36:83:bd:93:3b:69:fa:63:16:c7:6a:26:
         be:a3:02:75:e1:a3:ad:62:a3:4c:ba:11:6d:29:69:4f:10:cd:
         d7:ea:c0:a8:c4:6a:6f:bd:fc:c9:02:1b:14:bb:8d:b6:c0:e2:
         b8:16:e4:7a:e6:c5:2e:3f:3a:98:5e:a6:e8:61:71:bb:e5:e5:
         94:2e:e9:bc:97:c9:0b:da:67:ea:fe:a9:1e:e5:03:32:a0:26:
         43:61:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:39 2026 by rpki-client