Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          UQfMW1eftqioZP2wlv+y4ZLvn2ct6uljATMqj9sIZPM=
Subject key identifier:   08:09:4F:E4:C9:6F:2B:46:3B:E9:1B:C2:B4:CC:AB:F7:95:E1:1C:21
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       019D2515BFA2AFD7612EBE39E8A2EA8AF91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          5F
Signing time:             Wed 25 Mar 2026 13:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 13:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 13:01:15 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: w3h0vj8kOin5oET2kIi1Q12mGls5tBP15Ni5ZeG+Ves=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:15:bf:a2:af:d7:61:2e:be:39:e8:a2:ea:8a:f9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Mar 25 13:01:15 2026 GMT
            Not After : Mar 26 13:01:15 2026 GMT
        Subject: CN=08094fe4c96f2b463be91bc2b4ccabf795e11c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:c1:b6:e1:fb:61:7b:ed:6c:5e:ce:cb:66:
                    a2:3a:4d:2c:96:e9:13:2e:ef:8d:93:09:e9:02:2d:
                    ab:bc:62:d1:b2:64:9c:1b:5d:c2:ec:a8:39:6e:4c:
                    aa:7e:ef:99:52:b8:c5:34:e3:cc:8f:53:65:69:8b:
                    b2:83:4e:fb:5e:e4:2b:9e:d6:46:23:2c:7a:80:9c:
                    7b:48:bd:83:c5:9e:5a:86:00:7a:90:6a:79:ed:3f:
                    7e:56:12:56:18:99:e7:51:25:43:6f:de:4a:b0:81:
                    e5:c6:5a:36:be:b9:15:69:77:66:02:1d:17:1f:fa:
                    1f:c9:1f:20:ac:7d:8c:47:9b:0d:af:2e:27:ec:bc:
                    7c:50:88:a0:c2:b1:5a:f2:7e:7c:75:77:1c:0e:31:
                    ed:c9:14:a1:a1:00:a9:72:fc:c7:c8:0f:54:6c:50:
                    07:cd:10:49:fd:77:9b:03:45:ce:21:13:6b:cd:e5:
                    d1:d0:42:87:7b:1c:a0:25:1a:8d:ef:67:8a:64:36:
                    8c:99:db:bc:18:42:20:72:f7:6d:a0:7a:d6:52:88:
                    8a:6a:ff:23:71:e5:27:49:4b:5b:94:94:38:e4:a9:
                    ef:c3:29:43:e0:d6:10:a6:7b:e1:b6:3a:b3:84:c5:
                    da:8f:2a:21:83:5d:b4:fa:e9:8c:60:ce:ea:4a:1f:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:4F:E4:C9:6F:2B:46:3B:E9:1B:C2:B4:CC:AB:F7:95:E1:1C:21
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:a7:16:8e:fe:91:69:1c:e3:6c:a1:df:f5:67:78:05:aa:
         6e:d7:a6:d4:c3:33:50:a0:46:e0:60:32:52:3b:3e:82:e2:3c:
         0d:64:b0:32:7e:3b:c0:11:60:df:b5:0c:28:f5:fa:5d:c4:2d:
         a0:6e:83:18:58:74:55:87:c4:cb:72:b9:68:8f:90:1b:d5:63:
         16:ac:4f:a0:48:05:ad:05:1e:67:67:41:d3:77:f7:d5:10:6a:
         25:fc:d6:79:af:0d:c9:92:ea:45:94:e7:77:97:5c:ee:d5:5c:
         bc:57:8c:be:58:38:0d:c4:00:f4:5d:af:8f:6b:8c:3f:6e:6d:
         5b:e1:34:c5:2c:a9:47:d9:5c:2d:ce:b0:78:11:4c:66:24:8d:
         f1:6c:49:c2:dd:75:bd:04:9d:e0:02:74:17:84:c9:76:a8:c8:
         7f:67:bc:ef:98:f8:31:e4:a9:c0:17:22:3e:fb:11:31:26:ea:
         1c:16:8c:97:e7:18:f3:36:5f:d7:71:b3:97:d8:80:c6:77:e9:
         27:12:1e:2f:84:01:11:da:26:5b:3f:89:11:33:62:a1:39:95:
         84:fc:bc:75:80:ef:65:9e:d2:5b:19:98:50:1b:87:f1:d9:0c:
         9b:de:0f:d7:b8:9e:dd:b6:f0:44:31:22:e6:0a:31:e2:2a:1f:
         31:9c:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:22 2026 by rpki-client