Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
File:                     eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json)
Hash identifier:          sywh1hOiNtLIVacCDkxqX3y+qnoGLEq2GmMD50qryHo=
Subject key identifier:   16:83:24:22:42:BA:5E:C8:BA:7B:78:D2:DF:E9:42:17:55:6C:4A:6D
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Certificate issuer:       /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial:       019D284E5EA741653220106D91654C60D32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 04:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:57 +0000
Files and hashes:         1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: /Wta00ZD/RTUOR/KL2PlQnqBgP0J9WFKm+kq4p/PEpM=)
                          2: hvRhuS7UdwiN-bqkZM01GqNPwsc.roa (hash: 2Dz+wS7Q0ZwRnrr5BmP3fM2iHAZ/irPyOUJZmKoQHhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:5e:a7:41:65:32:20:10:6d:91:65:4c:60:d3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
        Validity
            Not Before: Mar 26 04:01:57 2026 GMT
            Not After : Mar 27 04:01:57 2026 GMT
        Subject: CN=1683242242ba5ec8ba7b78d2dfe94217556c4a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:b2:56:ba:45:1f:5e:52:ae:91:92:a7:c7:
                    9e:6a:4e:77:e3:f9:a7:f7:71:90:48:60:a4:fb:11:
                    da:3f:ce:53:7e:38:a7:3d:9a:68:ab:79:e6:28:86:
                    a1:04:12:28:39:ad:21:f4:49:dc:db:2b:54:cb:86:
                    1a:b6:47:e5:ef:d0:98:f1:44:2e:96:8c:d6:50:71:
                    a6:42:2a:37:60:7c:c2:03:d5:6b:d2:f2:0d:4b:40:
                    d2:92:06:16:d5:48:38:bc:c6:6c:3f:8a:be:e8:27:
                    b6:86:65:6c:79:b6:8c:6a:49:02:ba:69:d0:61:db:
                    78:4f:f7:8b:4c:3c:a6:d5:94:38:bb:45:3a:4d:c9:
                    88:dc:7f:b7:e2:8b:b1:8e:b7:10:98:1b:01:39:fa:
                    eb:22:50:15:e3:9d:5f:ef:2f:e1:4c:af:dc:98:6a:
                    03:93:3e:9e:2d:93:fe:0e:da:3a:36:ab:b9:6a:12:
                    5b:8b:9b:c8:ec:d6:7b:ec:42:94:01:12:6e:eb:57:
                    00:ab:7a:ec:8d:f2:cc:ec:96:93:cf:9d:13:02:0d:
                    bc:e6:4c:33:c2:98:a2:ed:13:fd:49:07:dc:31:23:
                    8d:67:89:73:6f:4e:de:66:da:f0:11:6e:5f:3c:34:
                    0e:be:d1:93:50:20:47:c4:c6:c9:b9:46:fe:94:09:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:83:24:22:42:BA:5E:C8:BA:7B:78:D2:DF:E9:42:17:55:6C:4A:6D
            X509v3 Authority Key Identifier:
                keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:c8:9f:d3:60:46:44:a4:13:18:ad:a7:6f:72:62:fa:c0:
         23:9b:94:a8:40:04:1f:67:4e:6a:bf:71:db:b6:e2:99:4f:b4:
         ce:50:8f:bb:04:4e:e9:20:ca:54:57:d1:51:88:ed:5a:47:9e:
         1e:ed:c1:2a:ba:7f:51:94:e2:4b:d9:b2:e1:e2:e8:47:de:62:
         41:1d:8f:ef:0c:62:ef:b0:17:69:37:a6:6e:9e:64:48:96:25:
         33:cd:11:85:f5:2a:79:61:d9:f3:66:18:80:6b:33:79:67:b2:
         8f:01:34:01:2e:61:bc:e1:a1:bd:80:f1:5b:4e:af:df:cf:e9:
         9d:9f:c9:51:a0:9e:41:ec:2d:b1:18:25:ca:4f:87:be:5d:db:
         72:10:67:d2:60:02:3f:28:f8:f7:77:a1:df:95:f1:02:d3:72:
         3f:a5:81:71:6e:03:9f:d8:5c:6a:5a:6a:f3:c3:78:bc:92:4d:
         c3:9a:f4:68:9a:c1:2a:ad:a4:3c:70:56:2c:2d:c4:82:53:7a:
         8e:ba:f6:0a:80:af:13:5f:1f:58:23:77:77:09:97:61:89:87:
         e3:97:ff:86:14:eb:6a:22:bc:2f:88:31:3d:31:3d:56:91:5e:
         fb:10:c9:aa:85:b3:c5:e8:cd:71:37:28:b9:02:14:cd:17:07:
         e6:1d:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:21 2026 by rpki-client