Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          FrBao3Pr4QC2h1HJt9sukn0eZUE6y8WKKE3Qn9Bq/iU=
Subject key identifier:   C8:A6:C4:22:05:7F:B4:11:04:64:72:29:D8:BE:A3:99:E2:14:7E:17
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019D273AD4A2608EF16E2B519E719FE48183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 23:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:00 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: 9MzdU3e3GpOzQUjXRAwDXhSif7mAwuOcCV4K09zu/ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d4:a2:60:8e:f1:6e:2b:51:9e:71:9f:e4:81:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Mar 25 23:01:00 2026 GMT
            Not After : Mar 26 23:01:00 2026 GMT
        Subject: CN=c8a6c422057fb41104647229d8bea399e2147e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:7b:7b:c9:cf:91:02:0d:24:62:b2:32:6d:
                    5c:87:00:d2:b4:6a:0b:4a:e3:37:11:99:0d:e3:40:
                    8d:a8:2e:bb:04:72:02:45:78:09:ba:a1:ae:6e:8d:
                    24:a0:df:92:25:90:ce:e0:ce:57:8a:80:84:c1:14:
                    41:fa:82:f1:1b:5d:bb:83:a0:2f:a3:df:e6:77:82:
                    ec:a1:5c:1a:d6:1c:1d:a4:27:72:7a:f6:2b:b0:d3:
                    5e:22:b4:54:f7:09:78:3e:05:9b:80:65:56:9f:b7:
                    33:f3:1f:74:9b:15:e2:2e:38:27:41:2b:a2:9e:ff:
                    cb:9f:bc:68:de:06:93:8f:37:16:5c:b7:8a:04:2f:
                    64:9d:29:0c:3a:90:18:bb:1f:ff:00:9c:6f:3a:e6:
                    98:b0:70:5f:88:bb:e8:d8:81:4f:8d:ee:88:fe:6e:
                    c1:8b:3d:41:1c:cd:91:de:54:5c:0d:29:71:96:d0:
                    5c:e8:b1:2b:39:11:e2:79:7a:0f:b2:30:60:5b:de:
                    dd:fa:e0:6a:9b:d5:d5:24:65:12:2c:2e:3d:ad:c9:
                    73:aa:9d:88:fa:34:30:8b:ef:e9:3d:ff:a0:72:cd:
                    88:6b:bb:08:e6:ed:2f:8a:6c:87:9f:1a:bd:d9:6c:
                    fe:d8:b9:5e:9c:97:2e:86:80:ca:6f:2d:87:cc:94:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:C4:22:05:7F:B4:11:04:64:72:29:D8:BE:A3:99:E2:14:7E:17
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:c0:a7:39:84:17:3f:54:df:b7:e4:1e:b1:8e:f2:85:20:
         e0:3f:6f:70:c3:3d:6f:a3:f4:ba:83:17:88:1a:7e:fd:aa:e3:
         78:dd:52:e0:08:c0:d0:22:31:39:97:1e:74:a7:c4:af:fc:96:
         86:09:84:16:2c:1a:3b:a7:61:fd:f9:b7:c6:c7:06:09:ea:4d:
         38:19:75:80:69:af:16:f0:a3:07:f6:60:83:cd:f7:2c:08:c0:
         05:a5:6a:d2:40:d0:8f:3c:3b:eb:19:7c:da:6e:5d:c0:72:eb:
         3e:1c:f3:03:c4:0b:2e:30:ef:1a:65:ba:cf:13:f5:c8:cf:1c:
         f2:a4:8f:7f:8b:f6:38:86:25:24:0a:b0:60:2a:5c:e9:67:8e:
         5b:54:24:6a:7d:67:62:c1:b9:e1:8e:c0:ef:9b:4d:bf:9f:b6:
         d4:2d:c8:24:33:bd:85:a4:40:d7:57:0c:1b:32:8b:c9:c9:7e:
         e6:28:2c:66:de:3f:81:ed:97:e5:91:87:b7:5f:06:8a:59:52:
         80:29:25:59:7c:d9:81:c4:2d:52:66:49:c5:55:78:5f:7b:9c:
         83:c1:cf:d9:ed:c1:34:88:19:b1:51:fd:49:87:38:4f:23:32:
         c3:d1:6d:06:e0:59:42:bb:05:9c:01:95:36:73:d8:2b:eb:a8:
         94:50:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:49 2026 by rpki-client