Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          UiqWrDuzQl1dV9r8A47dyvFi4B5C3pBMlvBmrqW6xvQ=
Subject key identifier:   31:A3:A9:D1:A3:60:E1:8B:90:1C:06:A9:21:3B:B4:BF:96:35:F1:55
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019D2AE032E183100DFA71763E3DE63799DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          12BE
Signing time:             Thu 26 Mar 2026 16:00:29 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:29 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:29 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: AprPLJmgTwpSwo2xqvf/pdzUgcjvr4zR9BJwELuglus=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:32:e1:83:10:0d:fa:71:76:3e:3d:e6:37:99:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Mar 26 16:00:29 2026 GMT
            Not After : Mar 27 16:00:29 2026 GMT
        Subject: CN=31a3a9d1a360e18b901c06a9213bb4bf9635f155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:57:4e:08:fb:a5:84:66:c4:99:7e:49:76:
                    3a:17:21:1d:95:40:f2:3f:43:98:b5:ac:cd:e2:f1:
                    e0:74:ef:37:ce:62:d2:17:7d:90:24:ab:32:4f:08:
                    d4:6a:6b:d2:63:b0:3c:de:f9:c4:27:e2:1d:41:38:
                    ae:35:fa:24:b7:ea:98:63:8c:06:f0:14:be:e4:96:
                    72:53:be:84:ec:b0:b7:28:81:18:97:97:dc:ba:3f:
                    21:01:64:e6:ea:80:58:11:1c:96:4f:fd:fa:fc:b1:
                    e4:44:00:e5:3e:8c:ce:0c:bf:ad:7a:ea:ec:ad:25:
                    17:07:4f:5a:63:e5:54:b9:be:82:2c:06:57:12:b2:
                    4c:69:0c:5f:26:23:20:21:d9:39:29:5a:d7:4d:91:
                    a4:31:29:04:79:ef:45:c9:19:82:66:cb:79:46:bc:
                    3e:0b:70:a1:50:3e:df:22:70:78:cf:a5:53:3f:f9:
                    92:28:c9:54:1f:45:69:84:b8:83:3d:1b:62:32:b8:
                    47:ca:5e:28:70:7a:6b:70:58:59:cd:22:84:77:5b:
                    8c:e2:1c:82:e5:99:2c:1c:35:06:fc:ad:0d:35:6c:
                    a8:2b:a7:99:37:8c:26:b3:53:00:dd:5f:88:09:08:
                    c1:be:ca:9e:75:e8:2c:1b:b7:a0:3b:c9:13:89:a9:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:A9:D1:A3:60:E1:8B:90:1C:06:A9:21:3B:B4:BF:96:35:F1:55
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:4d:5a:af:01:30:57:63:36:b3:c9:f6:a4:16:4a:b6:d5:
         bb:e1:4a:97:26:fd:9c:33:8a:b0:4a:05:1c:1b:bb:61:60:e7:
         b4:db:bb:cf:ca:51:1d:83:d9:85:0d:a0:38:1a:06:f5:1b:00:
         0e:eb:00:47:f5:46:8f:ea:4a:b1:03:fe:47:ff:e3:c4:4d:2f:
         d4:69:d6:41:a4:61:c8:23:6a:ab:39:5b:0a:20:fd:09:60:9e:
         a4:4f:06:c1:6d:4c:64:3c:5b:90:22:e0:f1:71:c0:88:a7:3c:
         65:14:fa:45:b4:fa:62:d5:27:de:30:d4:0e:4b:62:ed:38:bf:
         7a:0c:4e:d0:7d:67:29:14:12:cf:2f:c8:01:d4:e4:55:3c:29:
         c5:71:05:00:6b:9d:80:6b:8c:36:eb:ae:13:0f:24:69:4a:14:
         48:07:a7:45:9c:85:2c:86:31:bb:6c:1c:07:f3:4a:d9:d5:f9:
         08:59:57:a1:e7:d9:33:40:30:b4:8b:c0:e4:37:b8:6c:16:d0:
         e7:72:89:ae:02:95:06:67:36:04:dc:78:e1:12:3f:0e:65:bb:
         cc:1b:b6:73:c9:40:57:5a:1e:07:9d:22:58:65:d1:85:94:84:
         6d:c2:43:23:47:9d:39:83:ec:b3:cc:d5:e7:b2:71:47:15:35:
         9b:cf:df:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4DLhgxAN+nF2Pj3mN5ncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm
MTRiMWUwHhcNMjYwMzI2MTYwMDI5WhcNMjYwMzI3MTYwMDI5WjAzMTEwLwYDVQQD
EygzMWEzYTlkMWEzNjBlMThiOTAxYzA2YTkyMTNiYjRiZjk2MzVmMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pBXTgj7pYRmxJl+SXY6FyEdlUDy
P0OYtazN4vHgdO83zmLSF32QJKsyTwjUamvSY7A83vnEJ+IdQTiuNfokt+qYY4wG
8BS+5JZyU76E7LC3KIEYl5fcuj8hAWTm6oBYERyWT/36/LHkRADlPozODL+teurs
rSUXB09aY+VUub6CLAZXErJMaQxfJiMgIdk5KVrXTZGkMSkEee9FyRmCZst5Rrw+
C3ChUD7fInB4z6VTP/mSKMlUH0VphLiDPRtiMrhHyl4ocHprcFhZzSKEd1uM4hyC
5ZksHDUG/K0NNWyoK6eZN4wms1MA3V+ICQjBvsqedegsG7egO8kTial+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGjqdGjYOGLkBwGqSE7tL+WNfFVMB8GA1UdIwQY
MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct
MDg0Y2NhMWM4NjIzLzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz
LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvVNWq8B
MFdjNrPJ9qQWSrbVu+FKlyb9nDOKsEoFHBu7YWDntNu7z8pRHYPZhQ2gOBoG9RsA
DusAR/VGj+pKsQP+R//jxE0v1GnWQaRhyCNqqzlbCiD9CWCepE8GwW1MZDxbkCLg
8XHAiKc8ZRT6RbT6YtUn3jDUDkti7Ti/egxO0H1nKRQSzy/IAdTkVTwpxXEFAGud
gGuMNuuuEw8kaUoUSAenRZyFLIYxu2wcB/NK2dX5CFlXoefZM0AwtIvA5De4bBbQ
53KJrgKVBmc2BNx44RI/DmW7zBu2c8lAV1oeB50iWGXRhZSEbcJDI0edOYPss8zV
57JxRxU1m8/fIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:42:34 2026 by rpki-client