Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          9FMvhhcszpKy72xFuFoGNVTo+Ey+dybdC1UNK7BChqA=
Subject key identifier:   E4:22:72:E0:A4:E8:7D:41:A0:F6:6E:13:FE:05:6E:43:AE:D9:86:BA
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       019D277230A987FEAE74DEF37A7208465B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          172F
Signing time:             Thu 26 Mar 2026 00:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:28 +0000
Files and hashes:         1: MwbZOqIggyrSHU4PZ4grNgTv7Vg.roa (hash: PMNvYA3uE+IknWsNwKXqnO+LeFyIQwpnp1UXQEbVx60=)
                          2: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: tT9FC+/5NGTOhxgTQzlaAfPrzdjCNPcKUKcytb6K/qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:30:a9:87:fe:ae:74:de:f3:7a:72:08:46:5b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Mar 26 00:01:28 2026 GMT
            Not After : Mar 27 00:01:28 2026 GMT
        Subject: CN=e42272e0a4e87d41a0f66e13fe056e43aed986ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9b:89:12:63:d5:59:bf:1c:8e:b5:ee:d8:5b:
                    4e:60:1f:f3:16:49:1a:e6:88:94:55:57:ab:e1:84:
                    ea:e8:43:9a:ad:77:7f:46:1c:d7:8c:59:0d:8e:cd:
                    27:e8:95:2a:41:ec:05:7a:f1:37:51:ff:e6:77:b1:
                    c7:77:93:a9:8d:c8:c1:0b:50:37:05:4c:f3:ca:dd:
                    b6:d4:07:d8:71:7b:34:79:24:4f:ee:7d:a4:74:56:
                    9d:b6:e3:e2:fc:f6:3e:95:b7:86:f3:1d:07:0a:17:
                    c5:e4:6b:3b:04:7f:fd:e0:71:fe:ca:7c:e2:58:f1:
                    01:c2:41:12:b6:ec:67:4a:37:ba:c6:d6:31:8b:74:
                    41:88:71:19:44:2c:b2:d0:23:8d:51:dd:1a:e1:61:
                    13:ff:74:d6:ce:10:d3:7b:71:1b:34:fe:19:ac:78:
                    fb:c9:8d:84:46:df:72:cb:1d:ad:2d:04:0a:8d:43:
                    45:05:cd:70:24:f5:5d:c0:a0:ea:09:40:56:f3:f0:
                    7a:01:ed:ed:59:13:cf:e0:a4:e5:a7:ad:60:5f:32:
                    61:e3:c8:96:8c:a7:60:7f:68:5c:e5:07:05:00:0a:
                    8c:91:81:8f:b5:10:56:8a:88:91:20:70:8a:a8:ed:
                    1b:50:9b:22:76:c2:46:91:70:07:86:2c:b7:f6:d2:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:22:72:E0:A4:E8:7D:41:A0:F6:6E:13:FE:05:6E:43:AE:D9:86:BA
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:7c:6e:cf:c6:2c:24:21:2f:ea:30:d8:4e:56:d2:f3:80:
         0c:7a:cf:db:97:65:a6:56:7d:51:6a:be:7d:d6:fc:3c:05:45:
         f2:4d:66:bc:22:50:92:f3:73:a9:90:8b:bf:50:9e:82:4a:43:
         99:7f:08:af:2a:57:71:b8:88:ac:2d:b4:c7:38:b2:13:0e:34:
         4e:03:41:90:c2:6f:e4:dc:dd:2d:3d:14:36:49:b4:92:3d:7a:
         75:9c:dc:56:33:39:52:9c:26:76:b1:cf:77:31:a3:49:01:5d:
         55:7e:37:fc:fc:c7:cf:7f:61:5e:67:a1:20:f1:62:1b:30:e4:
         6f:c3:4f:a3:48:e8:de:d9:9a:24:aa:34:82:3b:ef:66:09:3d:
         bc:dd:66:4e:17:2e:64:97:3d:ef:1e:26:8f:9c:05:d6:87:f6:
         1d:0c:5d:19:26:fe:76:c7:9f:b2:fd:dd:77:2d:4c:b9:a2:c3:
         51:ba:7c:01:da:4d:49:52:b2:49:9f:7c:8b:f6:b6:1a:8f:f5:
         45:bb:97:4d:77:25:20:4f:9f:a2:ed:e0:7c:11:ee:e1:e8:1b:
         0b:d1:2a:9f:b9:72:33:b3:77:f5:16:76:0c:95:9e:22:b0:49:
         8a:38:2b:69:8f:9a:79:54:8e:c4:93:74:18:26:d0:ce:67:80:
         4a:cf:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:41 2026 by rpki-client