Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          S4uO04NTiSDvhxqPpTguoicYFu64tnN7ZG/ifzoa0Hg=
Subject key identifier:   3E:66:1F:E0:85:15:FE:9F:97:2B:AA:BA:9F:64:0B:2B:C1:C9:82:3C
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       019D258310F8F837ACC6B645A4D14DFEDE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          076C
Signing time:             Wed 25 Mar 2026 15:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:39 +0000
Files and hashes:         1: RLR72YRiJVyCWPKBdtMEO1UXGxo.roa (hash: 5N61eUvI++Qd4nCDGm+6k0H44mOvPhvyKSYwjTVvkeA=)
                          2: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: 7LOwR09u+PwZ24dHhGV30++chDfqCDiR5eYzVLjm2tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:10:f8:f8:37:ac:c6:b6:45:a4:d1:4d:fe:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Mar 25 15:00:39 2026 GMT
            Not After : Mar 26 15:00:39 2026 GMT
        Subject: CN=3e661fe08515fe9f972baaba9f640b2bc1c9823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:32:6d:18:dd:8e:5c:8c:19:77:d5:ba:55:
                    2e:4b:9b:e8:76:90:e1:84:7d:a6:37:89:8c:e0:d2:
                    3a:eb:4f:ce:69:98:fe:de:4e:c3:f9:0f:65:43:e8:
                    d1:e5:7d:fc:45:ad:71:7e:69:6d:61:d9:e4:1e:52:
                    ff:f6:59:41:cf:6d:ce:bb:9e:7f:c1:1f:4d:e3:b1:
                    44:0a:54:ac:86:7e:9e:cd:48:ea:fe:01:4f:c6:be:
                    0b:c1:0e:30:8f:a3:ce:b3:3a:e2:52:f0:a9:97:b3:
                    cd:27:1a:9d:8c:cd:fd:05:6a:42:ec:9a:92:e6:a9:
                    e7:02:dc:8d:ad:65:f1:c4:78:a9:0a:e9:e2:3d:41:
                    fa:23:8d:63:c6:e1:87:23:a9:b3:dc:36:7a:8e:9f:
                    0f:b2:fc:1c:39:75:17:ae:42:93:f4:59:dd:3e:27:
                    6c:f4:b5:0b:c5:08:92:ff:af:0e:17:17:41:bf:78:
                    bd:09:d7:c8:58:d6:d7:14:5e:e0:b0:da:0c:d9:3b:
                    05:7c:f6:2c:f7:67:95:3b:fa:75:43:70:58:32:91:
                    7f:24:67:69:83:6d:ef:78:69:f8:a9:23:43:ae:ec:
                    d5:48:83:5b:12:7d:9c:79:8a:cd:5d:05:08:bd:82:
                    bf:80:7e:bf:15:ec:80:4c:b9:46:16:da:1c:17:3e:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:1F:E0:85:15:FE:9F:97:2B:AA:BA:9F:64:0B:2B:C1:C9:82:3C
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:e5:b1:f1:0b:73:8c:8e:ce:8f:90:ff:25:d7:fe:6d:3d:
         c6:59:6d:7e:ce:a2:ce:75:7b:29:c3:6d:0a:22:ee:e4:5a:d6:
         7c:b2:fd:d3:66:77:5f:3d:ac:ed:5c:4f:65:bf:e1:0e:82:73:
         7d:b9:00:34:48:51:d3:c9:1b:f6:5f:96:d8:ce:c7:30:14:ef:
         ca:f6:82:3a:a8:a6:f5:6e:23:71:7f:19:9e:ad:42:ba:07:e0:
         b9:2a:1f:d5:7e:24:aa:8b:13:79:96:85:58:48:ab:d2:34:67:
         e3:93:6a:f2:0a:e6:61:26:91:d9:bc:85:09:1e:48:1f:e1:bf:
         09:0f:2b:3b:aa:1d:6f:f1:e0:9f:ff:44:35:d2:22:26:88:be:
         52:dd:fd:c8:f1:03:24:aa:cf:e4:85:eb:a8:63:8a:e5:1e:3c:
         a5:7a:87:23:8b:84:c5:42:44:cc:21:19:0a:d1:e9:61:b0:b0:
         f5:6b:6d:d5:dd:5a:b9:0b:0a:32:c5:03:ba:a9:6a:b2:32:df:
         d1:17:cd:09:e6:e1:43:71:d0:81:60:8a:b0:1c:a2:c0:dc:1f:
         57:6e:ca:15:54:d7:05:17:9a:51:32:87:d6:76:73:da:1c:f7:
         5a:ca:7b:c8:86:cb:91:13:a1:5a:1f:b4:c6:4a:77:4a:39:80:
         d3:57:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:15 2026 by rpki-client