Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File:                     EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier:          VxKMT7XpzqWDcH5euwqVDQ/ZYZV2+DJXlzMkKX2saIg=
Subject key identifier:   2B:1F:BA:6A:15:0C:C2:C8:3C:96:70:20:F0:10:BF:44:21:FD:8F:EE
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer:       /CN=122a541caf138341bd32798940de206052910341
Certificate serial:       019D26CCAB3B18191213F278766CF6510E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number:          0F08
Signing time:             Wed 25 Mar 2026 21:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:40 +0000
Files and hashes:         1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: tHQg8n2oniF1PWdWSBryTzTff1qh5Kro2qo4BnANRG4=)
                          2: XssTGMPxxOCZ2WxNfY8_hLsfUHo.roa (hash: bz8eC8kW/3X8iLzaEmg9hdIfrTofSiP4NWhs554tpoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:ab:3b:18:19:12:13:f2:78:76:6c:f6:51:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a541caf138341bd32798940de206052910341
        Validity
            Not Before: Mar 25 21:00:40 2026 GMT
            Not After : Mar 26 21:00:40 2026 GMT
        Subject: CN=2b1fba6a150cc2c83c967020f010bf4421fd8fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c7:58:e4:f7:9d:f3:3d:52:92:da:47:e6:25:
                    5d:39:67:62:fc:85:f9:af:15:8b:3d:45:54:6e:a6:
                    ab:10:6f:92:6d:6e:08:9e:d2:49:70:dd:f0:17:e7:
                    bb:93:66:db:81:bb:37:15:22:11:46:bd:f7:15:bb:
                    59:54:4e:fd:67:f1:da:66:df:91:90:38:90:09:94:
                    c5:1d:7a:3a:54:5e:0a:06:d4:e7:8f:a6:98:26:b6:
                    2f:87:79:f5:a0:ea:ee:ad:4f:58:1c:4a:77:fa:14:
                    09:cc:18:3b:d6:9a:09:92:bd:7e:f4:4a:e1:90:9d:
                    96:bf:9f:7f:3b:6e:a4:c1:2f:f8:89:1b:89:f2:d0:
                    08:07:49:db:0e:29:13:16:ae:43:f4:f9:c0:84:b7:
                    09:7c:40:2c:d6:44:d3:55:60:26:f3:cf:f3:33:95:
                    68:90:ea:04:65:76:c0:4e:9c:5a:d3:d9:3f:3c:18:
                    5c:47:49:13:6c:4e:c8:fd:42:b9:c4:fb:ff:81:39:
                    0d:4a:e6:0e:da:ee:82:03:d4:cc:c8:13:a7:3c:a8:
                    6f:ba:5a:1d:a0:43:04:e6:8e:43:fc:98:a7:15:16:
                    82:58:23:36:7e:10:74:63:93:ca:0d:d0:a4:1e:86:
                    80:e1:00:a5:23:2f:b3:5a:7c:78:91:23:b9:2a:41:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:BA:6A:15:0C:C2:C8:3C:96:70:20:F0:10:BF:44:21:FD:8F:EE
            X509v3 Authority Key Identifier:
                keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:91:60:ee:67:5d:7a:22:e0:f0:38:f0:b9:7c:45:f4:cc:3c:
         1b:12:c3:31:24:c3:55:bc:34:6b:3c:d1:b9:5c:66:d9:39:31:
         69:2f:43:4e:74:97:35:49:1b:00:50:1e:b5:1b:d1:36:a1:03:
         85:53:89:2e:47:30:5c:f6:1e:2b:d6:d5:d9:a2:7f:6a:a0:32:
         51:08:ca:a1:01:fb:50:df:ae:46:93:3e:b1:e1:ec:cc:72:f5:
         38:0d:8e:0e:ea:44:a8:3e:4f:dd:e9:57:9d:0b:81:72:e0:a4:
         93:b7:53:47:7c:4b:b6:d3:a7:69:d9:73:a1:0d:96:89:3a:45:
         5e:6c:35:40:cb:e6:b4:5e:b6:9f:83:04:11:f0:c4:c9:01:45:
         26:80:bd:d9:99:c0:6a:86:52:69:b4:ed:d7:05:b9:57:60:6f:
         1a:52:2d:25:99:fc:99:b4:f2:26:00:20:e0:5b:08:96:8b:04:
         b7:29:0c:16:00:07:a9:89:96:9a:04:18:06:96:61:58:58:46:
         20:3f:a3:1f:e5:3a:6e:4d:b8:d0:60:69:78:00:25:0c:2d:d5:
         bb:c6:02:88:0d:d6:5a:30:43:f9:b6:b2:13:e3:46:b4:1d:fb:
         05:fd:c4:b4:7c:c2:89:6b:a0:c6:1a:e9:15:f7:b3:1f:c0:f5:
         67:4f:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:47 2026 by rpki-client