Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          FyevbjpThWNXnkibKglDsDqeWNtsOmjPvYQM1Mg4tEA=
Subject key identifier:   C4:D2:DD:3F:90:20:CC:6C:E8:9F:8C:08:C5:EC:41:8B:B4:59:FE:DE
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019E1E6C707C499360D22C7EC5A68FEE1392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1123
Signing time:             Tue 12 May 2026 23:01:23 +0000
Manifest this update:     Tue 12 May 2026 23:01:23 +0000
Manifest next update:     Wed 13 May 2026 23:01:23 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: LRvsuke/Siiw1SSt/8FDDPu9RdDcyXPl1jSB8HjD1XU=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:70:7c:49:93:60:d2:2c:7e:c5:a6:8f:ee:13:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May 12 23:01:23 2026 GMT
            Not After : May 13 23:01:23 2026 GMT
        Subject: CN=c4d2dd3f9020cc6ce89f8c08c5ec418bb459fede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:52:68:07:04:1a:44:d7:7f:c1:b5:0d:9e:
                    c7:84:49:3e:7e:63:e3:4c:b7:e3:14:00:93:48:f2:
                    36:51:25:f9:28:c0:29:c2:43:c9:31:7f:96:08:4f:
                    40:86:ec:62:9a:37:61:0d:04:44:64:10:76:b0:81:
                    fa:ab:1d:ca:dd:78:d5:42:27:b8:98:a1:dc:00:97:
                    c7:24:30:cc:ac:30:71:04:62:99:ac:6f:1d:7c:20:
                    7c:3e:00:7b:aa:f1:dd:5b:67:a8:a1:6e:aa:d9:aa:
                    cb:f4:25:53:b9:cd:12:93:35:06:28:74:b1:68:d0:
                    88:c3:c2:0e:ce:68:1f:29:bf:22:07:3c:7a:78:c2:
                    20:dc:65:6a:81:c5:90:0b:a9:cb:49:01:4c:c0:cf:
                    9c:2f:50:82:2a:c5:09:25:6e:1e:e8:e4:e0:0b:c7:
                    cb:5f:47:1b:c0:a5:11:30:f3:e0:3a:cb:1f:e4:0d:
                    11:3c:78:e1:9e:62:2a:79:78:95:e2:e6:40:69:18:
                    64:31:65:e5:68:7e:ea:d2:b2:9d:fe:88:67:b3:a3:
                    48:16:e7:f6:e2:7a:eb:5d:8f:f6:94:7e:6b:3c:52:
                    57:47:3e:0a:78:af:bd:60:1c:77:99:7d:63:ca:9b:
                    4a:c1:7d:82:0f:66:b5:97:f0:bf:6b:07:01:9a:5b:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D2:DD:3F:90:20:CC:6C:E8:9F:8C:08:C5:EC:41:8B:B4:59:FE:DE
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:02:5f:df:f8:bf:3b:9a:54:54:91:cd:37:07:24:f7:0c:
         7a:3a:66:b7:05:16:ac:4e:a8:08:73:c8:18:35:f5:c7:b9:57:
         4a:b5:44:12:65:06:1a:e2:3c:e7:88:a1:67:54:fc:18:56:94:
         c1:fe:8f:53:32:4f:85:c1:06:86:ae:eb:5a:d5:43:73:79:f3:
         e7:04:77:e0:2d:70:52:08:fa:9e:f5:f7:bc:84:a5:9a:16:7a:
         8c:e6:44:c2:5d:6c:d9:25:d8:e3:d4:a6:c2:cd:a8:c9:03:0b:
         41:83:87:1d:aa:eb:3d:4d:36:71:48:89:22:ff:4f:29:bb:de:
         45:b1:3e:fd:0d:c9:77:26:23:14:a7:8c:d7:41:77:73:ee:a6:
         fc:91:10:92:43:26:fb:38:a8:bd:f0:04:3a:a3:d5:e4:b1:94:
         10:f6:f4:d7:f3:25:64:9e:e0:9e:74:6c:df:ff:0e:b4:a7:54:
         7d:31:d4:e8:3f:74:79:0a:bb:1a:20:12:a4:ff:33:55:c9:1b:
         29:a4:96:2b:6a:14:2c:0f:99:8c:4b:b9:e7:d8:56:11:4a:71:
         04:f5:de:46:f3:d9:e5:30:33:7f:20:fa:ef:4c:31:c3:e4:d8:
         b6:e0:f1:b2:db:a3:8e:b4:2f:c3:c3:63:2d:a8:6c:04:53:c1:
         b0:46:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:46 2026 by rpki-client