Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          TpciFhr1Ywwlulx+K7OoQQ8OuID1u29C2HccexwhoAo=
Subject key identifier:   1B:34:4C:3E:0F:A2:E7:E6:FA:FA:4A:54:E5:F1:01:FB:7B:77:CC:AC
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019F8F7F1706AA25136DB7FE3483CC08D820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          11E3
Signing time:             Thu 23 Jul 2026 15:01:38 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:38 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:38 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: yixuCOipYn6zy+am8MxdnwFjmyxatfHL8g8m/0KqB6c=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:17:06:aa:25:13:6d:b7:fe:34:83:cc:08:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jul 23 15:01:38 2026 GMT
            Not After : Jul 24 15:01:38 2026 GMT
        Subject: CN=1b344c3e0fa2e7e6fafa4a54e5f101fb7b77ccac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:2c:a7:8c:19:58:0e:2f:43:21:2d:af:59:
                    7e:e0:27:45:b2:18:19:dc:e0:fe:6e:80:b2:9a:79:
                    25:66:20:52:ae:fd:ae:98:e7:b7:a4:d6:da:2c:8f:
                    6f:5e:80:a6:35:3f:e4:98:f4:24:6b:76:30:6a:8b:
                    d2:3e:17:c5:92:34:a9:66:d4:c6:df:18:bc:85:d2:
                    e7:de:16:a8:ee:1a:59:e0:75:d7:dd:09:16:e8:a6:
                    e9:2a:3e:8d:47:d7:99:57:3f:cc:07:9a:21:78:29:
                    30:2e:e9:29:bd:10:aa:4a:95:d7:2b:c3:dd:73:f1:
                    3e:fa:12:98:42:23:28:65:95:f6:15:e2:bc:03:2c:
                    b1:aa:dc:fd:3b:f3:29:4b:a4:ad:a3:ed:cf:86:b3:
                    35:1e:12:1d:64:17:c5:73:18:2e:dc:10:63:2c:59:
                    9a:c5:8d:b4:6a:6c:e2:ec:be:dc:29:5e:cc:28:e3:
                    35:ac:0b:be:e8:0d:17:d7:1a:a4:4c:02:b1:d5:1b:
                    ff:e2:24:4a:18:25:d2:e0:ab:ff:a9:29:c8:96:57:
                    2e:e0:4a:b0:e2:46:ed:c3:1a:11:3f:18:29:6e:74:
                    72:e1:97:0e:63:39:b3:3d:94:24:66:fa:0e:a8:2f:
                    73:74:53:5f:31:19:02:90:a5:ce:38:b4:97:1f:90:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:4C:3E:0F:A2:E7:E6:FA:FA:4A:54:E5:F1:01:FB:7B:77:CC:AC
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:c8:7c:6d:d1:fb:ce:d6:8d:e8:2a:92:69:f2:ee:ef:28:
         27:e6:cc:8f:a0:b8:e2:7d:12:19:a1:fd:85:71:ae:4c:67:9c:
         ea:4d:38:10:fa:e4:a6:67:f9:82:0f:0f:c0:2c:49:0f:b9:3c:
         04:f5:38:b0:6a:46:af:07:ba:41:1d:83:bb:1a:71:61:2d:65:
         50:86:11:c3:f2:b1:af:5f:19:c5:94:e4:48:51:1b:8d:5a:27:
         74:41:5f:79:c1:c1:8e:3c:3e:2f:43:3d:da:14:73:6c:77:01:
         45:5e:18:85:7c:26:19:70:36:67:d5:00:26:2d:89:1a:30:61:
         4b:7f:82:13:94:1e:88:8c:79:c2:f2:51:7f:34:01:66:80:6b:
         9a:56:eb:1b:e5:c6:f2:02:08:2c:49:70:50:ee:0f:37:c8:f9:
         83:ee:28:23:13:4d:12:dd:6e:20:c9:95:88:23:51:d6:ec:b1:
         6b:16:41:de:d5:1a:9e:5c:c2:f4:5d:49:12:72:59:40:7b:22:
         64:18:ed:db:07:13:6a:71:3a:87:57:23:3d:8d:0d:f5:86:33:
         8b:88:ee:df:98:ad:31:d8:1b:10:a0:b3:98:bf:65:a4:bc:09:
         3d:fa:2c:0a:4e:88:d3:62:ec:7c:2f:80:19:3a:15:3c:ee:2e:
         2e:3a:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:42 2026 by rpki-client