Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
File:                     eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft (raw, json)
Hash identifier:          NPfN2BKRjW0pgUnQmweKUB/YdwpKv0lgH05AAZgN3XM=
Subject key identifier:   6A:0A:86:4C:E1:37:A3:BB:09:41:B6:EF:8C:4D:C1:11:CD:05:5A:33
Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D
Certificate issuer:       /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
Certificate serial:       019D258373BAC52F4599FC8137D8BACD2A5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
Manifest number:          04E9
Signing time:             Wed 25 Mar 2026 15:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:04 +0000
Files and hashes:         1: eXBL0IY8mmgnQLW1xI74swf6S6A.roa (hash: HsmXrftQWUw6hDHYWb3a78tIwnu4xuqq368XPLs6+1E=)
                          2: eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl (hash: Wo+cW5Mv812ZYAT/r69qOhQdKCGDRRCr369km1eUy0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:73:ba:c5:2f:45:99:fc:81:37:d8:ba:cd:2a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d
        Validity
            Not Before: Mar 25 15:01:04 2026 GMT
            Not After : Mar 26 15:01:04 2026 GMT
        Subject: CN=6a0a864ce137a3bb0941b6ef8c4dc111cd055a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:cf:d2:c4:b3:70:b0:56:16:c5:a1:4c:b4:
                    e6:99:35:9f:58:08:77:26:b3:ad:f2:4f:65:50:df:
                    ba:e0:3d:34:e2:dc:69:3a:00:5a:a0:d3:35:75:e4:
                    b9:83:0f:1e:f2:81:13:5e:e6:df:86:00:d0:47:8e:
                    f4:2a:e6:5d:4f:d8:f8:6c:49:5c:d4:c5:ed:58:d3:
                    77:9c:0f:47:14:e5:ae:78:9f:e9:f7:04:12:5e:f1:
                    ba:a4:e8:b1:d5:a6:6f:18:8c:2c:7d:8b:e2:59:8b:
                    17:b2:65:d7:dd:e6:de:99:88:d8:06:5b:d3:71:fc:
                    a0:45:c3:28:48:9b:b2:d6:b8:4c:82:b3:d4:88:c1:
                    7a:2a:dc:59:c6:d2:5b:fc:7d:87:d5:9a:f3:52:2f:
                    ba:1b:b0:0a:3b:53:bf:e3:59:05:ec:11:e3:40:9f:
                    40:5a:63:cf:d8:53:c8:a5:2f:d3:67:d7:2c:74:e1:
                    9a:d2:32:5a:71:57:56:95:9a:87:a5:6f:21:1b:ae:
                    ec:c8:64:91:f3:8b:ed:2e:ec:b8:54:52:0d:cb:a1:
                    6d:7d:d8:db:a0:df:9a:c7:1f:99:96:36:e4:1b:1c:
                    42:de:d2:d2:14:99:8a:5e:d3:97:8f:d1:c5:5d:05:
                    94:6e:99:0e:b1:d5:65:3c:75:77:15:0c:a0:c2:bd:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:86:4C:E1:37:A3:BB:09:41:B6:EF:8C:4D:C1:11:CD:05:5A:33
            X509v3 Authority Key Identifier:
                keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:4f:15:19:3a:7e:3e:8b:7a:86:ee:9d:46:79:6c:b6:62:
         bb:8a:5f:5f:15:50:f3:84:e0:ef:65:5a:0f:07:03:63:5b:cd:
         3d:bb:0a:96:41:a7:23:58:ca:4a:78:40:95:1f:fb:31:b2:9c:
         da:e6:ad:ef:a3:17:4d:cd:67:0a:03:44:db:72:b5:e2:d9:a4:
         b9:f1:8e:47:7f:d1:19:8e:a7:5a:dd:81:84:94:bd:00:7f:c1:
         7c:5d:12:bc:09:f0:1d:b4:6a:f4:b5:08:5e:4f:f3:08:56:7e:
         fe:74:a5:0c:ec:2e:0b:ee:89:11:8e:d5:67:7a:2a:6d:97:9d:
         75:c5:de:f1:b2:94:1c:fa:cc:e7:48:91:ff:96:56:3f:8d:3d:
         7c:4b:b6:a6:62:7d:96:59:48:b0:b7:9a:ce:81:16:64:9c:b0:
         1f:4c:e1:89:98:70:44:61:17:06:91:37:16:42:79:f4:b3:f9:
         4b:9c:48:cd:d8:44:f6:8a:6d:9a:73:3c:5b:d7:19:16:1c:10:
         00:f3:cb:16:7f:75:06:d3:df:29:5e:93:4a:34:1c:c7:18:cd:
         8c:6d:44:ac:12:56:55:24:a6:eb:e9:46:f3:5b:96:48:61:30:
         16:6a:6c:81:d4:b1:fc:c2:27:f1:d3:84:a5:ca:0a:ab:3d:7d:
         17:f8:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:44 2026 by rpki-client