Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          baI44CN5AckkRIKwoxxWGwoaujD+Ai08w7Fupy4bWUQ=
Subject key identifier:   40:06:BD:8A:28:81:23:5F:0B:5D:6B:C1:8C:34:04:88:CD:58:BE:27
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019D265F80825E63DDFEA0AEEA967E7F1579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:26 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: 7qvKBbedbsCl5sqz7vxMtZeb56pY2ilDpNQq7L44FkA=)
                          2: qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (hash: tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:80:82:5e:63:dd:fe:a0:ae:ea:96:7e:7f:15:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Mar 25 19:01:26 2026 GMT
            Not After : Mar 26 19:01:26 2026 GMT
        Subject: CN=4006bd8a2881235f0b5d6bc18c340488cd58be27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:04:b5:6f:38:b7:4a:6f:a8:fc:93:33:58:
                    9f:89:91:a1:2b:d0:ea:60:16:6a:1c:39:f7:14:bf:
                    08:33:6e:12:df:a2:e1:9d:66:8c:7f:42:6c:f0:83:
                    f0:5d:fa:5f:59:e2:8b:e4:bc:74:11:a4:93:8a:8f:
                    7d:1d:8e:e4:5f:e2:30:5c:b9:b8:7f:f3:80:26:4c:
                    3c:85:42:f2:c4:72:80:4f:5d:3d:5c:08:3f:e2:1e:
                    74:5d:4c:be:4e:f6:79:77:ea:33:46:c9:17:3e:4e:
                    87:f7:40:2a:e4:3e:82:dc:6c:86:24:c5:97:9d:09:
                    dd:f0:6d:06:9e:04:40:33:58:27:7e:b7:7b:5f:c5:
                    1b:c3:92:6d:e9:0e:b8:79:29:76:6a:f8:e1:26:9c:
                    da:ce:1b:d8:f5:b3:9b:a9:45:3b:4f:9b:05:53:ce:
                    2a:dc:86:8b:df:a3:48:88:b2:a1:67:24:c2:d8:4e:
                    2d:0a:c7:52:19:79:6d:ad:3b:e0:ca:50:77:90:a5:
                    14:96:74:8b:7f:7e:db:6d:aa:23:b6:7e:24:3e:eb:
                    75:26:98:32:c0:7d:11:63:d3:a3:d5:d3:9a:6d:bf:
                    29:d3:55:d2:07:5d:9a:37:5b:90:15:5f:91:db:0c:
                    df:78:13:46:01:54:05:b9:f1:fe:a9:bd:53:6a:a1:
                    a5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:BD:8A:28:81:23:5F:0B:5D:6B:C1:8C:34:04:88:CD:58:BE:27
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:de:eb:a3:05:df:9e:1c:35:6c:66:7e:fb:39:ae:23:f0:
         a2:48:38:7b:64:07:d8:28:06:35:cd:69:fc:ab:fc:7f:ea:50:
         27:26:df:da:76:f2:14:24:f8:b7:6a:2f:84:8a:5b:c3:e7:e0:
         4e:0e:3d:2b:cf:f5:08:19:1e:6f:5a:3f:51:74:db:14:9a:1b:
         21:3d:39:fb:8e:18:1d:77:97:c8:32:1a:b7:cf:22:a7:51:88:
         92:34:e7:c3:16:17:22:63:7d:6e:e3:fb:5c:8c:37:ec:05:52:
         51:dd:47:b3:a8:3a:27:c0:46:3e:55:0e:4a:73:87:a3:4a:3d:
         59:d4:53:53:1a:6a:e1:ff:a4:0b:3c:88:ad:2c:26:9b:c0:c7:
         b4:7a:6d:2f:55:63:90:f4:27:90:7c:02:31:20:4b:38:94:2c:
         af:84:2c:38:46:e9:ff:ea:86:e7:78:db:19:22:a7:04:bb:bf:
         d3:7f:e0:9f:00:d9:d1:4e:19:89:3d:1a:60:53:85:77:b2:e8:
         bc:75:79:86:2e:46:2b:fe:ab:62:46:57:6a:4c:e0:16:a7:a0:
         e6:91:df:d2:bf:3a:df:b6:99:1c:34:4e:60:ce:2c:39:15:66:
         e0:7b:42:2c:54:24:9c:ba:3a:ed:a0:a8:9c:41:d9:40:a9:2b:
         3f:42:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:21 2026 by rpki-client