Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          H8Qra5JnBtSQXWjUd2lYTcGl2fYdBtZlJxD3+qKsKUg=
Subject key identifier:   10:9D:FA:84:AE:1D:66:97:0A:B6:73:F1:0B:F2:15:BF:E8:B3:AE:A3
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       019D28164241B9B1520EDDE773836F0A553B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 03:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:40 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: 3BLmz000tBHo0tMOQv37vQ/b/sYu7qgne9GiLov6lUg=)
                          2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:42:41:b9:b1:52:0e:dd:e7:73:83:6f:0a:55:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: Mar 26 03:00:40 2026 GMT
            Not After : Mar 27 03:00:40 2026 GMT
        Subject: CN=109dfa84ae1d66970ab673f10bf215bfe8b3aea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:2b:41:46:a3:f0:f0:3c:02:af:5f:37:2d:
                    f8:b9:d2:c8:a1:da:e3:18:89:66:73:9c:a9:e2:d9:
                    1e:12:28:06:20:64:54:3a:c1:cc:31:c5:41:8f:0b:
                    ce:47:55:55:28:1c:e5:66:c5:84:f2:62:47:46:9e:
                    76:d7:e1:ec:bc:ba:86:90:32:d6:fc:cf:02:78:f4:
                    b3:14:e5:b1:8c:ba:aa:f0:b0:c4:f0:6e:de:26:a3:
                    49:fd:48:3f:eb:96:ba:ba:84:d4:55:66:78:34:6c:
                    dc:53:52:f5:46:f2:fd:57:4f:eb:ea:2d:96:cd:80:
                    8b:96:23:ae:1f:8e:b6:8b:de:90:a2:63:14:4f:6f:
                    38:d8:c9:29:75:e2:03:dd:72:fc:cb:10:3a:23:75:
                    c9:9e:f7:ae:69:69:20:88:dc:ff:12:e5:08:35:0d:
                    9e:61:ba:a0:ab:3c:bb:ae:bf:2f:52:eb:83:b6:bf:
                    46:87:4e:ce:04:9e:d0:bf:55:d6:df:32:a2:09:5d:
                    5b:8d:35:27:b1:77:5b:d3:64:a1:d6:70:ad:de:59:
                    2f:d3:68:31:bc:58:f0:58:a4:4e:b9:e1:ce:27:b7:
                    9a:74:8c:41:50:8d:97:e1:17:f9:ff:19:a4:c1:85:
                    3f:15:ee:99:e1:ff:f0:03:ae:c2:be:35:c1:91:c5:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9D:FA:84:AE:1D:66:97:0A:B6:73:F1:0B:F2:15:BF:E8:B3:AE:A3
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:fb:0d:23:78:58:3f:95:31:2a:3d:d1:8a:6c:b8:f0:d3:
         16:79:60:9e:0d:4a:a5:05:b6:93:24:5c:31:88:cf:d2:68:da:
         6f:a7:86:00:8a:90:a2:e6:60:fd:05:bd:ad:8c:83:ce:c4:51:
         84:9a:32:d0:be:cf:27:58:19:8a:6f:d9:a8:0a:30:80:11:52:
         63:a8:25:9e:3a:32:93:78:ad:1d:21:c7:53:03:72:27:e4:f2:
         32:43:80:0e:3e:88:a0:0b:a6:4b:ec:17:c2:b6:30:ed:d8:5a:
         24:ad:45:fe:87:50:09:78:e1:07:6d:3c:d7:51:ad:3e:01:cf:
         af:9c:76:89:7b:1d:c1:b9:d5:82:37:36:2c:61:0d:d3:14:14:
         b3:74:57:20:0a:23:9f:07:1f:b6:3c:2f:ff:10:ba:61:93:56:
         f6:84:ae:30:3c:1d:eb:72:ba:bd:78:87:f7:fe:28:d9:33:69:
         5a:6e:4b:8c:40:2a:94:40:2a:c8:90:e9:08:70:7c:11:fb:96:
         aa:09:7e:e7:9a:11:04:f9:bd:6a:ee:64:69:cf:68:cf:3b:75:
         b3:a4:fc:5c:36:1d:be:ff:20:8b:d6:6b:6f:dc:53:5a:03:76:
         c8:08:82:44:49:ab:1f:e8:49:4c:ff:ec:90:51:51:d4:4e:88:
         17:9f:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:09 2026 by rpki-client