Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File:                     EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier:          +D2q5pOKucMoFhb0HSasJVhf0iA8402vYbOwOZKG16I=
Subject key identifier:   EA:D1:5C:ED:29:75:BE:E0:4F:FB:FA:77:8C:5A:54:6B:A8:C0:26:A2
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       019CAE35C9DE3A02BBBCED71C291AF7B5A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number:          184F
Signing time:             Mon 02 Mar 2026 11:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:26 +0000
Files and hashes:         1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=)
                          2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=)
                          3: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: fwPpWitcPy03T61JDGP+yN4Kaw8hhZMnAUUc/qvPAwQ=)
                          4: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=)
                          5: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=)
                          6: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=)
                          7: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:c9:de:3a:02:bb:bc:ed:71:c2:91:af:7b:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Mar  2 11:01:26 2026 GMT
            Not After : Mar  3 11:01:26 2026 GMT
        Subject: CN=ead15ced2975bee04ffbfa778c5a546ba8c026a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:03:58:0f:9b:8d:86:a6:a6:62:3d:62:e1:
                    d7:5b:9e:2c:dc:47:05:1c:60:41:5c:31:53:b6:01:
                    d3:a3:3c:01:3e:f6:f5:7c:37:ae:58:37:25:1b:77:
                    7a:1d:e2:54:ca:a2:d9:1a:a9:37:80:df:f4:fe:82:
                    a9:58:9f:a2:25:26:99:1c:f8:ff:05:4d:f1:32:5c:
                    6f:b4:b3:d2:64:ae:7c:6a:da:96:bf:aa:c7:bf:6d:
                    41:45:f1:6f:0a:c1:c0:f7:fd:47:9a:b0:12:c6:3d:
                    bb:f4:9c:11:d9:97:63:1b:c3:02:86:cb:f0:18:85:
                    06:8c:46:b0:ba:f0:0f:65:97:6a:e4:95:a2:74:53:
                    55:26:c9:91:ba:e0:09:47:1d:11:c1:0b:4a:a7:3a:
                    f0:40:a4:d3:28:7a:04:16:02:da:7c:a3:73:eb:68:
                    31:4b:45:48:25:32:21:44:f4:a9:ba:e6:45:77:2a:
                    de:fe:17:32:e9:83:e6:32:c4:4a:62:29:3e:eb:d4:
                    1f:2c:71:6f:6e:d6:d5:6c:3d:6b:48:4b:ce:d5:78:
                    17:70:53:fd:0f:4c:c7:6c:12:0a:b8:0f:1b:86:76:
                    a3:72:5b:b7:30:d7:8d:16:8b:2b:92:c1:76:4d:fb:
                    5f:1a:6c:0e:cb:68:a3:6e:76:a4:bc:35:8a:5f:a7:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:5C:ED:29:75:BE:E0:4F:FB:FA:77:8C:5A:54:6B:A8:C0:26:A2
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:25:5f:cb:64:e7:c2:7e:53:88:c4:af:49:b2:c0:33:e6:
         a8:61:6b:73:fe:f3:70:2c:cc:c7:db:28:84:80:7f:0e:df:d6:
         74:34:b9:60:d9:62:06:bf:ee:6b:bd:c4:b2:42:ce:53:e1:86:
         f3:2a:2b:f3:90:95:8b:ab:a5:e0:46:f3:ba:9c:32:54:8a:1d:
         60:07:be:7b:f5:0f:53:d4:2d:d3:33:b5:af:09:87:90:75:d5:
         d7:c0:d8:81:40:f0:44:13:8e:e5:1d:08:ce:17:cf:6c:e7:78:
         5e:e9:de:af:66:54:a4:b6:49:9a:77:94:ad:54:36:bb:c3:02:
         a3:37:d1:4a:a0:af:f8:cc:e2:2c:56:5a:21:ee:45:3a:a8:e5:
         8e:f3:ec:74:cf:90:4a:5f:01:75:70:44:4e:41:b4:dc:f8:72:
         39:46:89:49:40:f7:cd:76:c1:c9:67:86:8d:40:ed:29:1b:20:
         cc:f4:11:d6:53:36:07:db:3a:86:70:3a:b7:ee:f0:a0:ab:bf:
         46:9b:b4:40:2a:92:78:11:2d:9f:87:55:31:4c:20:e0:aa:1e:
         4e:d9:3f:7a:dd:7e:b3:90:b8:89:1e:ce:5d:0e:78:65:9a:5a:
         87:a3:9b:28:da:f1:8f:3e:59:95:11:fc:c6:06:04:b0:ba:a4:
         51:ba:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:23 2026 by rpki-client