Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File:                     eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier:          byNJ2VqhOVGbykuKG5QGSxrrSEZNTNUV06rZwRLGpYc=
Subject key identifier:   FE:7A:AD:03:A3:96:D7:74:FC:FB:1C:2E:29:3E:F4:13:D8:35:EF:D6
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer:       /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial:       019CAC46B28B49CA25AF5A66DA86AFF618F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 02:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:40 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:40 +0000
Files and hashes:         1: 1-gfSrWkkPBhxthfW3JrHoJC9spI.roa (hash: Rnl0mmrjcLaqzVvTvP650dcar9MAaD9eI+jcraf6cdQ=)
                          2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: eCZ/MR6oTMvUqabF6fWuNHj4g/WE13OIXL1OPoDL0bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:b2:8b:49:ca:25:af:5a:66:da:86:af:f6:18:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
        Validity
            Not Before: Mar  2 02:00:40 2026 GMT
            Not After : Mar  3 02:00:40 2026 GMT
        Subject: CN=fe7aad03a396d774fcfb1c2e293ef413d835efd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:0b:2f:bb:35:9e:f3:97:4c:5c:77:79:5a:
                    3f:50:1f:b4:47:d5:c3:0b:dd:e0:d3:cb:2f:d5:36:
                    57:bf:06:fa:53:73:ae:5f:d2:49:bc:13:74:c2:08:
                    2b:b9:8d:28:df:40:2c:66:54:34:62:b7:35:d0:8e:
                    12:2d:a0:3a:9b:1f:7d:53:d8:36:8f:5c:78:1b:8e:
                    5c:cf:68:0b:e2:ae:d5:b0:08:02:50:ca:75:7f:e7:
                    49:a0:7e:5f:56:f1:27:46:cf:22:7d:58:86:1c:85:
                    cc:4f:e9:e6:87:9f:90:4b:48:ec:72:34:17:2d:a1:
                    b3:7a:7b:df:ae:46:a4:03:16:56:6b:4e:cb:cb:eb:
                    c4:7d:b5:a1:88:12:85:1a:3f:ff:af:be:f9:b1:6f:
                    7a:e1:30:88:93:28:81:76:4b:b0:8a:66:b0:4a:ad:
                    57:4f:0b:77:b8:7f:2c:d2:bc:1b:75:bf:93:1e:f1:
                    e7:24:95:f7:cc:e0:0c:ec:98:a3:a8:1c:01:b9:5b:
                    24:88:5d:ec:3e:74:63:b4:76:ec:d4:16:be:ca:99:
                    a0:4b:46:ec:61:2e:db:24:47:b7:91:a3:ec:85:2e:
                    07:7f:a2:aa:58:fa:0c:b7:e4:2c:32:be:46:dd:55:
                    0f:b4:bb:5b:21:04:1c:ac:ef:b3:90:2c:67:24:f9:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:AD:03:A3:96:D7:74:FC:FB:1C:2E:29:3E:F4:13:D8:35:EF:D6
            X509v3 Authority Key Identifier:
                keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:f5:43:70:a8:ab:31:d4:40:ca:82:6b:29:e0:f7:f7:9b:
         ad:63:77:db:8a:ea:cb:8f:a1:81:6c:ed:3f:83:fa:78:0c:2d:
         d3:1f:5c:61:05:b6:e2:88:c6:0b:83:c3:bb:70:8a:e4:36:78:
         36:28:2b:95:92:e6:49:82:0b:7f:76:31:42:80:28:28:da:d0:
         f3:1d:34:4b:47:02:16:47:2a:2b:2e:bd:0f:d1:1a:7c:3e:ba:
         98:78:9a:be:20:75:13:89:2e:1a:be:d2:1c:77:77:6e:a9:70:
         ba:d8:de:06:83:56:70:59:29:b8:ce:a2:4a:ff:18:2e:ee:c2:
         37:98:fc:5c:dd:6c:a6:54:c6:54:04:ef:b3:85:e2:b4:27:c8:
         13:8b:dd:62:92:05:e1:ce:5b:c7:5f:04:7a:41:c7:1e:04:1b:
         40:f1:6c:27:9c:51:11:68:c7:60:39:1d:d4:46:72:a4:52:ff:
         19:c0:80:a2:44:89:69:b3:0e:39:93:9f:79:10:d4:c4:a2:dd:
         9d:0b:ee:57:38:c9:31:06:00:44:cb:6e:72:d4:68:e3:30:25:
         51:02:40:c8:a7:26:bd:94:ec:10:d9:7f:b2:5b:33:0c:bb:50:
         7f:9d:ab:93:ef:61:7e:d2:74:37:74:4b:12:32:cd:6a:c1:07:
         4f:c9:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:18 2026 by rpki-client