Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
File:                     EuKAOWRtzDLs61hCj5fMmUuZhXc.mft (raw, json)
Hash identifier:          JPADXfIbUhWJ/5TwTsyWwGBPGHsAyeD1UYXvQUvDroA=
Subject key identifier:   DD:58:D1:29:C9:E9:E1:21:D2:E7:6B:7B:BC:0D:71:CF:61:64:EC:86
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Certificate issuer:       /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial:       019CAD906245E12E6D684485E25701B32F60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
Manifest number:          0150
Signing time:             Mon 02 Mar 2026 08:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:46 +0000
Files and hashes:         1: 3pfKAfOgCjCuMnTS6UNkSvzgdXg.roa (hash: fX97IURxx4aVv6kLYDjuvYCpszHdrjfoIHpuOJ1G1Q8=)
                          2: 7ctbrqVxCRbHrUzJk44x6mMUfjw.roa (hash: hwOpHB+DpLevykjKwsf5ChWyNAUq7TbSytnqlDGmM0c=)
                          3: AQhcS-k2oK3bxQWS20M2leCjNhA.roa (hash: aNhFqj72CW3EXnrLF0fWAMHOsCvh/EfcGLmpjcOZo1U=)
                          4: EuKAOWRtzDLs61hCj5fMmUuZhXc.crl (hash: BxK7tP2obrc4KUHl+qmCXCquP8y3fTHnkx0x9SXxEZg=)
                          5: YppEuD63kZ31TGnLRIN3xiqWGBI.roa (hash: felosXDJ6ap80oigDicxv12faJJwG7IilFVsyq10QVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:62:45:e1:2e:6d:68:44:85:e2:57:01:b3:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
        Validity
            Not Before: Mar  2 08:00:46 2026 GMT
            Not After : Mar  3 08:00:46 2026 GMT
        Subject: CN=dd58d129c9e9e121d2e76b7bbc0d71cf6164ec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:ed:65:0a:47:4f:b9:5f:25:a2:2a:3a:2f:
                    69:49:96:a1:d8:88:f2:22:11:07:8e:62:9b:32:d9:
                    ca:54:81:ac:10:32:05:de:bb:cd:e8:a5:a5:d5:71:
                    19:68:53:ee:c9:c7:f7:df:cb:a5:ce:a7:96:e5:83:
                    1e:b4:45:b9:59:cf:e3:60:c5:7b:4c:43:64:69:03:
                    d9:01:bb:63:31:27:41:b3:91:40:af:d1:33:16:f7:
                    25:33:b4:0f:15:7e:fa:f3:49:48:68:97:48:d1:83:
                    8b:d0:5f:4b:61:ee:80:a0:3e:bb:16:40:c6:bb:1d:
                    3f:4e:a8:ff:8b:bb:90:a5:e1:a3:cc:ee:08:d2:3d:
                    2e:84:01:a9:15:7c:66:a9:55:28:9d:27:eb:8f:8f:
                    d8:d4:b6:5b:76:4e:5e:69:8e:42:ec:0a:38:eb:89:
                    2e:31:6d:a8:a6:b5:cd:8c:36:e7:c2:02:e9:f6:5b:
                    7d:dd:d9:b1:fd:51:bb:bc:5e:2b:78:6f:0c:d3:20:
                    e8:62:0a:5b:ed:19:7f:68:70:d6:40:8d:32:9a:e9:
                    55:4e:7d:95:9a:80:c1:34:4b:49:bf:53:53:ef:f8:
                    21:03:65:c6:ba:3a:2d:f6:65:4d:e0:0e:23:77:17:
                    8c:2d:32:7a:3f:07:3e:1d:fa:1e:11:61:4e:21:91:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:58:D1:29:C9:E9:E1:21:D2:E7:6B:7B:BC:0D:71:CF:61:64:EC:86
            X509v3 Authority Key Identifier:
                keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:70:30:61:ca:23:17:e7:88:6c:85:92:dc:35:e2:05:33:
         f5:9c:57:54:d9:9b:c7:dd:52:55:a4:2d:fa:ab:f4:d5:56:18:
         9f:c6:b1:94:0d:53:9d:86:af:ac:6e:1c:40:98:fe:09:ce:df:
         ac:25:32:97:dc:a8:b8:af:b6:ad:5a:2f:ed:ff:49:2f:13:c9:
         48:18:b4:b0:4e:6d:b3:b8:55:15:59:01:5c:23:7b:6d:95:9e:
         b9:00:5f:09:da:9c:7d:2b:ab:e9:e9:3b:09:53:06:ce:5e:d6:
         db:02:1e:80:6f:44:24:2e:c1:4f:7c:00:a2:37:cd:b2:cb:ed:
         b5:74:a4:50:e9:5e:c4:d4:f9:bb:35:f7:c1:6e:69:a5:56:25:
         66:ef:f0:ce:e2:9d:d3:b5:48:f1:e9:fb:06:74:bd:59:ea:de:
         45:a2:8a:25:79:29:b4:c5:d9:85:28:87:25:ed:15:ff:1e:1b:
         7d:cd:f4:59:99:05:8c:84:a3:93:33:ac:00:c1:06:fc:c2:f6:
         f3:0d:d5:c4:8f:62:19:27:e5:3c:11:ec:95:db:a1:da:3d:84:
         bf:fb:84:ad:40:f7:84:a2:6d:47:3c:16:0b:df:7f:13:05:97:
         7c:cc:d2:6b:0b:b4:e2:ce:93:2b:38:58:dc:1e:bc:ef:a6:4b:
         e1:c2:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:04 2026 by rpki-client