Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          aAeoTs0eaiIQf40XMYxrCzonahfezoxirYn6EcedJr0=
Subject key identifier:   AE:F2:62:98:3F:08:4F:CE:F9:A5:37:47:EF:01:84:84:EB:A6:E2:CE
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       019CAD59FEE5534B5A1A731F0EB630CFBE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0DFD
Signing time:             Mon 02 Mar 2026 07:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:22 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: Q6+MCaMFjHJEGYTYcWJV/TurVh5KgUZHUEKW6VHJc3Y=)
                          2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:fe:e5:53:4b:5a:1a:73:1f:0e:b6:30:cf:be:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Mar  2 07:01:22 2026 GMT
            Not After : Mar  3 07:01:22 2026 GMT
        Subject: CN=aef262983f084fcef9a53747ef018484eba6e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:bf:1c:4a:5d:e2:18:13:4d:a3:50:66:95:
                    5a:fb:b7:8d:4d:19:b6:66:9f:17:77:1b:23:e9:4a:
                    b4:94:ca:59:a7:4d:c2:f3:a4:93:0f:e1:03:54:42:
                    a8:de:e4:76:12:59:ae:24:0f:7c:6d:61:78:9c:26:
                    a9:79:0f:13:43:f7:bd:8d:2b:4a:20:89:ed:c0:cf:
                    a1:8e:02:b1:fb:39:bd:ba:32:6e:f1:10:35:93:c2:
                    cc:14:af:0c:ea:ad:7c:55:b2:24:02:53:ad:28:7c:
                    38:ed:65:1d:0d:30:ec:d4:3d:bb:4a:ea:1f:93:37:
                    5c:e1:9c:17:d7:75:e2:26:86:98:ad:63:af:ae:f8:
                    43:90:0d:97:a2:9a:6c:cc:a2:95:96:16:5f:5f:17:
                    bc:28:40:a5:50:4c:45:58:ef:0e:8c:f3:15:af:79:
                    b5:09:4e:da:bd:f0:87:d6:d5:c9:d5:55:61:ad:48:
                    2f:92:6a:49:76:2a:24:8f:5e:b7:46:3b:79:96:2e:
                    5c:90:e8:0d:f6:7c:a4:54:ab:f6:50:44:d5:22:b5:
                    d8:89:af:94:e2:d4:18:16:a3:23:5c:b7:65:6b:98:
                    4d:d5:a3:ba:81:1e:78:59:3c:03:12:21:c6:98:e5:
                    80:5f:78:b2:da:cb:d7:d2:2d:23:25:3a:a8:f5:61:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:62:98:3F:08:4F:CE:F9:A5:37:47:EF:01:84:84:EB:A6:E2:CE
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:ed:e9:70:de:91:0c:d8:27:1e:7c:0d:8c:7d:98:cc:33:
         fa:49:a9:6e:99:07:48:6a:58:84:59:c8:d5:7b:6f:53:da:4e:
         6b:f6:95:8c:50:ae:34:b9:5b:e9:74:1a:b9:ff:d6:3c:e6:51:
         47:02:f0:5b:12:91:f5:16:93:5f:b6:83:13:8f:3d:a4:52:d5:
         a1:a3:5f:e7:21:f2:8a:0c:aa:df:26:6f:56:ed:6c:81:b2:72:
         fb:85:9f:f0:f8:62:e9:0d:b2:98:01:d0:52:5f:5f:19:a5:ce:
         24:f0:04:4c:48:31:4a:4b:65:68:d1:f5:11:bb:9e:33:3e:be:
         b6:cc:23:9b:ec:08:cb:1c:6a:a8:c3:43:d9:08:53:96:21:68:
         e3:be:72:6b:51:86:52:06:99:30:62:ad:7c:19:dd:65:23:18:
         41:e3:e4:35:e5:d6:91:c5:ec:28:f1:27:b3:c9:d8:58:af:3e:
         a0:a2:53:94:8a:c5:9b:95:e1:b3:87:2e:63:e4:8e:f5:12:13:
         90:e0:16:ee:b4:18:85:9e:27:14:cf:52:d2:94:8b:b7:fd:02:
         41:ac:4b:c2:24:76:68:ac:3c:8a:51:eb:6f:ea:fc:af:1b:be:
         dc:a7:a0:c9:1c:f6:10:66:0f:b5:c0:94:f1:63:66:2d:c6:42:
         a1:30:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:45 2026 by rpki-client