Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          okJBHtn9wDwDoU56AMEM+J07BVzAMAPiAyQGm1YjPs0=
Subject key identifier:   DA:C0:37:6B:01:76:0F:58:D4:98:55:BD:B7:B8:0B:BC:55:88:9F:57
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019CAB6ADBF04293E1A30A14079ECE260601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          127C
Signing time:             Sun 01 Mar 2026 22:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:32 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: UHZvoSnwRpSTnES3nNxntWNKa1nz7wMyf5e5fCv+NSU=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:db:f0:42:93:e1:a3:0a:14:07:9e:ce:26:06:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Mar  1 22:00:32 2026 GMT
            Not After : Mar  2 22:00:32 2026 GMT
        Subject: CN=dac0376b01760f58d49855bdb7b80bbc55889f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9f:a4:9a:0f:3d:11:fb:03:fc:8c:53:61:18:
                    b6:69:66:4e:8c:d9:9c:ab:b4:ec:62:0d:91:04:8d:
                    eb:a9:92:89:3f:34:ad:58:22:3e:65:e7:19:da:ad:
                    d0:0d:4a:e9:6a:9c:4d:d1:45:b1:2e:87:b1:ab:3d:
                    c3:fb:92:64:7a:20:ba:43:58:38:8c:66:3a:cc:65:
                    b0:21:9c:97:cd:ec:b2:be:9a:e1:f5:fb:f5:39:09:
                    7f:65:cf:4b:5c:87:a0:d9:16:80:97:aa:75:40:b0:
                    ec:d6:cd:dd:18:e3:78:31:9a:2b:3d:a3:df:72:06:
                    ad:86:70:1e:c4:a7:f9:e3:88:3a:96:63:81:4f:64:
                    23:5f:bb:17:f5:69:15:44:7a:01:1f:c0:be:af:fe:
                    3d:32:d7:2f:08:2b:ee:e6:86:91:13:f7:07:e0:ea:
                    6c:cc:e8:aa:f1:94:b9:f5:d0:11:db:fc:9d:5b:24:
                    2e:53:cd:25:5e:f6:ce:19:88:a3:b0:44:3c:12:14:
                    62:fb:fb:55:f9:55:d7:8c:30:41:41:ec:bc:2d:7d:
                    c3:b6:f1:43:df:db:aa:e8:ac:49:78:7c:57:b2:c1:
                    81:49:21:e4:8b:9f:88:46:6d:c8:8f:8a:59:0a:55:
                    9b:37:06:14:07:43:d7:8e:6d:5a:78:87:eb:47:0b:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C0:37:6B:01:76:0F:58:D4:98:55:BD:B7:B8:0B:BC:55:88:9F:57
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:81:a4:ad:ba:2f:bc:1b:8c:3b:f2:30:8c:6a:1e:4c:60:
         d6:c0:0c:35:95:e7:9c:78:6c:38:00:c2:47:ca:4b:74:73:00:
         89:7f:86:aa:4e:a5:06:18:5c:17:63:f7:bc:3d:b8:6b:74:12:
         86:08:a5:02:78:4e:1f:03:93:cb:44:a4:04:c8:c1:c0:77:c7:
         8e:f4:68:50:28:68:e9:90:50:1d:37:73:b7:fb:04:31:77:ce:
         cb:e1:db:7d:f8:83:e0:86:2f:91:9f:4d:2d:8a:11:86:e7:35:
         24:c4:e0:0f:c6:06:89:0c:9a:e4:69:6a:af:20:f3:54:5a:8a:
         d6:24:f3:94:63:63:19:56:b0:8f:1c:5a:0a:18:d3:06:55:ad:
         d6:d9:57:58:53:fd:df:8d:dd:7a:63:54:54:7b:1d:22:28:bf:
         b9:f5:79:9d:1e:a5:89:ec:d0:51:74:13:88:d5:74:43:ab:48:
         23:4c:b7:31:6b:46:c6:3f:f0:28:d1:7a:dd:37:45:a4:df:04:
         34:74:14:2a:9e:76:7f:36:d5:9c:69:6f:11:05:f8:dd:c8:fa:
         8c:c6:8f:7e:97:50:d8:db:ab:3a:9f:d7:5f:e5:9a:e4:9d:fe:
         bf:4c:ba:63:a6:b4:5e:f2:51:69:e3:44:36:f6:68:6f:6b:23:
         ae:ce:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:48 2026 by rpki-client