Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          kekOztcbeUrw3EROCRwVvMy9bFEiAVkFNN/SXPetHG0=
Subject key identifier:   52:27:99:68:5E:77:EA:10:51:EA:90:DB:7B:F3:26:20:C9:BF:9C:95
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019D98F48DE810588FF9676ABC360A4D0F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          12F7
Signing time:             Fri 17 Apr 2026 01:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:57 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: VkARjQ8+5TjlGs0JjhKaEBA5LzDeujGUVixKA2L083A=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:8d:e8:10:58:8f:f9:67:6a:bc:36:0a:4d:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Apr 17 01:00:57 2026 GMT
            Not After : Apr 18 01:00:57 2026 GMT
        Subject: CN=522799685e77ea1051ea90db7bf32620c9bf9c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:84:fb:ab:50:f0:d3:f3:57:d7:0f:84:a1:
                    86:36:ce:a7:f0:18:06:c9:dd:e0:13:61:60:44:7b:
                    f7:66:99:f1:8f:e5:78:1c:6c:5c:a1:6e:e8:95:5d:
                    71:5a:89:e8:5d:f7:dc:32:27:a1:67:f6:55:c3:8c:
                    17:e6:33:9c:a0:c5:31:48:40:76:11:26:58:74:d8:
                    f1:23:3b:64:7a:25:26:bf:54:08:29:a0:b9:4b:25:
                    64:df:32:9f:fe:ad:63:3f:f7:04:fa:c3:3f:8e:f2:
                    e6:59:15:03:f1:ec:c5:29:1c:8a:fa:6b:bc:94:26:
                    db:aa:70:57:8d:1b:c7:b6:89:16:c0:20:14:4e:b9:
                    5b:d7:e7:04:43:9c:e3:e4:21:0b:72:52:b4:a0:cf:
                    fd:46:d5:c8:fb:a2:4f:45:c2:30:c2:35:54:01:bb:
                    f5:9f:b5:32:2a:45:3d:1e:02:dc:6e:d8:21:5e:fb:
                    29:73:82:df:78:12:0b:31:81:b1:31:4a:0a:b4:ee:
                    04:92:3f:45:14:b9:44:61:6e:4a:2b:eb:32:df:fd:
                    78:4b:91:d9:4a:25:f7:f2:c7:d2:20:d8:e1:5b:3f:
                    e0:01:e6:97:ed:7f:89:a4:ad:43:4d:3a:ae:aa:6d:
                    80:c5:da:fc:37:5c:f8:06:87:82:24:f9:1d:f2:9e:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:99:68:5E:77:EA:10:51:EA:90:DB:7B:F3:26:20:C9:BF:9C:95
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:8a:53:a5:49:1c:e3:ce:18:54:07:e2:f4:3d:4e:24:17:
         1c:dc:2e:f8:21:7d:a1:ae:35:ff:e6:f9:54:0b:56:9a:24:05:
         88:4d:cf:0c:3a:46:f3:2b:54:89:b5:b9:ec:61:d8:95:b1:42:
         0e:bd:9a:77:f9:94:d5:0a:18:ae:ff:09:e9:49:ec:95:fb:af:
         d8:1a:8a:07:f7:30:46:d3:ba:f8:55:1e:32:ee:e3:41:54:b4:
         30:2f:5e:87:04:7b:8f:1a:17:90:39:1c:c6:2c:f6:ff:27:ee:
         83:0b:b6:46:74:54:5a:e1:d6:b8:c0:b1:00:29:97:2c:de:f1:
         42:3d:36:14:01:a5:44:a2:24:c0:71:af:98:39:ec:95:2e:1d:
         e3:dc:fb:66:83:9f:f0:e6:a2:56:0e:5e:ec:0a:90:e0:6f:04:
         a6:a1:c1:7e:0a:aa:0b:16:64:ae:f8:56:c2:d5:6f:e7:12:0c:
         9d:b5:1f:8c:2a:e5:68:88:4e:19:4e:83:ad:f1:85:35:b2:df:
         5b:7d:7b:47:1c:f6:62:d9:d4:03:e5:ce:e0:d7:c7:6d:15:bd:
         58:3d:db:61:94:02:73:ac:ed:68:23:c8:92:ea:5a:5e:c0:3f:
         31:00:43:10:87:38:a6:19:82:a8:1b:49:78:8a:35:17:55:62:
         68:ed:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:39 2026 by rpki-client