
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          B2dskTT9zNdq9jr+ND9XbgVT+6FaKgt30EoqTz4CEcQ=
Subject key identifier:   FF:C0:DB:F0:8A:E2:44:D8:F5:05:EB:B5:91:C3:5E:4C:0D:8A:C8:88
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       019A4EF4C9D93D029FF06C0D121B7FB71215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          15B5
Signing time:             Tue 04 Nov 2025 13:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:56 +0000
Files and hashes:         1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: BFIdRjVzvQqAW2He6t+Dl0DL6Z6Upkcnr2wntzGyhp4=)
                          2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:c9:d9:3d:02:9f:f0:6c:0d:12:1b:7f:b7:12:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Nov  4 13:00:56 2025 GMT
            Not After : Nov  5 13:00:56 2025 GMT
        Subject: CN=ffc0dbf08ae244d8f505ebb591c35e4c0d8ac888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:a5:81:aa:03:49:ee:d5:95:65:78:ad:f8:
                    70:2c:e6:fe:31:0d:34:2d:61:42:92:3e:1f:0d:8f:
                    9a:64:d6:9f:b8:b7:4e:d6:5f:ec:07:3e:99:8b:de:
                    8f:05:58:ae:5b:96:0f:99:8b:69:c8:5b:53:2c:cc:
                    f8:7a:33:00:26:0d:91:84:dc:8f:d3:5f:a8:9a:23:
                    4b:2c:c7:44:c3:b7:30:1b:20:24:9c:8d:74:22:d8:
                    5a:1d:a4:da:be:af:51:00:cb:ee:08:45:04:81:a6:
                    5b:ba:7e:31:af:cc:0e:db:c6:fa:da:80:8c:4d:f9:
                    32:ae:19:89:83:9f:6a:a6:9b:ba:e8:88:c7:a6:63:
                    f2:1a:f9:41:ca:bd:52:9d:89:24:fa:69:78:47:dd:
                    3c:03:7b:a6:ca:b9:9d:19:37:19:19:02:26:56:dd:
                    1e:27:cc:93:21:62:6d:01:03:d2:bd:76:c2:98:81:
                    2f:e3:37:68:e9:7f:c5:6a:5d:29:25:8a:1f:a5:43:
                    b9:c4:a5:f6:74:93:cc:19:e6:9e:0a:19:54:2b:fd:
                    97:49:50:3f:74:fd:5c:93:3f:6e:c8:9b:82:f7:d7:
                    40:b5:bc:fb:a1:c0:89:76:27:ed:a8:85:f8:50:2c:
                    b2:ad:d1:11:d9:f1:fb:a4:e4:a6:a7:5c:dc:82:fc:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C0:DB:F0:8A:E2:44:D8:F5:05:EB:B5:91:C3:5E:4C:0D:8A:C8:88
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         26:49:73:19:fc:94:f8:85:26:2a:4b:f0:70:d4:d1:c1:c6:cd:
         f3:a8:fd:8e:87:64:84:05:90:65:39:99:cd:c1:31:7e:09:5d:
         24:cb:9b:93:6d:b5:9f:5d:69:42:0c:81:f3:c3:fb:6f:28:87:
         5f:17:a8:41:14:49:9b:5f:c0:0f:d1:95:30:29:99:b1:e8:a5:
         d3:12:f4:86:5f:3b:bc:65:a3:a2:0c:1b:b3:a6:d1:ff:9e:be:
         19:51:fa:ff:e6:1e:0c:e6:d0:d7:ac:00:ac:6d:d5:95:f0:4b:
         30:7e:24:e9:90:01:8c:54:a3:23:59:8e:de:85:3d:97:7e:71:
         a9:7c:ad:66:fd:54:8b:3b:01:ee:e1:03:99:91:a3:ae:5a:d9:
         53:8e:d1:45:d3:0a:18:83:b8:44:bc:df:39:e9:ed:4b:b7:cd:
         12:fd:00:7c:c7:6c:23:be:e8:a1:cc:5f:c3:15:12:f2:39:8a:
         54:56:db:1f:24:c5:eb:91:9c:f2:7f:8d:43:2a:15:a0:9b:94:
         51:9b:8e:d5:a5:9a:2a:a4:bf:98:9f:3d:a3:ac:d9:28:60:f0:
         84:a9:a2:32:20:44:1a:9e:38:aa:65:70:7c:f0:21:d0:c5:1a:
         d9:2c:eb:fb:78:de:20:99:3b:1e:b4:21:f3:d2:2f:d4:d2:40:
         68:b3:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:52:29 2025 by rpki-client