Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          6p0X0ViSUdp7VMb/tcjDyZ60YdIviaFGk+7NOBoYwF4=
Subject key identifier:   3B:36:63:8C:30:7E:13:28:61:C9:8F:1F:75:6C:62:95:5D:1B:12:7D
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       019D9961F53283F0F93043240BB8CE2A2706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          176A
Signing time:             Fri 17 Apr 2026 03:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:26 +0000
Files and hashes:         1: MwbZOqIggyrSHU4PZ4grNgTv7Vg.roa (hash: PMNvYA3uE+IknWsNwKXqnO+LeFyIQwpnp1UXQEbVx60=)
                          2: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: 323lLP3EBZ6xYUBnD/7+bxzRcDv6xUE+oPkyogm/BwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f5:32:83:f0:f9:30:43:24:0b:b8:ce:2a:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Apr 17 03:00:26 2026 GMT
            Not After : Apr 18 03:00:26 2026 GMT
        Subject: CN=3b36638c307e132861c98f1f756c62955d1b127d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9d:d4:95:04:92:93:f6:f2:80:de:fc:28:df:
                    93:70:e6:95:fd:23:20:31:4f:56:28:7f:d0:77:46:
                    9a:aa:b6:d9:a9:7d:55:60:43:ed:d7:e0:44:a6:04:
                    11:c7:f8:59:80:e2:45:38:7d:07:b2:ff:db:e7:ea:
                    fe:d3:01:ad:46:99:8f:0d:b7:20:23:bf:a7:42:b3:
                    9a:1d:f4:f1:43:7a:d9:ba:14:11:f6:ca:52:48:8f:
                    62:4d:3e:c0:77:d6:90:51:36:68:76:db:c0:42:e2:
                    73:a5:1c:01:48:72:2d:60:54:72:7e:93:9d:cc:48:
                    d0:e3:5f:8e:9b:95:b2:15:5b:7b:23:89:1d:98:31:
                    e9:01:bc:c7:58:c7:7b:6e:8e:52:93:d3:0a:ee:20:
                    33:a0:15:e8:49:3c:50:b7:46:c2:b3:3c:4c:02:e8:
                    3b:a0:8f:d8:dc:99:6d:1f:9c:6e:76:bd:5f:2c:0d:
                    d5:62:7b:e2:45:34:67:bd:99:77:e2:22:20:eb:0d:
                    7a:34:92:da:39:67:05:4f:59:dd:04:3e:b0:48:95:
                    d7:93:8b:e2:9b:b3:a2:33:c2:5d:fa:00:b0:73:05:
                    f5:bf:01:d2:44:ab:21:fc:50:40:e2:68:e7:ea:da:
                    5d:89:93:4d:b1:14:02:4c:d6:9f:20:17:99:c4:39:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:63:8C:30:7E:13:28:61:C9:8F:1F:75:6C:62:95:5D:1B:12:7D
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:9b:57:51:fa:02:eb:3a:f0:ee:90:f2:97:bb:53:90:39:94:
         43:51:d7:52:45:ba:2e:28:53:f5:74:26:32:0e:ce:55:c3:43:
         a7:1d:c1:f9:e9:15:f8:45:7e:2d:0f:ea:ed:8c:ef:ca:fc:8a:
         86:15:6c:93:99:f0:a3:c9:1c:c7:c6:80:ce:aa:d3:67:77:64:
         40:9d:66:b3:06:ef:12:cc:86:70:bb:fd:2b:80:36:1b:a8:36:
         6a:58:2c:3c:5d:ea:b0:5d:4b:31:63:71:f8:0d:80:81:ae:b3:
         ae:fc:e3:cd:19:7d:8f:15:d2:ed:53:2c:65:6a:92:e7:f3:a9:
         0c:f5:29:f3:9a:b7:1c:de:74:4e:d2:dc:d2:15:80:44:7b:e3:
         20:f9:2b:b4:ae:fc:f9:20:e6:3b:14:b9:f6:28:21:86:4a:a3:
         b6:5f:48:fd:88:75:ab:d9:bd:6f:c2:f3:0f:2f:a8:41:f1:2c:
         27:c7:7e:21:d2:b7:39:c4:66:98:5c:0c:d9:ac:18:f7:39:d5:
         ea:ec:4e:d5:9a:2b:4b:2b:58:59:fd:e9:7c:a4:54:44:0b:ec:
         27:f0:54:77:83:15:39:45:d7:b1:23:7e:00:4a:52:25:80:b4:
         e1:49:d8:a7:d9:97:ec:78:f1:eb:69:a9:03:b9:45:3c:e3:f1:
         1a:0c:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:44 2026 by rpki-client