Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          BaGCeZ/B3XVANVnP+xahYcnuAcvRWe5mgqRFCMoj0+8=
Subject key identifier:   DD:B3:DA:88:DE:EA:9C:80:38:21:8F:C6:97:4C:41:FE:A2:F3:10:50
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019CACEBE039FAB434EEF1FCDD2D4CB7A496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          0F29
Signing time:             Mon 02 Mar 2026 05:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:05 +0000
Files and hashes:         1: 9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa (hash: LvAW/dorcWJs7ZFyV1eDoNVGXIMQa9jTmGb0oFcyF74=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: z+3zuxSEEKis6BpnzPNrUqo+BiF71E9y3dgLsNkxNc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:e0:39:fa:b4:34:ee:f1:fc:dd:2d:4c:b7:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Mar  2 05:01:05 2026 GMT
            Not After : Mar  3 05:01:05 2026 GMT
        Subject: CN=ddb3da88deea9c8038218fc6974c41fea2f31050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:dd:39:ac:d6:04:96:88:77:d4:7d:6f:e8:
                    ab:9f:c9:69:a9:80:c6:53:bf:ca:3e:99:42:33:84:
                    d2:aa:59:a3:7a:b5:f4:12:22:54:f0:06:25:cb:0a:
                    79:5b:3b:57:20:f4:82:35:3f:34:39:df:9c:9c:7a:
                    e0:42:a3:49:52:f4:39:63:fa:79:86:16:83:bb:70:
                    86:11:00:85:97:76:9b:a5:a1:8e:ec:bf:59:46:ec:
                    d3:06:95:f6:1f:a9:69:e1:2a:fd:5e:d5:18:4c:df:
                    a7:7d:8f:06:df:ad:14:22:2e:46:3a:7f:11:94:40:
                    4b:82:08:fd:4b:03:4d:21:ab:60:c2:cc:79:26:d8:
                    ed:13:98:15:56:a1:86:d0:26:69:62:21:a6:60:ee:
                    db:7c:d0:a9:ad:38:a9:2a:87:34:aa:37:e2:f1:a5:
                    54:30:d9:ee:97:f9:05:7c:67:fc:6e:62:23:ce:9b:
                    5d:cc:ca:bf:ca:14:b4:26:83:20:38:84:df:e8:81:
                    18:e2:f4:e1:2e:11:24:05:2b:c4:72:cf:ee:a0:94:
                    09:78:39:3f:25:91:81:aa:7d:eb:af:79:74:87:89:
                    37:81:fe:5c:71:5e:e1:b9:bc:fc:80:e8:ee:70:82:
                    90:58:22:52:bd:56:f1:78:32:fd:b4:a0:b0:10:aa:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:DA:88:DE:EA:9C:80:38:21:8F:C6:97:4C:41:FE:A2:F3:10:50
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:02:69:f6:ea:4a:2a:ed:87:60:26:0b:8b:81:0e:bc:38:66:
         e4:08:61:1e:8d:e1:88:f2:6b:bd:47:ea:db:68:f8:d7:d0:34:
         6f:d5:72:11:59:38:1f:be:c7:eb:52:e5:61:87:23:f0:92:e1:
         31:40:fd:61:58:1e:ec:96:78:ab:69:dc:70:41:24:05:3b:5c:
         ac:d2:58:b3:0b:bd:30:b9:46:9c:4b:2d:70:c3:7a:c2:f3:27:
         50:55:39:7a:ee:57:ca:eb:2b:4c:42:eb:f5:93:d1:1b:a9:be:
         47:6b:88:90:b4:35:84:75:ac:e8:c7:72:16:da:8a:b2:86:71:
         74:72:7c:b5:b5:2f:f0:9c:46:46:db:1a:97:a0:de:09:87:99:
         94:5c:cf:6b:56:6a:2a:d5:21:6c:e8:d1:5d:b9:ed:3f:52:a8:
         4e:a2:d2:24:b1:50:2a:93:95:70:1a:56:dd:fa:02:06:2d:8b:
         04:e8:2d:b2:b5:ca:d7:0d:a6:1a:a5:48:5b:b6:88:25:5f:4c:
         11:d2:14:f2:9d:9e:73:52:16:01:e7:fd:1c:c3:9b:29:95:f2:
         b3:27:39:9e:10:01:4b:9d:c5:d3:aa:30:06:30:03:af:58:f5:
         20:24:b8:0e:0f:2b:21:e3:ce:41:32:73:07:02:80:fb:dc:90:
         5e:33:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:45 2026 by rpki-client