Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          2XPmYLP57CLN9hxY+Ej4MsFDI/aR1W3IFBqjdAGIpJ4=
Subject key identifier:   31:4B:BA:6C:82:B6:F9:88:92:94:B6:35:01:96:61:68:4E:0A:3C:44
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       019DA48B7669F8709C40B6BB5EFA72671280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          0736
Signing time:             Sun 19 Apr 2026 07:01:36 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:36 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:36 +0000
Files and hashes:         1: GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa (hash: 0Jfzcvn5KxpE+uRT7hhET5tdaNQSgWGkWhSb4S4MAyk=)
                          2: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (hash: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E=)
                          3: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: xVMthAWSNdCpQit0+4/Ua3xdr2cHlGXe2qaopSr2x4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:76:69:f8:70:9c:40:b6:bb:5e:fa:72:67:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Apr 19 07:01:36 2026 GMT
            Not After : Apr 20 07:01:36 2026 GMT
        Subject: CN=314bba6c82b6f9889294b635019661684e0a3c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:0d:63:40:2f:2c:04:f6:e8:15:c8:1b:4b:
                    6a:5f:d1:b4:16:65:d3:39:03:0d:05:8c:88:f6:0d:
                    9d:36:23:f5:ef:ca:ef:82:76:b7:fc:03:d2:09:3f:
                    6b:e6:fb:0a:4c:57:40:90:e6:7f:c0:f2:89:56:c4:
                    5a:b3:04:32:d5:87:05:8b:2f:6b:7a:d4:ea:42:db:
                    25:41:16:c5:a5:66:84:9c:3d:05:03:cb:61:ca:03:
                    38:c5:83:8c:f7:e9:d8:f1:0f:50:63:12:29:1e:e1:
                    5d:9c:44:eb:42:5c:45:6d:19:47:4f:50:b5:3f:7d:
                    85:70:9c:94:51:08:c2:a5:d4:b6:aa:8f:0a:b9:af:
                    c8:49:4b:0b:24:51:a0:a4:53:dc:b3:39:6e:f7:9a:
                    f5:08:23:9d:7b:7d:8d:a5:21:d9:d6:b3:7b:f5:4c:
                    93:7f:85:84:96:96:95:47:d8:63:f7:7b:38:cc:87:
                    9f:b7:3b:14:eb:47:2b:20:3e:e7:c6:c4:98:3a:71:
                    1b:68:3f:19:6c:fa:e4:20:9a:39:c9:2f:ce:2f:91:
                    88:45:ba:ff:c3:15:3a:a2:1f:58:5d:42:2f:7c:c8:
                    3c:f6:05:2c:7a:6a:46:fd:36:3d:36:37:fd:8d:9c:
                    4d:a2:75:6c:06:28:c5:21:25:4c:50:24:84:4e:a0:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4B:BA:6C:82:B6:F9:88:92:94:B6:35:01:96:61:68:4E:0A:3C:44
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:57:16:f9:6b:96:14:b3:aa:98:3c:7d:9d:76:24:34:2f:34:
         2d:1c:55:d9:43:5b:1e:36:00:4a:76:9a:de:93:98:72:7a:85:
         3d:0b:10:7b:aa:5c:92:cb:61:51:b4:26:0e:70:c7:18:91:5d:
         00:d0:23:93:70:57:54:7e:0b:f4:40:48:44:45:2e:44:f0:1e:
         b7:60:a0:c3:dd:7b:9c:a1:f8:3e:29:67:b6:59:e2:93:51:4f:
         5a:c1:54:62:4c:a9:80:1c:70:73:5b:49:94:89:33:ae:75:c6:
         e2:d5:96:07:78:ee:9c:c9:5f:c4:c6:29:db:1e:1d:8a:c7:f6:
         bb:ef:3a:64:70:fd:98:e3:a2:30:b2:2b:73:a6:d3:16:c5:26:
         c6:37:2a:f6:f9:2e:bd:dc:fb:f6:61:a8:df:10:20:1a:59:6c:
         76:99:dd:35:42:2f:91:f3:17:66:eb:22:40:f1:ca:c9:c8:c0:
         a7:2f:50:a6:cd:87:2f:ed:40:80:d9:0a:90:78:27:17:f3:d5:
         0d:e1:8b:e8:90:45:8a:b3:9f:22:07:f8:40:68:73:7b:9c:46:
         5b:2f:67:eb:71:30:a1:d1:1f:29:4e:3b:87:e6:73:74:10:20:
         0a:b2:81:d3:b5:ee:d0:31:f9:4d:69:39:5a:80:b0:7d:6a:9e:
         ed:a5:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:02 2026 by rpki-client