Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          xUwjY+TpgeBAFWbwLDhVXMDuj78tmsGriAuWmasg4qY=
Subject key identifier:   E9:4A:B9:6F:FC:94:10:D7:2C:6C:05:F4:14:82:B5:07:6D:CC:4F:06
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       019CADFE7F6DEEBE9D6631745352BCAC2A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          11DD
Signing time:             Mon 02 Mar 2026 10:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 10:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 10:01:03 +0000
Files and hashes:         1: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
                          2: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
                          3: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
                          4: K9Rcc3WzxcMz5W462D1Uq4gMncI.roa (hash: sMPLEzXi/TLAjcusPwFMkhIofh4njesGN5Oaf9QbDY8=)
                          5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
                          6: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
                          7: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
                          8: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
                          9: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=)
                          10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: xkgxFoWEwkvz4HG3S6c79+68MMGsYuxWrUu9R+zG72U=)
                          11: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
                          12: uaZQDhIwfSYmxyJRtqIy_L_zHso.roa (hash: N+ZzHwJkmYGK/5t3l5o1KIYLDvFM99cPQu6Ca7RAknE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:7f:6d:ee:be:9d:66:31:74:53:52:bc:ac:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Mar  2 10:01:03 2026 GMT
            Not After : Mar  3 10:01:03 2026 GMT
        Subject: CN=e94ab96ffc9410d72c6c05f41482b5076dcc4f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:8e:be:f3:aa:26:a0:51:d3:b8:2d:21:d4:
                    4c:72:e7:53:f7:b9:db:c8:6a:84:aa:32:a4:da:48:
                    8a:4a:fd:23:a0:78:e4:5a:38:ca:64:9e:79:f3:89:
                    21:0a:f4:06:d4:f1:b8:38:c0:67:96:b3:52:d8:eb:
                    2f:b0:76:52:cd:40:6c:74:5b:25:14:32:98:1b:ed:
                    59:4d:6a:f5:c7:ab:b8:b7:3c:51:ec:b1:b4:17:c0:
                    55:60:07:b2:3a:81:bd:48:52:af:65:17:f6:bc:39:
                    ee:c3:cc:2a:a3:28:46:af:b2:c9:94:99:f5:78:86:
                    b4:60:4c:f9:76:93:64:a0:48:5f:52:36:a1:6b:e1:
                    e2:22:48:de:df:2a:c1:f3:99:62:9d:25:57:b5:8c:
                    ee:6b:6a:9f:84:ad:08:4e:05:48:98:49:0d:70:36:
                    bc:ff:2e:5d:76:77:9a:4a:f2:89:e0:1a:f8:4f:dc:
                    d4:11:54:e1:49:d0:72:46:b1:7d:6e:b1:29:aa:69:
                    6a:a3:bc:a2:4d:89:a3:86:41:49:95:2d:a3:dd:a7:
                    f4:f1:43:ce:ee:ba:03:a7:ee:09:d2:28:46:b9:7e:
                    23:48:0e:8e:30:00:6a:3a:f2:95:1f:f5:9a:b7:82:
                    c0:0c:1f:ae:79:81:c5:d1:e7:4c:27:2b:f7:71:3e:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4A:B9:6F:FC:94:10:D7:2C:6C:05:F4:14:82:B5:07:6D:CC:4F:06
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:82:b7:d8:26:ed:c0:cd:e7:7a:9e:50:d7:15:a1:e1:18:
         cb:6c:35:06:f2:8a:b3:72:d8:83:73:dd:56:3f:25:89:34:ac:
         21:16:52:31:ad:71:62:4f:59:0d:ae:79:4a:c0:8f:01:b2:9c:
         11:8a:64:0d:70:57:00:d2:4a:a8:09:72:52:a5:10:dd:d4:01:
         b9:6f:d5:f4:35:44:32:7b:49:35:7f:81:01:3d:25:99:0d:85:
         49:c2:33:90:eb:4b:f9:5b:46:d6:59:33:ba:bd:05:aa:44:a4:
         0f:2f:16:be:26:22:bf:0d:c7:89:05:a4:48:c3:59:31:16:ba:
         67:aa:22:18:c5:35:da:b4:64:0b:d3:79:b3:42:ef:bb:e1:5a:
         1b:a5:01:c1:0f:aa:b8:e5:61:8c:20:ac:22:dd:a3:19:57:f2:
         90:88:d9:87:f7:20:4f:d3:12:7f:81:99:da:ac:f8:7f:ab:c8:
         3a:03:05:97:53:2a:45:ec:cf:4a:73:2e:97:89:5a:bb:27:f7:
         d5:a6:86:a7:32:f0:76:4d:40:4d:35:45:55:f8:0b:94:34:c9:
         bd:10:05:4c:98:40:e8:47:26:0b:8a:37:d7:5e:56:3b:89:3e:
         5a:e4:48:1b:30:52:c3:dd:39:c0:41:dc:02:02:d4:47:42:25:
         15:1a:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:46 2026 by rpki-client