Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          i6bFTFx9f5WfFGEMH2l6f1zKNZ/IaWqGXn+Hckna80U=
Subject key identifier:   CF:25:02:48:BE:EC:5A:09:5B:CE:80:86:CC:E8:E4:C7:1A:B0:71:8C
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019CAEA2BDC5EB7FCF9B419AED3C11034BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 13:00:26 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:26 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:26 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: 0EL4CIJ8J51Wdi55J0oo6f5+k4EK1ibHc/FYaDicBUo=)
                          2: qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (hash: tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:bd:c5:eb:7f:cf:9b:41:9a:ed:3c:11:03:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Mar  2 13:00:26 2026 GMT
            Not After : Mar  3 13:00:26 2026 GMT
        Subject: CN=cf250248beec5a095bce8086cce8e4c71ab0718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:12:fd:70:28:9a:4c:bc:b8:4d:01:2c:70:
                    3f:49:98:9d:28:b4:b8:0d:be:d3:16:82:04:74:24:
                    75:ca:52:29:74:45:8a:33:0a:b4:46:ab:9f:0f:f2:
                    16:39:12:2e:63:35:13:1e:0f:e6:01:20:91:db:89:
                    b1:78:fc:0f:84:10:a1:45:08:be:74:26:ae:9e:4a:
                    1c:70:f7:0c:07:7b:46:62:87:2a:ed:fe:24:e6:af:
                    2b:6b:d6:7a:a9:d9:c9:f6:59:41:e2:10:ad:0d:4f:
                    75:f6:08:1a:ed:5d:9c:64:31:74:99:7f:dd:49:ff:
                    c8:d0:1c:e7:94:68:dd:39:ac:54:9d:ee:37:ea:58:
                    e8:17:5f:e9:b3:fd:4e:4b:32:5d:0a:bb:c5:8f:d3:
                    4c:e4:49:99:d8:de:21:8c:fd:48:8f:c1:9a:49:38:
                    66:30:a3:70:a5:d5:e2:d4:85:1d:43:34:64:3b:7e:
                    78:fb:c7:14:4b:af:29:44:ab:e7:c0:ba:32:0f:9e:
                    e3:63:bc:62:03:62:c7:b3:87:94:99:64:10:e3:7f:
                    69:40:e8:22:35:2f:ca:80:60:41:49:18:89:50:16:
                    50:79:ca:67:ff:ea:4a:d4:6d:a7:66:df:0b:bf:2a:
                    ec:c1:4f:cb:c9:35:80:5b:24:6a:6a:9b:a7:ce:47:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:25:02:48:BE:EC:5A:09:5B:CE:80:86:CC:E8:E4:C7:1A:B0:71:8C
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ef:e0:5c:7d:dd:ed:06:de:f8:8c:03:f7:67:f3:b3:c3:29:
         ee:ab:c5:60:02:d6:b4:8e:75:31:25:be:9f:9d:80:f2:aa:e5:
         ad:00:4a:e3:cc:2a:fd:d5:7c:7d:9f:d6:fc:69:85:41:98:65:
         2f:9e:21:28:02:66:e2:cb:45:8c:da:4c:86:01:90:50:57:90:
         c9:1e:14:6c:c6:e4:84:c2:6e:c5:b0:f4:38:47:73:f1:e1:26:
         8a:a9:74:42:f2:bd:35:44:d6:f6:92:27:69:27:24:64:ab:62:
         33:80:41:b5:0f:6d:eb:38:f2:c3:6b:d7:a3:9d:3a:df:1e:af:
         43:06:a0:0b:00:88:65:44:11:ef:cc:67:d7:ae:f6:8d:3e:1a:
         f6:71:0b:9f:11:77:67:ed:ce:66:b2:c7:9c:f5:cc:58:63:73:
         1b:ca:9f:23:8d:4c:cc:97:fb:4f:b2:80:5f:40:58:c8:23:65:
         43:f8:3d:79:92:e1:1d:91:a9:6e:e0:47:6f:c7:61:3f:99:21:
         f1:8b:ae:6b:95:91:73:26:d2:d8:09:09:f8:db:7a:f4:d0:d3:
         f2:fc:2e:46:f9:1e:96:ae:f5:44:b4:b1:67:76:97:7a:1d:3a:
         a3:74:1a:eb:1b:22:5f:73:e6:73:9b:f8:d5:f9:8f:52:d5:5d:
         f6:24:5f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuor3F63/Pm0Ga7TwRA0vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmEyYmEzY2MxOGM5OTg1MDEzMDllY2RlMDQyNzA2YWY1
Yjg0NWEwHhcNMjYwMzAyMTMwMDI2WhcNMjYwMzAzMTMwMDI2WjAzMTEwLwYDVQQD
EyhjZjI1MDI0OGJlZWM1YTA5NWJjZTgwODZjY2U4ZTRjNzFhYjA3MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuQS/XAomky8uE0BLHA/SZidKLS4
Db7TFoIEdCR1ylIpdEWKMwq0RqufD/IWORIuYzUTHg/mASCR24mxePwPhBChRQi+
dCaunkoccPcMB3tGYocq7f4k5q8ra9Z6qdnJ9llB4hCtDU919gga7V2cZDF0mX/d
Sf/I0BznlGjdOaxUne436ljoF1/ps/1OSzJdCrvFj9NM5EmZ2N4hjP1Ij8GaSThm
MKNwpdXi1IUdQzRkO354+8cUS68pRKvnwLoyD57jY7xiA2LHs4eUmWQQ439pQOgi
NS/KgGBBSRiJUBZQecpn/+pK1G2nZt8LvyrswU/LyTWAWyRqapunzkcyRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8lAki+7FoJW86Ahszo5McasHGMMB8GA1UdIwQY
MBaAFBIqK6PMGMmYUBMJ7N4EJwavW4RaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMt
YWUxYWExNjU0Y2RlLzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMtYWUxYWExNjU0Y2Rl
LzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+/gXH3d
7Qbe+IwD92fzs8Mp7qvFYALWtI51MSW+n52A8qrlrQBK48wq/dV8fZ/W/GmFQZhl
L54hKAJm4stFjNpMhgGQUFeQyR4UbMbkhMJuxbD0OEdz8eEmiql0QvK9NUTW9pIn
aSckZKtiM4BBtQ9t6zjyw2vXo5063x6vQwagCwCIZUQR78xn1672jT4a9nELnxF3
Z+3OZrLHnPXMWGNzG8qfI41MzJf7T7KAX0BYyCNlQ/g9eZLhHZGpbuBHb8dhP5kh
8Yuua5WRcybS2AkJ+Nt69NDT8vwuRvkelq71RLSxZ3aXeh06o3Qa6xsiX3Pmc5v4
1fmPUtVd9iRfcA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:59 2026 by rpki-client