Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File:                     ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier:          Lp7GUg1/BXVGms7ZXC6Dr/geHnydCoXq70sXMAJEdSQ=
Subject key identifier:   81:CF:AB:B0:E0:00:D3:F0:B0:28:66:45:2E:C2:70:86:6D:0E:CA:FD
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer:       /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial:       019CAF481159C96EFC61DD4EDD35A1EE9C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number:          039F
Signing time:             Mon 02 Mar 2026 16:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 16:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 16:01:01 +0000
Files and hashes:         1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: wKlmfkoK/T2IKinLKubhuvrzAQwOknBQLpboudikJvk=)
                          2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
                          3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:48:11:59:c9:6e:fc:61:dd:4e:dd:35:a1:ee:9c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
        Validity
            Not Before: Mar  2 16:01:01 2026 GMT
            Not After : Mar  3 16:01:01 2026 GMT
        Subject: CN=81cfabb0e000d3f0b02866452ec270866d0ecafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:ce:c9:fb:5d:51:c4:08:81:27:77:6c:65:
                    c1:d4:7a:f5:8c:23:3f:58:78:21:90:c2:da:2a:22:
                    b1:fe:2b:94:a5:af:51:8f:f2:65:7a:b5:b8:56:63:
                    57:d5:a3:9c:ed:8a:9f:02:40:fa:fa:7c:6f:c6:87:
                    28:cc:17:cc:f7:d0:56:8c:9d:9a:c4:37:80:4f:d1:
                    05:66:2e:b9:e6:49:d5:81:dc:d3:7a:9a:23:b9:4b:
                    ab:5f:db:19:3c:5e:d3:48:97:81:6e:9a:7e:b0:1b:
                    6d:d6:6c:e2:84:7c:cc:5e:4b:c4:8e:22:c8:32:0d:
                    9c:18:9d:06:75:ec:46:9f:fe:aa:fb:ab:f1:65:fb:
                    ef:1b:6b:12:a0:73:37:cb:f3:75:eb:c5:0f:ca:25:
                    74:3f:f2:6d:fd:19:17:ab:05:dc:9c:da:c7:ec:ee:
                    e0:93:b4:a3:59:f3:c7:5b:8f:bd:b4:03:77:4a:7c:
                    f4:ed:34:2b:95:9b:80:5f:99:62:77:3c:b5:0b:e0:
                    39:5f:c1:00:9d:51:62:da:0e:80:3e:02:a9:5c:86:
                    d2:63:d6:17:77:98:e1:10:47:d6:5f:0d:1f:17:34:
                    c9:00:d3:66:b9:7c:0f:8b:da:39:09:d7:f7:f1:bf:
                    7e:5f:28:1d:4d:27:05:79:d4:bb:3f:af:94:31:60:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:AB:B0:E0:00:D3:F0:B0:28:66:45:2E:C2:70:86:6D:0E:CA:FD
            X509v3 Authority Key Identifier:
                keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:52:99:ea:d1:ed:b0:f9:00:b2:aa:b8:ac:cb:b6:2c:44:
         0c:af:46:c9:46:47:39:e7:d6:74:22:83:d1:67:cb:cc:33:81:
         d4:e3:31:e0:43:81:d6:2b:d6:12:58:88:b2:01:89:11:5c:73:
         9c:8b:d6:34:20:6e:58:2b:61:b7:7d:ab:f4:2d:d7:59:8a:14:
         8f:f8:37:45:90:c0:73:2d:83:0c:76:02:1f:06:e3:8c:18:b7:
         d4:e9:e4:9d:ba:16:e7:d7:d6:96:84:7c:ab:9b:1b:a7:d6:d7:
         e4:05:ad:9e:89:96:e4:71:61:e9:cf:49:37:f7:3a:b0:f4:fd:
         41:c4:6e:c7:39:02:5b:9b:62:fb:5e:29:78:a9:6d:54:86:4f:
         08:7f:96:26:fb:aa:42:88:fa:38:bc:f7:dc:e9:31:e2:81:e8:
         6b:56:1b:7e:47:4f:a6:d5:b2:01:fa:11:2a:e4:80:1b:2a:8c:
         6f:06:6b:df:84:2d:c1:f3:1b:e2:60:24:c8:f0:50:30:33:7d:
         81:4c:43:2b:f8:ad:c7:ab:2c:cc:f1:67:e4:6c:03:b9:eb:72:
         f2:c2:3f:3b:c8:cc:85:2b:66:b9:df:af:07:5e:16:2c:34:98:
         de:74:f3:e4:06:d7:c6:01:98:09:af:e3:9c:d6:cb:09:5f:c2:
         51:7b:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:02 2026 by rpki-client