Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          GHjCRtFN1lWJkjoUwEpfQXncXlvLUH9xBjf1NaIKA0M=
Subject key identifier:   DD:99:DB:6B:4F:AE:F0:57:02:5E:25:AF:D0:57:AD:0A:F0:E5:C9:42
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CB8EFF09E90ED060B6F8B9060C97EEEAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1898
Signing time:             Wed 04 Mar 2026 13:00:58 +0000
Manifest this update:     Wed 04 Mar 2026 13:00:58 +0000
Manifest next update:     Thu 05 Mar 2026 13:00:58 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: r0JKVA1FATocK2Va18nS3z0R1jB3/toRpq+5VRDvedc=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b8:ef:f0:9e:90:ed:06:0b:6f:8b:90:60:c9:7e:ee:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar  4 13:00:58 2026 GMT
            Not After : Mar  5 13:00:58 2026 GMT
        Subject: CN=dd99db6b4faef057025e25afd057ad0af0e5c942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:31:5a:7f:23:2c:26:e9:ba:bd:b4:37:a7:
                    77:48:2e:8f:85:b0:e8:b2:f5:b5:e5:5b:f1:bf:95:
                    98:af:aa:6a:ab:d4:dc:ab:12:02:f4:4e:34:7d:a1:
                    ec:2b:c9:9d:7b:f9:b4:52:9f:50:16:fe:e6:d9:8e:
                    71:4b:32:69:23:ee:12:d0:86:6b:7b:34:bf:a3:ed:
                    91:32:cc:22:86:a9:35:0d:8c:c2:e4:6b:6d:bd:a7:
                    f3:82:48:3d:5c:e5:90:a9:f2:4d:09:78:30:b7:4a:
                    eb:57:e1:6d:62:61:d1:1a:54:29:fb:7c:00:61:5b:
                    4c:75:08:95:54:f3:d8:54:52:f7:f0:d1:8f:8f:a7:
                    2e:0f:11:e9:66:49:e5:12:f6:93:c4:3d:ff:b4:9b:
                    a3:19:b4:26:bf:19:63:e3:4b:10:cb:0f:65:67:98:
                    63:49:60:67:83:e7:65:a5:a4:ff:49:d7:52:5c:f7:
                    eb:35:51:7e:59:f4:96:31:cb:a1:3b:95:44:34:a9:
                    88:b4:3a:ae:c7:2c:b5:cf:40:f8:b3:d0:b1:20:42:
                    1d:78:39:ba:df:34:82:90:6d:8b:08:78:bc:bd:86:
                    2b:28:52:13:4b:bc:c7:df:9d:be:23:41:43:21:db:
                    0a:6a:98:de:81:cf:3e:b1:ac:c3:74:b0:41:28:5a:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:DB:6B:4F:AE:F0:57:02:5E:25:AF:D0:57:AD:0A:F0:E5:C9:42
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:97:36:ed:d4:90:c7:2c:f7:00:6d:01:27:ed:16:48:c8:c6:
         50:dd:4d:3d:f6:06:2e:93:a8:54:0d:ee:1b:0b:9b:05:1c:65:
         e9:8d:4d:b6:c2:4c:a8:f0:4a:76:7a:c6:a9:16:85:f7:d7:24:
         f2:f1:45:19:1d:24:29:44:64:02:46:e4:73:11:f3:80:16:53:
         6d:d4:1d:ec:35:86:48:91:26:a1:e3:79:65:b7:2d:1d:25:dc:
         b1:bc:ed:d6:6d:65:ca:21:f2:aa:a5:a7:cc:47:19:f6:ee:f7:
         1a:3a:6b:16:da:24:25:d0:b6:f0:a0:14:0d:67:3d:93:a9:46:
         39:71:9a:01:24:9c:06:9c:71:aa:4d:5d:85:cd:04:96:ae:29:
         26:08:37:bb:a5:a2:82:3f:eb:29:47:91:5f:1e:06:0a:ba:de:
         79:83:1d:f1:7a:c4:a7:0a:6f:db:a0:f1:01:5b:e8:e3:82:a4:
         2d:5f:af:dc:37:8b:09:27:e2:98:27:80:7b:e5:b7:31:63:11:
         c9:72:d8:78:f0:6c:52:bc:34:96:15:42:80:a0:79:e3:c1:ce:
         b6:31:e0:02:92:3e:e9:a6:14:95:65:92:ec:5d:2b:13:1f:2b:
         e6:97:44:ac:97:25:b3:44:8c:3b:39:1f:55:ff:f0:76:dc:6a:
         24:b9:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:54:18 2026 by rpki-client