Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          ZsjE3blMjzsIXkm+BUSF0KN94sJOS2JNu+o9PMlzHBo=
Subject key identifier:   DD:42:71:D2:78:D3:E1:56:BF:2F:8D:CE:BB:16:E3:4E:8F:29:B8:89
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CEF02BFF2671C12463C764C19669F870B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          18B4
Signing time:             Sun 15 Mar 2026 01:01:00 +0000
Manifest this update:     Sun 15 Mar 2026 01:01:00 +0000
Manifest next update:     Mon 16 Mar 2026 01:01:00 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 1AupaYzbf+dPSwinYW/bBBj3ZqfHcIwSguT6bN0O5/k=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:02:bf:f2:67:1c:12:46:3c:76:4c:19:66:9f:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar 15 01:01:00 2026 GMT
            Not After : Mar 16 01:01:00 2026 GMT
        Subject: CN=dd4271d278d3e156bf2f8dcebb16e34e8f29b889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:a5:b5:cc:4b:9b:86:04:a1:da:c7:99:de:
                    55:d5:88:f9:39:bd:fd:47:96:c1:47:63:d8:f5:48:
                    48:ae:f4:13:d2:e2:e3:ca:6d:5b:24:f8:16:b8:e9:
                    3e:67:1d:99:38:10:a5:fa:3e:57:29:4a:d4:b8:d8:
                    32:9e:ca:f3:3d:00:2a:db:7f:d7:8e:48:f7:92:3f:
                    29:a4:7b:70:53:f2:55:b5:45:44:0a:14:fd:c5:30:
                    3f:91:e9:97:32:09:bd:c8:de:23:f0:2c:81:5a:af:
                    1d:a3:5e:59:4b:94:80:0c:40:69:a3:4d:00:bd:d4:
                    c3:61:e9:55:10:69:21:87:ae:f1:71:da:74:ba:7a:
                    ec:a9:4b:a9:7d:52:a5:1b:9c:81:cb:71:f4:88:b1:
                    39:bc:7b:da:16:f9:5e:91:b0:c0:49:e7:27:ce:0e:
                    81:00:c1:dc:8d:7b:f1:10:7d:63:05:05:c0:d6:8d:
                    bd:3d:56:e5:b3:19:07:8b:37:80:65:71:ab:5c:02:
                    cc:a4:dd:19:d0:66:3b:74:59:f4:52:cf:c7:aa:40:
                    79:c0:dc:eb:2e:c5:14:ff:59:1d:be:35:6d:e0:d4:
                    3e:a5:1e:9e:73:03:c7:41:3f:6f:07:22:fd:13:ba:
                    dd:79:b9:2f:b8:17:6a:80:fa:89:78:4e:47:ba:db:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:71:D2:78:D3:E1:56:BF:2F:8D:CE:BB:16:E3:4E:8F:29:B8:89
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:c2:cb:ad:5a:0f:d0:f8:a2:b8:6a:bf:c5:53:9a:45:02:
         c6:d5:41:7a:46:22:3a:ea:66:62:26:14:0d:69:f8:69:0c:d9:
         6f:cf:cd:e6:31:e6:0a:d5:4d:c0:f3:4b:bd:10:91:67:5c:3d:
         5b:ec:a8:b7:70:20:d7:cf:d3:6a:9f:b5:3c:44:67:15:de:2d:
         6d:f9:5a:12:74:af:79:09:fa:8d:09:88:65:62:a8:b9:5b:f2:
         d8:24:f0:46:e6:ab:79:22:00:62:15:da:2a:ce:75:68:93:91:
         f4:27:46:24:3f:25:34:f8:c9:68:f9:fb:3a:3a:d7:51:fc:51:
         21:e7:2f:e1:9a:b5:01:10:ad:52:cb:7f:03:15:71:39:9e:7e:
         65:53:32:05:c0:b7:a6:ce:69:e3:0a:4d:29:53:3d:9c:f7:07:
         0d:32:6e:fb:da:0b:90:11:af:fd:d6:ec:55:e2:6a:6d:28:5e:
         fe:99:3c:2c:26:ca:2b:81:bd:f6:16:4f:83:2e:0c:31:18:6a:
         5a:a4:ce:1d:73:c6:59:2c:a3:03:69:9b:1b:98:b5:fb:04:f5:
         f2:93:e4:d2:d7:66:a1:52:c6:c7:2e:6a:9f:ba:18:ae:52:be:
         cc:7d:73:73:2f:49:ac:bf:9a:b7:ec:cd:5a:8d:4c:6f:df:ff:
         b1:a5:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:02:59 2026 by rpki-client