Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          H58tlXZSBEabNrNyrSSEciqhgzoKKkE0JdD/ADN/v+0=
Subject key identifier:   A9:85:A8:A7:22:82:4E:57:50:29:9A:82:F7:E7:8C:D0:AD:17:88:FA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019CDDA1653803CBA77D64142CA8646006EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          18AB
Signing time:             Wed 11 Mar 2026 16:01:07 +0000
Manifest this update:     Wed 11 Mar 2026 16:01:07 +0000
Manifest next update:     Thu 12 Mar 2026 16:01:07 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: uo2uGP3r2OBVLp235ZDj/yTGQPiapJpr6ijYnLSbttA=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 15:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dd:a1:65:38:03:cb:a7:7d:64:14:2c:a8:64:60:06:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Mar 11 16:01:07 2026 GMT
            Not After : Mar 12 16:01:07 2026 GMT
        Subject: CN=a985a8a722824e5750299a82f7e78cd0ad1788fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:62:ff:31:ca:3b:bd:dd:96:ac:0e:41:7e:
                    2d:e1:76:be:ff:50:78:19:a1:5d:42:fb:5f:6e:9a:
                    26:68:38:fc:c7:09:40:2b:0c:14:c4:4d:e7:8e:f0:
                    4b:2f:83:83:b6:aa:46:ec:02:cb:1a:f7:64:9d:99:
                    f8:ef:41:54:e5:be:d8:7c:a2:64:15:3a:39:eb:1a:
                    3c:9f:7b:4e:43:d6:76:d6:77:3e:fa:f7:68:41:08:
                    72:11:f1:1f:9e:7b:a2:02:89:08:71:3f:11:94:39:
                    46:d9:06:d9:0e:ce:a3:10:fc:f8:4e:93:13:3f:5a:
                    87:9a:0f:1c:8a:5e:a2:22:e9:ce:a5:78:1f:06:f1:
                    cd:17:f1:19:dc:ae:33:b8:14:90:0e:4b:49:ad:c1:
                    d1:de:97:93:a5:3f:0f:58:33:dd:65:62:d0:30:8d:
                    f5:46:77:f5:58:58:64:b7:be:d3:71:a5:06:01:78:
                    e5:0a:f9:47:10:69:00:83:a3:f3:2f:02:df:4c:f4:
                    7e:d0:99:48:91:43:8f:90:65:59:ec:90:82:1c:40:
                    ba:cd:de:69:94:c8:72:ae:d2:24:43:b5:b1:85:a2:
                    6b:8f:67:78:72:20:e2:1c:5e:60:cb:00:54:37:14:
                    55:44:ea:07:56:b4:d4:c5:f9:40:e8:0e:ed:52:7c:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:85:A8:A7:22:82:4E:57:50:29:9A:82:F7:E7:8C:D0:AD:17:88:FA
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:87:f1:2a:20:70:af:6f:2e:c8:c7:52:7b:59:06:d3:7f:
         d6:95:16:2b:5c:58:ac:23:a6:8b:14:b0:35:60:dd:89:cd:99:
         56:83:80:46:25:7c:0b:8c:d8:c3:1d:d9:6a:09:cd:8b:c4:14:
         cc:c8:cb:54:ed:46:06:48:99:7d:8a:59:db:4b:d1:f5:2f:10:
         2a:71:9f:13:32:d7:53:c2:b5:2f:f8:8e:28:67:7c:d3:91:46:
         92:7f:3f:41:d9:93:27:dc:23:38:c2:0d:b7:f8:00:cb:04:7c:
         ca:b7:07:3f:dc:59:4d:03:bf:e2:e4:dd:f9:74:9b:2d:18:41:
         17:7a:fd:56:41:ad:c7:65:b5:55:0f:83:8e:cc:15:e5:71:fc:
         9a:d8:8a:88:67:09:5a:3a:9d:1c:f7:22:fa:0b:98:57:6b:45:
         53:76:de:d8:53:92:00:b0:1c:2e:44:c8:a4:d4:e6:b7:62:5f:
         0c:e7:c0:a4:0c:22:7d:bf:8a:de:0c:55:79:2b:d2:15:d6:22:
         cb:62:95:dd:af:96:ad:f5:a4:fc:1e:8f:f7:8e:d8:b2:c1:9f:
         23:83:66:31:ef:64:d6:ab:e5:27:ca:6f:19:b5:a2:5f:28:f2:
         3f:b9:71:bd:81:9e:3e:91:d0:f3:5c:14:28:20:62:3a:89:8a:
         37:fa:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 00:03:49 2026 by rpki-client