Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          rYm9/A/YRvdamGfI9f1K2WVIo99YWFMwF/KIoaaMjZ4=
Subject key identifier:   B2:0F:30:F2:50:F3:AC:9F:D2:A1:CB:1E:73:44:46:15:94:99:CF:00
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019CE9A58404462475B0D24359E81707C83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0F8B
Signing time:             Sat 14 Mar 2026 00:01:04 +0000
Manifest this update:     Sat 14 Mar 2026 00:01:04 +0000
Manifest next update:     Sun 15 Mar 2026 00:01:04 +0000
Files and hashes:         1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
                          2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: r1PcbWn4Q5ik6MkDrhFg1MBUw/8TiWkrIsGHnwXIzwQ=)
                          4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:a5:84:04:46:24:75:b0:d2:43:59:e8:17:07:c8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Mar 14 00:01:04 2026 GMT
            Not After : Mar 15 00:01:04 2026 GMT
        Subject: CN=b20f30f250f3ac9fd2a1cb1e734446159499cf00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:92:57:70:9b:1f:69:c8:79:f1:69:87:1d:
                    6c:ea:76:0a:d8:cb:58:bb:2f:9b:a9:86:df:51:b6:
                    e1:b0:38:04:82:a7:ce:ca:d9:11:10:df:10:94:8d:
                    2b:fe:16:9c:4d:e0:cf:21:83:6b:f0:88:02:ed:fb:
                    11:c2:0c:f6:1e:19:93:4b:38:12:10:2d:b1:35:c1:
                    b9:df:21:fc:f0:62:5f:04:79:44:a2:2d:15:9b:5e:
                    ab:40:4f:98:40:0f:f2:3a:82:c5:3a:f5:0f:db:62:
                    53:ef:8b:28:d5:fe:cc:76:8e:60:9d:ca:d4:d8:e9:
                    5d:43:b1:d7:3a:55:2a:c9:69:f8:e5:8a:48:a5:55:
                    b0:e1:4f:96:63:b5:c9:4b:ef:d2:06:ec:89:3c:84:
                    82:62:5b:66:d7:e9:a5:82:70:e5:d5:c0:2d:ce:4e:
                    c9:1d:89:28:0a:db:a0:40:77:fa:2c:03:c6:99:e9:
                    8a:b4:07:31:c9:db:d5:65:0f:1b:f2:10:ad:ee:a2:
                    d0:8d:a6:c2:ff:2b:4f:2e:40:10:1c:0d:f8:30:c1:
                    12:b9:76:44:eb:2f:61:db:76:48:ee:8c:ef:f8:a8:
                    40:9f:23:b1:39:41:6f:45:f2:27:3a:23:88:e1:e4:
                    09:31:06:0f:84:18:8f:6a:27:88:c0:18:fc:95:1c:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:30:F2:50:F3:AC:9F:D2:A1:CB:1E:73:44:46:15:94:99:CF:00
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a6:5b:42:87:75:3d:82:64:07:9b:4c:b7:f5:eb:16:fb:f4:
         eb:40:93:64:5d:c5:8d:1d:05:85:8e:aa:7d:65:27:cd:b2:71:
         cc:9c:45:d7:98:58:20:52:de:56:ca:18:e1:8e:62:4a:01:cc:
         a6:29:56:c4:5a:0e:30:fa:74:b1:5c:72:75:40:69:de:05:01:
         d0:b2:14:1e:a9:f0:4c:48:7c:ed:58:fb:24:4d:83:26:60:cd:
         fc:b7:8c:a1:34:4c:30:e7:c7:ef:84:48:85:f9:90:39:67:eb:
         75:86:5a:50:bf:d4:99:9a:ac:1d:85:28:6f:e5:77:19:85:a3:
         b3:47:25:0b:83:f7:46:4e:c2:a8:a2:8f:8d:f9:73:fc:2f:e9:
         b6:1f:48:2c:11:e1:7e:21:25:90:5c:1a:7f:d6:99:95:c0:00:
         8f:55:9f:02:15:62:d3:0f:36:b4:83:4c:f1:68:5e:9e:a0:b5:
         90:0e:14:e0:26:36:af:ca:e7:ea:89:ad:a8:f6:30:01:97:b1:
         dc:1e:3d:4e:55:68:0d:e7:d9:c6:20:83:dd:5e:27:d5:2d:35:
         38:4f:c7:58:30:c8:42:c1:a9:85:3a:6c:b6:ed:21:ab:8d:13:
         eb:4e:ea:be:07:fd:ff:53:8b:06:d9:45:8e:c6:c8:96:98:89:
         9f:eb:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:30:29 2026 by rpki-client