Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          On+IAdq3x+c6dD0KDI7m7/uOByxvffbiNreHGoQ6GOE=
Subject key identifier:   B2:92:87:4E:FD:11:9A:A3:15:49:FE:1C:0E:BF:E3:05:A6:2B:19:E6
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019CEAEF23A3AAE6731F5BE6EAB2E7221324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          186F
Signing time:             Sat 14 Mar 2026 06:01:06 +0000
Manifest this update:     Sat 14 Mar 2026 06:01:06 +0000
Manifest next update:     Sun 15 Mar 2026 06:01:06 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: iX5wiGG0uvN0ir/EjxqJHYOyBrn1YdAactCEgkF3QBc=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:ef:23:a3:aa:e6:73:1f:5b:e6:ea:b2:e7:22:13:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Mar 14 06:01:06 2026 GMT
            Not After : Mar 15 06:01:06 2026 GMT
        Subject: CN=b292874efd119aa31549fe1c0ebfe305a62b19e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:e2:a4:21:7b:c7:f6:b5:40:5c:be:8b:b3:
                    8c:71:8d:1c:c3:e8:d8:ca:c4:39:f9:be:9a:b7:f9:
                    ea:e1:8a:4d:0d:df:14:6c:8a:b9:36:9c:a9:c7:32:
                    dc:9a:d7:08:6c:32:b2:90:0e:12:21:86:0d:6f:e9:
                    07:39:1e:c4:6b:7e:1f:49:2b:95:13:19:0e:0c:1d:
                    16:31:f3:d2:fe:ce:54:2c:9f:f0:7c:c3:d5:a7:be:
                    94:22:9c:91:70:85:f4:76:60:61:0d:3c:22:94:f1:
                    bb:54:d7:88:13:be:00:05:89:fd:ad:65:c6:6f:26:
                    d4:e4:73:43:60:36:2c:f9:f5:37:e6:cb:77:f8:a5:
                    79:f7:38:8d:4f:4b:3d:e0:a3:4e:ed:70:23:56:68:
                    ce:c1:99:97:98:d0:cd:57:8c:9a:bc:6b:a6:86:c1:
                    fb:f9:7f:ad:fa:15:ef:ea:72:33:fa:53:90:48:68:
                    51:65:85:04:f5:92:2f:43:f2:e1:44:f2:58:d9:ff:
                    a1:ae:01:23:1b:c2:57:c3:63:4a:bf:22:36:5a:d3:
                    9f:72:d0:94:6c:d6:f2:ad:7e:71:e6:3f:1f:73:f0:
                    15:5a:54:5f:66:fe:81:ed:f2:92:df:b7:47:50:1e:
                    76:70:0d:d9:9c:0c:ac:60:81:e9:28:ce:69:fa:5d:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:92:87:4E:FD:11:9A:A3:15:49:FE:1C:0E:BF:E3:05:A6:2B:19:E6
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:95:ab:94:c1:b6:aa:ad:e5:bd:ef:57:c6:e3:5a:44:7b:
         72:b9:8e:82:c4:82:2d:08:12:f5:3b:bf:e5:fc:96:6c:07:7d:
         5f:73:6c:86:f9:fa:e6:9e:e3:f4:cb:5d:95:23:72:bb:b2:e6:
         2d:dc:f9:8d:00:9e:d9:9f:83:50:7f:cd:7c:d6:90:55:ad:9a:
         14:49:64:d4:b6:cb:50:40:8b:1e:99:90:9c:7a:51:3f:0d:38:
         45:8b:10:70:c8:5b:69:2c:3d:cc:2a:cb:70:bb:a9:0c:1c:2c:
         1f:8c:9f:5d:73:b5:36:1d:02:2d:98:1e:34:c4:1e:12:d9:14:
         16:b8:83:01:13:74:e9:e1:ad:23:72:24:94:25:bd:d8:b0:e2:
         0f:2d:57:70:4d:ac:f7:cc:ae:a5:01:12:03:7b:6c:f2:6a:6b:
         d5:d5:9a:ad:bd:fd:41:33:15:08:14:a4:2c:38:ec:34:b4:16:
         2a:28:3a:94:6d:de:32:34:f5:9c:a1:95:23:fa:23:82:79:61:
         ec:7e:0c:db:a3:c6:45:d4:91:64:a9:6e:1f:e7:e3:99:02:22:
         9e:3d:90:75:88:a1:91:74:a0:05:cb:57:5d:75:00:37:4e:ca:
         fd:e3:82:4c:1a:a9:e7:77:23:bf:d5:2f:32:6c:05:57:c4:83:
         e1:ec:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:50:06 2026 by rpki-client