Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File:                     EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier:          3nL4qWAMjxkPT/PGgDVQaRpBt/e/pJ2d/8V6fzEaRbs=
Subject key identifier:   48:A8:9A:4E:30:AD:CF:C2:7D:D8:44:7C:CB:D9:22:E7:04:10:83:2A
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer:       /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial:       019D05537CF5B1D6D6CD9C15586B9E6D9C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number:          071B
Signing time:             Thu 19 Mar 2026 09:00:50 +0000
Manifest this update:     Thu 19 Mar 2026 09:00:50 +0000
Manifest next update:     Fri 20 Mar 2026 09:00:50 +0000
Files and hashes:         1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: KYe69hk+pyCI7PnQ6UmuBhGlN1GDsSdbmA48F1oYgEg=)
                          2: WzghRqzGjI_eG3WiC84nx-l-Aus.roa (hash: BkSKCwkOQoqJmPqml1/0+ldKWjkL69DMpw0CtVVRSPA=)
                          3: mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa (hash: NyFP79wSko1G5ztyYBa7m1r2+XgRX6VCVkCRadeTppY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:53:7c:f5:b1:d6:d6:cd:9c:15:58:6b:9e:6d:9c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
        Validity
            Not Before: Mar 19 09:00:50 2026 GMT
            Not After : Mar 20 09:00:50 2026 GMT
        Subject: CN=48a89a4e30adcfc27dd8447ccbd922e70410832a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:ee:50:47:e4:97:66:58:a0:99:69:78:29:
                    84:2c:74:d2:62:e5:8d:ff:19:a6:b0:1e:cd:36:4e:
                    13:67:29:1e:2d:65:02:47:1d:6d:e4:11:51:4f:59:
                    28:b6:a5:fe:45:6b:1a:14:d9:2d:3f:40:5f:55:38:
                    ad:57:5e:34:16:95:b3:b3:fa:d2:ec:62:9d:81:35:
                    46:fd:24:b0:5a:39:b1:c6:e5:ff:0c:99:48:8d:b0:
                    13:c1:aa:5f:ae:d5:21:11:8e:93:19:3d:97:a7:20:
                    fc:aa:43:2b:d4:8c:d2:73:5c:cf:42:85:7d:57:1e:
                    e2:32:43:87:f0:66:6b:e7:34:db:e0:e9:b1:11:be:
                    0e:fd:fd:3d:50:29:fb:ee:11:82:ce:82:27:7e:f4:
                    08:bc:85:13:da:2c:57:c8:34:74:ef:c7:51:9b:e5:
                    86:2f:04:4a:6f:b8:50:3d:97:37:7a:c6:46:9b:34:
                    cd:9a:a4:97:91:5e:8b:66:6a:bd:74:38:df:dc:9d:
                    0c:dc:0c:e8:10:af:35:2c:21:3a:f7:08:6f:1d:ab:
                    6b:f6:ec:d6:52:3e:72:87:b5:1a:17:f3:f1:0d:5d:
                    98:f0:3c:2a:18:5f:a1:a8:60:92:f7:be:3f:e8:39:
                    1e:50:d2:34:b7:34:8a:c5:5a:d9:b8:0d:63:17:30:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A8:9A:4E:30:AD:CF:C2:7D:D8:44:7C:CB:D9:22:E7:04:10:83:2A
            X509v3 Authority Key Identifier:
                keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:25:a0:dd:45:2b:b8:19:f6:a6:77:aa:fb:5c:1b:f8:33:5f:
         bf:88:38:6c:f4:e5:41:90:12:e6:00:5f:bf:c4:a7:49:70:19:
         70:da:f7:b9:cc:69:6d:68:e6:9f:81:53:ef:8c:68:b5:5c:df:
         bd:75:b9:18:ce:ed:ba:54:ce:d7:96:3f:01:7b:71:e9:2a:e8:
         9b:66:06:38:76:c5:02:87:bf:d0:bd:4e:28:d8:ea:15:be:b1:
         f8:aa:96:28:6a:5a:bc:78:ee:41:de:e3:74:46:60:78:ba:85:
         31:65:15:8d:2a:45:9f:c6:45:20:78:c1:f4:f4:39:38:1b:59:
         e3:c6:7c:7b:1a:af:28:0c:b4:78:30:52:e6:1c:9c:61:b7:f8:
         f3:b3:9c:0e:b5:89:38:e5:ee:7c:1b:db:54:15:1d:db:30:a1:
         9f:33:ac:bd:1b:c3:06:8f:98:32:28:b1:58:e2:79:d2:b1:5f:
         bb:94:a0:f7:dd:b8:9c:59:b4:78:23:b1:6f:77:dd:c0:d9:dd:
         09:12:19:6a:14:c6:d3:90:41:b4:ce:c9:36:ba:12:8a:fd:5c:
         7d:17:81:7e:d0:31:dd:0c:c0:b1:6b:7f:e3:2f:bb:5a:e4:1e:
         43:d1:11:f0:ac:1f:4d:92:66:b5:02:de:59:56:ad:10:70:41:
         bf:f3:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:57 2026 by rpki-client