Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          GPEmjEHtjxTKAvJAoYcKHr9xcOH1tNIxvBHrFMOzkAA=
Subject key identifier:   3B:E1:97:77:84:0E:73:78:79:D8:90:0E:CE:E5:E1:50:21:02:FF:84
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       019D38658CF6DB2D05974415DD61C4A0D05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          0C41
Signing time:             Sun 29 Mar 2026 07:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:12 +0000
Files and hashes:         1: dvv-WXUCwpGvHoqWr0kRejCLlUk.roa (hash: PeMWeS2rL/14VTbD4tWO6upgbT9sKeWB9wMUYzsl6RM=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: zRIMiFd+Ep4jqmd7YcIgaHMPJivu+7JBLCeWIpPA1T8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:8c:f6:db:2d:05:97:44:15:dd:61:c4:a0:d0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: Mar 29 07:01:12 2026 GMT
            Not After : Mar 30 07:01:12 2026 GMT
        Subject: CN=3be19777840e737879d8900ecee5e1502102ff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:58:71:75:ce:89:29:73:a7:9a:fe:aa:f2:
                    3f:f9:80:78:ea:27:c1:cc:c0:26:49:0a:d7:67:29:
                    30:0e:c4:e8:4c:51:a7:04:ca:3c:d5:52:dc:70:70:
                    d0:00:e4:d8:df:18:4d:8b:6c:2a:6e:f2:cf:8d:cc:
                    03:44:e5:0b:89:fb:e4:4f:0e:ad:eb:53:01:7c:04:
                    b0:dd:2d:25:d7:c4:1b:27:9a:58:a2:ed:10:c4:44:
                    2e:25:dc:22:68:a7:03:d6:f4:91:d3:06:ae:42:a1:
                    b4:03:58:86:b5:54:bd:ed:25:6e:42:d3:ea:80:59:
                    18:23:81:ac:43:76:b2:9d:1b:b5:fb:d4:24:40:60:
                    5b:42:3c:27:3e:21:d7:15:39:bb:08:0c:17:1c:92:
                    d2:2d:23:00:29:2c:92:fa:e9:f0:ea:d9:12:bf:8b:
                    6c:03:dc:52:6b:33:a8:f1:7d:1e:d1:b2:0a:a9:e8:
                    e4:c4:be:76:83:23:e0:9f:41:de:79:d7:ca:62:47:
                    dd:a6:e7:a2:f3:14:65:b6:62:36:44:5d:ab:37:6b:
                    f6:68:d1:1f:0e:8d:3f:d7:80:53:ab:64:be:b1:d9:
                    02:4b:0d:79:79:07:19:c9:34:10:9c:df:10:67:ba:
                    bc:74:49:e0:46:11:03:3d:4c:31:e8:9b:60:fa:46:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:97:77:84:0E:73:78:79:D8:90:0E:CE:E5:E1:50:21:02:FF:84
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:8f:8d:7e:36:1a:ec:f0:25:f8:e6:90:af:44:a3:a1:d5:af:
         e7:b7:0c:40:8f:7c:52:ea:b5:64:1c:42:b8:7a:cc:8a:2c:48:
         9d:c6:49:86:a8:56:18:3f:c9:00:68:cb:1b:71:24:7d:8b:d2:
         07:4a:df:64:51:a0:c8:83:f9:cf:92:37:9a:2b:35:a9:77:8b:
         99:fc:3b:7e:55:0f:1e:e6:48:c3:27:24:18:a4:08:a2:2c:dd:
         8c:e2:ed:54:93:c5:0d:d6:ac:d9:3e:b4:b8:ab:ae:5d:56:e4:
         03:f7:76:6d:a8:bd:94:1e:a4:0c:00:23:10:19:0e:0a:98:3a:
         4f:c2:9b:a4:cf:bf:2d:71:ba:5a:98:64:2d:78:4e:90:49:8d:
         b6:69:17:f6:c6:b9:12:25:4e:43:fd:cf:38:e1:a7:95:b5:48:
         35:45:7f:75:9c:b2:2e:2d:ba:b3:eb:b1:1e:07:fd:60:34:cd:
         fc:6b:f6:c2:9c:46:ba:34:76:ea:e5:34:11:12:ff:21:6e:7a:
         ff:47:58:30:e5:62:8e:99:c2:40:82:bd:f3:a9:11:b5:48:a9:
         2c:d4:ab:ba:64:98:15:3d:1e:55:eb:85:7b:35:6b:f8:8c:f1:
         96:d6:34:54:0d:1b:c1:81:d4:4d:77:30:de:86:a6:0e:f8:61:
         75:34:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:50 2026 by rpki-client