Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft
File:                     eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft (raw, json)
Hash identifier:          0oVaIYRRRt3G/3WvAz0yAuFcdFvRXB+F/SBX9oEdfG4=
Subject key identifier:   CE:35:3D:21:26:10:7D:86:87:71:11:C8:38:45:7A:A4:9A:ED:BB:23
Authority key identifier: 78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4
Certificate issuer:       /CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4
Certificate serial:       019D3941825AFC7192107F0C684243FE6974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft
Manifest number:          0258
Signing time:             Sun 29 Mar 2026 11:01:27 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:27 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:27 +0000
Files and hashes:         1: eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl (hash: HVWpbW9mwtHwprcMU6SVsfBGLbeBBFY/Ap+8WjuJ3pc=)
                          2: h90SUmw4PVrpoCMUAoczhUm4mmc.roa (hash: OJd1fxbbJrrbja2c68nFBqAepOB23BCWXwj4IjbBGdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:82:5a:fc:71:92:10:7f:0c:68:42:43:fe:69:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4
        Validity
            Not Before: Mar 29 11:01:27 2026 GMT
            Not After : Mar 30 11:01:27 2026 GMT
        Subject: CN=ce353d2126107d86877111c838457aa49aedbb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:21:54:70:31:43:bf:15:27:4a:83:14:ac:
                    91:e9:49:60:2b:a0:6e:cc:37:a4:10:8b:86:1a:ee:
                    53:e3:00:66:03:b0:ec:8e:31:5d:d0:2a:c8:74:0d:
                    ba:48:1c:e9:f8:47:ba:2a:39:b1:51:90:61:36:9c:
                    8e:b4:5b:a6:d4:a3:ca:a6:7c:9b:9e:46:19:24:06:
                    5a:e5:71:0a:00:62:6c:be:ba:6b:bc:20:d3:42:b7:
                    69:b7:d2:41:51:dc:4a:15:e2:6e:8b:2c:99:9b:6b:
                    c7:57:ae:89:3d:2e:ee:f4:57:80:5d:7d:56:cb:7f:
                    cc:0d:6e:1a:6f:71:93:5c:e2:83:d6:3d:b6:76:53:
                    cf:d7:79:bd:43:8a:65:24:c8:4e:c8:e1:e8:fa:cd:
                    54:73:97:13:e9:20:2f:f2:b1:57:42:9a:23:4a:82:
                    5b:77:e1:ad:eb:52:00:e0:d1:5c:0f:f8:9e:18:21:
                    5b:c9:24:5c:da:04:b8:df:19:a8:ac:fa:b8:53:0e:
                    29:5a:dd:e0:8e:a6:99:39:75:5a:24:f8:f0:1d:1e:
                    65:93:73:27:42:6b:94:96:94:a4:ee:55:62:cc:c7:
                    69:5d:c1:a5:5d:d4:6d:ad:72:06:9b:bb:e3:7d:1b:
                    b1:47:f4:ea:6f:15:ba:1b:ca:51:ed:49:15:67:1a:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:3D:21:26:10:7D:86:87:71:11:C8:38:45:7A:A4:9A:ED:BB:23
            X509v3 Authority Key Identifier:
                keyid:78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:58:09:6c:bc:43:2f:af:af:54:d1:f9:5c:a7:94:5c:fe:a3:
         a2:43:b7:f4:2e:0a:05:36:09:f0:1c:eb:fe:f6:2d:38:b8:cd:
         79:e9:ed:c1:da:c3:f8:19:5b:bf:1c:88:39:0b:7d:d8:f9:3b:
         3c:7b:a1:d8:f9:c4:0c:64:cd:cc:3e:c0:36:39:70:a6:e2:26:
         18:05:e4:70:b6:86:c9:a7:7a:c4:50:14:c5:c3:d3:84:49:e3:
         12:7f:58:50:44:ec:e0:52:7e:2a:a5:50:d5:4b:40:78:a1:8e:
         00:3e:1f:90:ff:93:df:f3:99:ec:bd:67:11:f0:2b:8a:42:8d:
         5c:ec:80:a1:a7:b4:10:71:e6:5b:23:ae:69:00:b6:dd:b1:3a:
         a5:26:9a:54:1d:48:72:9c:16:e8:ca:6b:b1:77:0a:e6:5b:90:
         be:87:e8:49:26:b1:a4:8c:ff:9c:24:5a:2d:0c:b7:75:2e:33:
         6f:c2:b1:38:de:3c:3a:4d:6b:30:09:c3:13:3a:d1:f1:64:a2:
         24:41:33:e8:20:cf:55:ae:13:55:c4:ab:4b:ee:a3:d3:0a:b6:
         06:6b:92:d5:60:64:53:2b:cf:35:03:2b:f0:d9:83:ca:7c:56:
         f7:c4:c6:cc:14:04:d8:10:73:55:cc:97:fc:4c:ab:4c:9c:7a:
         a8:cd:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:06:57 2026 by rpki-client