Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
File:                     ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json)
Hash identifier:          QHQXwJI8JjyQ0B9DaCvljg5z0RpuAjb/V2f8aw2EGR0=
Subject key identifier:   1F:E7:78:D4:52:C1:A5:95:80:9B:E6:64:27:57:D1:71:09:D2:69:16
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Certificate issuer:       /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial:       019CE55B30AFE6B72899C9A507172DAAAF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
Manifest number:          0F45
Signing time:             Fri 13 Mar 2026 04:01:24 +0000
Manifest this update:     Fri 13 Mar 2026 04:01:24 +0000
Manifest next update:     Sat 14 Mar 2026 04:01:24 +0000
Files and hashes:         1: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: pHv2jNgi0IuKfmhpXBaWGby4s9cnxsfp1xTafbKZPoM=)
                          2: msjxasNTYVip4ytkLcozKUIyuLU.roa (hash: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5b:30:af:e6:b7:28:99:c9:a5:07:17:2d:aa:af:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
        Validity
            Not Before: Mar 13 04:01:24 2026 GMT
            Not After : Mar 14 04:01:24 2026 GMT
        Subject: CN=1fe778d452c1a595809be6642757d17109d26916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:28:72:4d:b6:27:3a:c6:73:2c:a1:ce:08:c4:
                    61:8a:5d:7b:c8:ff:92:8b:68:0c:50:2e:6e:a0:d6:
                    e8:ff:80:d0:f6:7b:b8:19:b8:9f:48:3f:80:16:53:
                    18:d8:f3:00:67:84:e6:d3:13:55:a2:fe:04:df:61:
                    e9:82:67:eb:ef:37:0f:af:2c:79:92:d7:e1:68:95:
                    38:56:5c:50:ae:d3:22:fb:f5:bf:fa:f6:af:16:cd:
                    e5:3b:8b:66:29:3c:de:6f:34:be:ee:5f:b5:0a:8c:
                    3b:b8:37:fd:ac:e6:dc:9e:9b:0f:b1:96:c7:d9:d5:
                    0e:a9:18:f0:4e:da:d2:21:23:13:15:e8:6c:c8:70:
                    3a:e5:79:d8:87:bf:00:16:0c:4f:d7:88:d9:40:a8:
                    61:2a:e9:b6:ba:a8:19:44:d2:c6:15:f6:02:22:de:
                    19:85:96:e4:6f:f6:16:34:58:7a:6f:63:33:88:e3:
                    fb:b7:cf:97:a9:50:3d:13:38:b4:21:a2:58:2b:cf:
                    08:74:7e:c4:93:4a:0e:b0:cc:14:6f:62:7b:f4:70:
                    03:fa:95:6a:90:48:90:c4:0a:28:b8:b6:a2:88:8b:
                    67:ce:5b:5b:20:3d:39:e3:9f:74:36:d2:3e:fc:79:
                    8b:86:42:fe:8f:88:d0:76:71:44:35:d2:6b:69:a9:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:78:D4:52:C1:A5:95:80:9B:E6:64:27:57:D1:71:09:D2:69:16
            X509v3 Authority Key Identifier:
                keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:09:22:cc:c3:d0:b1:f5:fe:ad:45:6e:ea:b2:ca:08:c4:
         42:b5:40:dc:2c:2a:45:97:38:7b:96:55:d1:3c:1b:d7:af:ae:
         b3:1c:7a:df:69:50:ef:08:96:51:ec:0f:e8:5a:cb:75:e6:17:
         af:2f:bb:82:6c:1a:c5:4a:be:43:00:2c:81:52:cf:5a:1b:78:
         f8:a4:76:0e:d1:b8:01:29:41:1e:c4:6e:1f:92:a3:9a:58:11:
         4e:cb:52:72:31:ce:7c:f5:79:40:f7:aa:f5:d5:87:ec:2e:5d:
         78:b0:ec:0b:f7:d9:8b:d6:9b:83:8f:54:09:fe:cf:49:c0:fd:
         20:ee:83:6d:5c:3a:ab:05:47:7e:25:18:f0:ad:03:69:a3:d7:
         cf:4f:e4:05:c1:58:d9:c4:95:be:7c:44:78:0f:0f:61:a8:17:
         76:85:8a:42:47:fa:5b:b9:c0:12:6b:c4:3e:bd:8e:d2:70:af:
         2a:8e:eb:20:38:40:ab:07:5f:b3:ee:c4:04:f2:a4:74:d4:5b:
         ae:3e:09:1f:d1:1c:27:8f:ac:86:80:62:83:ae:c7:d1:5c:9f:
         83:fd:f3:22:20:e2:c3:a8:ff:81:18:15:8d:d0:c1:fd:97:04:
         36:13:6d:fc:2b:9b:e7:1a:55:df:fb:aa:25:9a:58:23:8a:90:
         ef:75:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:56 2026 by rpki-client