Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          lrjwNvt1uHSdZjhk3bSxy7Mu0farDVM+LDKSCw4Ts54=
Subject key identifier:   AF:5B:F5:2B:2A:03:07:3D:E8:01:CF:E3:32:CA:3A:1C:B4:26:1C:8F
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       019CC4189303E42ED832266228750AB5AC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          137E
Signing time:             Fri 06 Mar 2026 17:01:10 +0000
Manifest this update:     Fri 06 Mar 2026 17:01:10 +0000
Manifest next update:     Sat 07 Mar 2026 17:01:10 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: YTzW0cnvLdqNjWsoiACtzthKBlwEaim8Gtg7yBdT/YU=)
                          2: CxjvBT6i6ORn-LgV2GBf20kjEYw.asa (hash: BzUmnePwH8qqVa3rp1UNOBEk9Rs5woiSczy+DZk7nog=)
                          3: KgkchIsyILOfTwaKeasxpjdcQXs.roa (hash: CYbiKMiKuFeSX+s/JGs9HsfLCedULZjZfgzxNtppN/c=)
                          4: _OzM8w4FoR9ccCbQv3-snmY5IPs.asa (hash: MiIqtXDMPv3SC27FerQ7njWvgkVA9z0GFX+NGxq8AW0=)
                          5: uVof_pZ74sFHnmAAGfe8hPL5XXc.roa (hash: XEVTEZp90XVbiLucI7ze6QHAKLfnmtdX6Lu0uoZP/AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:18:93:03:e4:2e:d8:32:26:62:28:75:0a:b5:ac:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Mar  6 17:01:10 2026 GMT
            Not After : Mar  7 17:01:10 2026 GMT
        Subject: CN=af5bf52b2a03073de801cfe332ca3a1cb4261c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:f3:48:c2:b1:82:95:12:c2:63:43:bd:1d:
                    04:73:1d:56:bf:c6:b5:71:f0:ae:99:a1:84:cb:3b:
                    19:64:c4:bc:bf:86:b2:2e:93:1c:4d:33:25:91:e2:
                    e0:1f:45:ac:42:6d:20:89:de:b3:41:47:ae:d1:fb:
                    47:e5:b8:0b:2e:2c:b6:f9:5c:e5:5d:ac:d8:f0:bc:
                    e2:18:6f:a6:b4:3a:aa:e3:80:f8:35:5e:78:8f:b4:
                    97:d6:91:47:07:d8:a3:ba:fb:3d:cd:be:fa:5f:8b:
                    70:75:41:c8:2f:5e:ab:07:49:29:cb:2c:98:17:73:
                    95:b8:54:2b:46:34:f0:2f:48:ad:37:10:61:bb:6a:
                    c7:c6:49:be:a2:55:fa:60:81:40:92:21:7e:40:e1:
                    b0:f2:f9:fd:0b:c6:47:9c:a6:90:56:f5:f1:50:1d:
                    ed:ab:61:e2:31:cb:3d:9e:7e:68:a2:2b:6b:d3:0a:
                    55:bd:47:68:78:8d:8f:67:87:4a:39:fb:7a:8a:cf:
                    47:16:8d:50:ce:9a:9c:73:cf:fb:77:fc:34:b5:e8:
                    38:fe:92:9b:7e:74:a4:d8:0d:e1:7e:06:96:b2:c4:
                    0b:0f:52:32:b9:0e:ec:f4:09:15:ff:c7:6b:22:fb:
                    d1:3d:76:d8:53:39:02:36:c8:c7:fa:5d:b7:41:7e:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5B:F5:2B:2A:03:07:3D:E8:01:CF:E3:32:CA:3A:1C:B4:26:1C:8F
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:c8:f8:aa:ab:c8:64:1d:65:4a:60:33:f6:c9:b0:8b:0e:
         bf:e0:33:d1:c8:4c:c4:d9:6b:b1:23:70:2e:9f:39:95:e6:2e:
         c2:7d:6c:e2:4c:df:f9:27:fd:37:72:3e:c5:48:a9:ce:bb:1c:
         7e:2d:7e:7a:a8:2f:aa:cd:ca:f3:7a:dc:e8:42:26:95:7f:0d:
         87:80:1e:bc:92:27:96:74:d3:cb:70:9e:33:2e:37:4f:d7:8b:
         ca:91:5a:c7:77:61:0f:8a:b9:f3:28:12:a2:ad:62:75:7d:8b:
         ab:2e:ad:93:52:62:92:96:62:40:62:49:ab:44:4d:fe:fe:a7:
         7f:c4:da:ee:83:1f:7e:92:98:b9:32:a5:87:71:59:8b:09:e3:
         b4:6c:72:5e:ec:eb:b4:8f:0f:3c:94:0e:f3:7f:5a:10:98:56:
         45:9f:7e:06:1e:f9:9f:2f:98:44:6d:82:e5:c0:be:a2:43:a3:
         50:35:fc:9b:44:76:9e:e1:a3:cb:7a:95:2f:5a:64:d0:4f:47:
         f4:22:be:99:08:60:8a:25:b6:5f:22:6e:99:94:bc:8e:bb:48:
         08:1e:54:5b:7a:9f:81:de:90:f8:f8:49:f6:a1:1f:87:36:93:
         82:1c:0a:e0:61:16:6d:c7:10:71:4a:b9:ad:a1:b0:ce:44:60:
         ba:44:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:25:21 2026 by rpki-client