Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          Ov90AL+RHWx6+NAXzEHi0IyZzSwMBpxiQF3qi1yaHJw=
Subject key identifier:   B9:1C:27:75:6D:3E:2B:9B:17:C9:33:D1:16:8C:46:06:0F:E7:1B:AC
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019D10B342D122AECCC45512E454E1DDC2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          1379
Signing time:             Sat 21 Mar 2026 14:01:16 +0000
Manifest this update:     Sat 21 Mar 2026 14:01:16 +0000
Manifest next update:     Sun 22 Mar 2026 14:01:16 +0000
Files and hashes:         1: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (hash: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: ziwWyODwt2bHTU+pX7f2DfVdEWi+BfUnWbbgY/OxyIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:b3:42:d1:22:ae:cc:c4:55:12:e4:54:e1:dd:c2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Mar 21 14:01:16 2026 GMT
            Not After : Mar 22 14:01:16 2026 GMT
        Subject: CN=b91c27756d3e2b9b17c933d1168c46060fe71bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:6d:a0:cb:5c:fc:ba:c1:14:63:bb:3b:2d:
                    2f:cc:f9:48:aa:da:be:d8:ff:3f:8e:d1:3b:1e:bd:
                    a4:28:a4:aa:a0:5a:b7:1d:fd:64:50:37:ad:6c:ad:
                    e6:19:d7:07:93:45:ff:d5:8a:ad:02:14:98:d9:df:
                    4e:f6:7e:6e:2f:3e:42:14:39:a6:e4:9d:24:c0:6e:
                    d6:b3:fe:9c:f4:e4:88:e7:72:24:b4:d6:e0:4e:d4:
                    71:82:79:b2:65:f0:95:02:da:2b:e8:65:bb:66:d1:
                    98:dc:c3:fa:aa:88:af:b4:85:dc:dc:04:e8:54:9b:
                    9e:6b:aa:33:74:b0:ae:1b:8e:c6:56:67:9b:44:85:
                    e8:8f:e5:84:94:2d:41:c2:87:64:b5:45:18:91:f3:
                    09:8d:86:4a:5a:5f:a3:bc:0a:b7:68:95:34:39:69:
                    3e:fb:88:f2:9c:21:fb:b2:d5:3b:97:03:78:fe:d0:
                    47:d8:25:06:44:b7:79:0c:11:6b:10:b3:cc:49:d4:
                    cd:d1:b3:da:19:4e:8e:4b:c5:70:aa:b9:3a:ef:ab:
                    13:3c:91:0d:e6:5d:07:ad:fb:35:d6:3a:96:b7:bc:
                    19:30:8d:05:38:e4:9a:91:6e:39:b8:0b:b6:f6:7f:
                    cf:79:51:c2:bf:18:26:ff:ad:7f:61:5e:64:9e:81:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:27:75:6D:3E:2B:9B:17:C9:33:D1:16:8C:46:06:0F:E7:1B:AC
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:99:74:7f:0c:a8:aa:11:2f:79:cc:39:34:6a:69:36:e7:
         fd:ec:48:90:1c:62:d1:20:28:34:80:71:8d:03:6c:8f:b1:1f:
         58:1c:af:70:6c:a6:17:5b:a1:0a:ec:60:61:a4:f1:0b:80:a4:
         97:94:c0:a6:27:3c:10:80:67:90:01:b0:73:f0:70:ab:7b:5c:
         f7:23:bf:b2:3a:2c:69:d4:62:56:ef:05:15:b4:61:bd:3e:1f:
         d7:84:87:28:fd:9f:24:53:cd:a2:77:23:78:e1:ee:3f:35:bb:
         dc:ea:7a:61:06:ee:0f:61:09:2f:52:04:c1:8b:36:d7:cf:61:
         eb:44:ef:f6:b9:2f:c9:7c:8a:2e:fc:89:0e:ae:d5:b6:b8:fb:
         e6:ed:fe:f0:ae:b4:ff:f7:44:64:77:1c:60:c0:0b:c6:cd:7a:
         19:b2:d2:fb:a6:35:0d:be:3a:27:66:fa:3b:70:31:3b:e9:7b:
         26:bc:bc:41:18:03:fc:ab:ea:fc:10:d2:bc:20:06:a9:23:80:
         49:3a:93:3c:d5:02:23:c6:15:e5:e1:8b:f6:09:31:e4:f2:af:
         71:41:30:6a:fe:db:26:cf:33:66:60:75:23:f9:db:cd:d6:34:
         61:7a:92:cb:71:72:c6:46:20:45:1a:8d:ea:5d:18:d3:a5:4c:
         30:b7:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:09:11 2026 by rpki-client