Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          MIhmXvLF5gTZ3HygbsfU7q3P2Eb6jG47ws2EXVFrDDY=
Subject key identifier:   34:5B:D2:E7:2A:5E:E5:66:52:8C:0E:B6:50:E1:91:46:CD:17:1C:58
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019EE8FB6B081F891ED62EF5791D075DB4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          13A5
Signing time:             Sun 21 Jun 2026 07:00:51 +0000
Manifest this update:     Sun 21 Jun 2026 07:00:51 +0000
Manifest next update:     Mon 22 Jun 2026 07:00:51 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: i1qqONAPcSCol0Qb17GMZErxQrtS0GpGG1E4ymqo0yM=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:fb:6b:08:1f:89:1e:d6:2e:f5:79:1d:07:5d:b4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Jun 21 07:00:51 2026 GMT
            Not After : Jun 22 07:00:51 2026 GMT
        Subject: CN=345bd2e72a5ee566528c0eb650e19146cd171c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:ff:53:1a:f3:8e:08:54:bd:f1:6b:b5:3d:
                    86:4c:18:e0:e9:04:64:1e:b8:05:63:7a:51:b9:b6:
                    97:6a:68:7f:17:48:39:70:ae:80:d6:b1:86:7a:30:
                    84:c2:1f:1f:65:25:5b:e1:36:ee:3d:45:e9:12:60:
                    5f:f0:f1:32:c1:7e:9a:a9:81:71:c4:af:c3:87:c8:
                    63:47:90:0d:01:29:a0:b3:8f:86:4b:02:77:09:07:
                    53:d6:07:1e:7e:f4:72:ba:f5:19:68:47:ce:48:eb:
                    6a:36:76:d1:66:f5:68:09:7e:56:1e:5d:4c:36:98:
                    25:d0:8f:5e:a1:87:a4:52:35:33:0a:f5:17:e0:5f:
                    a0:7d:b0:31:c6:f9:35:8e:82:06:85:24:f6:44:b0:
                    e5:bf:48:84:01:a1:68:7a:75:4f:fe:f6:03:5b:ab:
                    e7:ef:63:2c:3f:fe:19:a2:b1:46:3e:e3:96:c0:61:
                    e2:74:51:9b:79:46:05:3c:01:3b:8a:34:38:15:b0:
                    cf:6b:b6:5d:d7:65:d1:4d:9f:e4:7d:41:b6:b3:3a:
                    3f:51:cd:47:7f:d0:0a:f3:50:01:d9:62:6b:84:b4:
                    ae:19:00:ac:2d:7f:ee:1b:67:bd:f1:28:1c:36:eb:
                    64:5b:33:cb:51:81:5b:13:22:8c:9b:e0:e9:c5:64:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:D2:E7:2A:5E:E5:66:52:8C:0E:B6:50:E1:91:46:CD:17:1C:58
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b6:3c:ff:d8:52:4a:49:2c:3b:45:10:a5:5c:6b:5e:c8:18:
         78:17:02:1d:60:2f:f8:28:e8:e2:8e:07:53:12:c3:73:d6:50:
         be:cd:56:77:a4:3f:2f:38:3e:29:dc:0a:cf:c1:40:36:1a:48:
         54:8b:40:d5:bf:0b:59:19:18:d5:44:f7:df:f7:ae:9b:41:44:
         d2:59:97:ce:3d:fb:37:29:18:51:d7:b0:de:b7:98:77:d9:39:
         0e:62:62:20:8c:4b:ce:4c:3a:9c:42:11:c8:79:11:de:be:e2:
         f0:53:f6:8f:62:91:bc:b5:ae:1e:6b:b0:29:cd:90:85:ba:8b:
         f8:4b:bb:d1:3e:4f:61:07:ce:1e:6c:d6:fd:a5:74:85:e8:6f:
         46:45:76:91:ca:67:75:3a:62:0b:ac:61:a4:4c:d3:eb:94:68:
         93:2c:fc:f1:b6:33:79:be:81:9e:41:82:8e:6b:de:a1:f7:75:
         cf:80:28:e1:b0:ce:28:2a:09:95:50:03:c0:31:2b:16:17:b3:
         7c:d1:f3:76:4f:b6:29:f1:5b:76:41:a5:62:88:bf:e5:ec:22:
         35:8e:05:58:39:04:52:6c:fb:20:90:dc:bc:ae:9f:6a:4b:62:
         eb:32:0b:23:d8:fa:33:33:0b:9d:69:e2:30:53:8c:91:17:45:
         b5:31:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:33:57 2026 by rpki-client