Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          j3fazHvoCtTwczyW7KaYbH49PCKk1TgA8oNBwrRHwYI=
Subject key identifier:   F0:E8:31:89:7A:15:D1:BD:00:AA:97:0D:FC:42:B8:7E:95:66:0B:6B
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019CF4CDCF82DF062F4EC9A7AA39C28B4C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          12A2
Signing time:             Mon 16 Mar 2026 04:00:54 +0000
Manifest this update:     Mon 16 Mar 2026 04:00:54 +0000
Manifest next update:     Tue 17 Mar 2026 04:00:54 +0000
Files and hashes:         1: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (hash: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M=)
                          2: Lwt_X6AAGI86G0w2hs0sFC6ysgE.roa (hash: kOlheHwMeO3EOJsZD45/E8+h4BiWzP4+ikBuiBRsu7c=)
                          3: QywnDfiHpKTh6ooW_xx-5aORw8M.roa (hash: Bqa88Z9v3UhbxERx71ob7HDwbEwvqX8+abORSZIV3BM=)
                          4: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: LCh/kbSQTeiSprPO0XmxULP+oo4yXP/aAAvxpR5mpGs=)
                          5: xLXzuP-cjQADCvBzNYnmNJBPLL8.roa (hash: A8Jp9U7r7wLJSaZ007I6zWKtzpDoig9jOp2XhXr4KAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f4:cd:cf:82:df:06:2f:4e:c9:a7:aa:39:c2:8b:4c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Mar 16 04:00:54 2026 GMT
            Not After : Mar 17 04:00:54 2026 GMT
        Subject: CN=f0e831897a15d1bd00aa970dfc42b87e95660b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:93:e3:56:b8:e9:d2:3c:00:67:a4:76:0f:
                    b5:e3:05:68:fd:55:de:d8:e6:ce:6f:1c:fe:40:3c:
                    87:32:6e:59:11:ef:3f:06:04:17:35:25:d2:54:70:
                    35:3f:a3:a8:8d:30:ab:a9:82:de:e7:50:02:9c:dc:
                    45:25:30:dd:b7:16:2a:f5:e8:e3:72:5f:83:75:4c:
                    5e:dc:29:94:d7:40:fb:e0:45:47:a0:b2:21:58:e0:
                    a3:a0:17:39:51:80:98:c5:75:ee:ea:70:16:0b:bf:
                    39:1d:b9:ee:95:f0:76:65:91:2f:5c:e6:2b:df:27:
                    ab:a2:48:34:ec:b9:67:58:d5:63:5b:50:60:bd:e3:
                    41:e6:71:41:df:a8:32:50:05:14:d2:aa:db:f9:71:
                    69:f6:60:93:80:20:ec:e3:e8:bf:b7:e7:cf:c5:9a:
                    67:9b:98:42:84:fd:dd:82:fc:38:19:80:a8:4c:e9:
                    15:92:df:7e:ab:5c:f7:41:d6:9e:8c:10:20:8e:36:
                    82:4a:09:3a:6f:ea:50:7d:b9:55:5c:97:ba:47:1d:
                    e2:37:33:8d:09:b9:74:40:53:c4:3b:62:23:70:aa:
                    50:42:2e:75:d5:5a:db:d1:7c:03:02:6b:32:cf:04:
                    73:f1:e8:8e:d7:59:0f:10:0c:54:f8:7e:1d:f7:2c:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:31:89:7A:15:D1:BD:00:AA:97:0D:FC:42:B8:7E:95:66:0B:6B
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:df:39:dc:ff:f6:e2:d9:32:81:0f:97:c4:2e:7f:77:41:06:
         39:5b:ee:e0:31:44:12:15:64:39:d4:b1:83:f9:8d:46:1f:59:
         8d:18:69:57:66:a9:52:d2:15:d4:07:c0:6c:0b:e4:3a:c8:2f:
         53:cc:70:50:01:95:aa:5e:77:a6:b2:f6:31:ce:c2:40:a7:b4:
         5a:53:ca:d9:4a:e6:ed:50:af:fd:fe:f4:37:a9:ad:0d:31:1b:
         ac:28:87:bf:d2:29:5d:02:22:51:c9:89:a9:50:89:0a:7c:5f:
         a0:62:41:50:70:45:98:13:94:74:39:01:fe:2b:3a:92:89:82:
         f4:97:dd:fc:3e:0b:5e:bc:04:be:97:31:4f:d4:da:75:1b:38:
         55:55:c6:12:5d:0f:77:6e:97:ae:66:f9:8f:46:4a:79:90:f5:
         74:99:14:83:ea:b3:85:91:2b:1c:ba:7a:75:cb:13:70:47:05:
         1c:a4:f1:ce:a8:cd:c6:19:58:d2:f1:a7:a9:c8:32:ba:d9:b8:
         8a:7c:5c:57:7a:6a:d4:3d:24:fb:11:77:d0:62:d9:e6:00:dc:
         74:e4:a0:9f:fc:e5:cc:b2:ee:be:21:97:50:dc:04:0f:43:38:
         0b:57:29:ed:3e:b5:6b:6a:fe:bf:3b:bd:27:d3:46:8a:e6:62:
         cd:83:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:34:17 2026 by rpki-client