Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          xJaZ9/DpVX31nMV7DW3T/wKXdj0HOgS5Fu3Bh4cPSjA=
Subject key identifier:   55:CE:2F:E7:CE:8E:25:19:53:36:D4:B6:BE:AD:AD:80:49:A0:4F:8F
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019CF2A8F31272B71C0E2045591D0707EAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1087
Signing time:             Sun 15 Mar 2026 18:01:24 +0000
Manifest this update:     Sun 15 Mar 2026 18:01:24 +0000
Manifest next update:     Mon 16 Mar 2026 18:01:24 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: 68lPtwE/WvP8du302mvM1qDcNlB3ahAyeD5IsOE8Eco=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f2:a8:f3:12:72:b7:1c:0e:20:45:59:1d:07:07:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Mar 15 18:01:24 2026 GMT
            Not After : Mar 16 18:01:24 2026 GMT
        Subject: CN=55ce2fe7ce8e25195336d4b6beadad8049a04f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:8c:73:de:aa:f6:60:07:f2:b6:ed:43:7f:
                    e8:14:f9:1d:cc:d7:eb:75:6b:b6:65:09:88:54:f4:
                    05:f0:55:61:9f:8a:78:a9:22:61:e1:7a:e6:cf:13:
                    9f:32:40:45:6d:ee:42:a4:d8:ce:f0:0b:29:8a:87:
                    4f:5f:38:a2:90:12:12:09:4a:8a:cc:d2:d8:d7:88:
                    38:b2:86:ef:b6:76:ee:03:1e:d4:22:a6:d3:0f:99:
                    54:7f:ae:bb:02:6d:fa:25:9e:37:58:bd:c6:b1:95:
                    cc:e3:27:f4:aa:bf:92:e7:8e:be:70:0b:4a:56:33:
                    aa:91:0b:d9:4a:d2:a4:3b:e0:b3:21:7f:30:e6:fa:
                    98:d5:2d:17:59:d9:d7:b9:8a:3d:bf:6f:f3:54:dd:
                    48:1b:54:2e:53:94:cf:37:26:13:35:17:d8:30:48:
                    b4:02:08:4b:20:2b:52:1d:8b:99:6f:64:22:a8:28:
                    3b:0c:0b:fd:82:86:23:86:0d:50:76:ce:e1:22:7c:
                    cc:bd:1d:94:16:49:0f:ed:d3:a9:47:ee:71:89:80:
                    a5:cc:36:07:c2:f6:da:a9:67:0c:ea:62:29:77:9d:
                    a1:dd:3c:f7:86:ac:ce:2f:4d:b2:97:81:31:22:29:
                    28:8b:b6:1e:ff:d3:58:f0:5c:1b:5c:cb:7f:ff:6f:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:2F:E7:CE:8E:25:19:53:36:D4:B6:BE:AD:AD:80:49:A0:4F:8F
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:c8:2c:8a:65:3d:ef:b9:ed:60:ba:07:e1:43:a5:90:7d:
         d7:8e:e0:f4:72:73:7f:2d:0c:3d:fb:9c:6a:e0:24:58:1c:37:
         88:75:39:7c:61:d6:e1:46:14:e0:12:9a:3a:e9:ff:ee:75:00:
         57:b5:53:d0:68:a5:58:b1:66:b7:f2:0e:c8:66:85:c6:2b:a5:
         fd:f1:d1:3b:8e:33:06:85:1d:75:91:47:f8:0a:8a:7c:7d:32:
         ac:b5:03:91:7e:17:62:a6:a7:d9:c9:cb:0d:71:b4:f1:d7:fc:
         d8:08:68:e4:e2:89:f8:eb:66:60:53:65:b4:b0:7b:3d:8e:7c:
         e4:51:07:20:02:95:02:f7:40:ff:80:b8:f9:c0:d3:b8:08:f7:
         25:a9:b1:c4:a0:78:ce:28:15:02:f5:d8:e3:e7:03:25:2b:8a:
         1c:b9:23:e3:1d:db:02:cf:fa:8d:bf:88:cc:71:e6:72:d9:fb:
         d3:26:85:ed:8c:7a:99:8f:78:bc:e0:b5:91:1a:36:30:d5:fd:
         4e:82:b9:6b:2f:a2:09:47:7d:08:a2:33:2d:e5:13:13:ea:e9:
         29:b4:a8:8a:f1:72:6e:70:3c:d5:26:7d:60:f4:72:42:2a:05:
         f9:a5:f3:f1:b8:95:d9:c5:43:e7:a8:ab:d1:50:5f:0c:e1:4e:
         ad:43:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:51:32 2026 by rpki-client