Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          Tn2HNoAjqeVMQuMqOu0eBVLjqwjklypKzW+A/asP9iY=
Subject key identifier:   BE:FA:42:36:EE:C6:17:99:D2:50:43:D1:DB:B0:B9:B5:75:FA:94:06
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019CD5B0C99DE7B6995EE92B7AA924F62D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1078
Signing time:             Tue 10 Mar 2026 03:00:58 +0000
Manifest this update:     Tue 10 Mar 2026 03:00:58 +0000
Manifest next update:     Wed 11 Mar 2026 03:00:58 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: NsKRpHQN45G3d3UvXvw6v30b7BKA8gwCK5WBoAhPrUA=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d5:b0:c9:9d:e7:b6:99:5e:e9:2b:7a:a9:24:f6:2d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Mar 10 03:00:58 2026 GMT
            Not After : Mar 11 03:00:58 2026 GMT
        Subject: CN=befa4236eec61799d25043d1dbb0b9b575fa9406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:83:b6:d0:69:73:e8:7a:00:b2:4b:98:63:
                    ac:48:71:f6:88:0c:b8:5e:62:80:f1:5c:10:df:78:
                    1f:d3:06:53:16:a9:dc:8f:8b:6f:8d:a4:77:57:53:
                    0c:e5:7b:34:b0:2c:a6:cd:e2:f5:25:2c:b5:68:0f:
                    58:87:63:c8:ee:20:f0:2d:58:57:1f:fc:dd:70:d2:
                    22:0c:de:71:7a:98:a3:7b:80:57:bf:ba:f4:f2:33:
                    e7:43:b9:f0:ee:7e:47:3f:2a:8d:1f:8a:ef:82:a7:
                    a6:38:f8:f5:a0:61:fd:16:b3:39:1c:91:d9:7f:0d:
                    f0:ec:b7:8a:c5:2c:2f:7e:f9:ea:93:a4:ae:8c:0c:
                    23:e5:4f:21:63:3d:8d:0b:3a:89:ad:14:ee:4e:51:
                    1d:09:86:97:7a:ad:07:8b:12:2c:38:25:be:b1:4c:
                    90:f7:a8:3d:e7:a2:4d:a5:0a:dc:c7:54:5e:47:0f:
                    3b:a6:82:d9:1a:de:08:fb:42:2a:2a:84:1d:83:72:
                    de:20:f9:89:2a:3d:9e:e1:6f:43:56:04:30:bb:16:
                    0d:76:10:f0:88:38:79:c7:52:1d:00:f7:66:34:fe:
                    51:01:0b:cf:26:2f:fd:72:47:3f:2b:f3:7f:e0:06:
                    33:a4:2c:88:1f:84:9b:60:98:a1:70:d4:b4:9a:76:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:42:36:EE:C6:17:99:D2:50:43:D1:DB:B0:B9:B5:75:FA:94:06
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:75:36:20:a1:7e:5b:bc:91:04:dd:24:86:a1:d4:41:a7:
         a3:de:e1:9a:0c:35:1e:5c:92:32:ff:2e:62:39:e1:d0:96:11:
         79:45:10:2a:26:2d:4d:e5:76:bd:fb:e9:e5:10:6e:73:6e:69:
         f1:29:50:b0:b6:4e:c6:21:9c:c6:9c:3b:83:a7:27:4b:5d:05:
         13:bb:54:b9:4f:31:d4:3c:d3:d0:71:67:bc:16:af:78:ee:4d:
         d7:40:df:32:9b:ae:2d:97:6f:02:fa:af:66:68:61:82:39:cb:
         6c:31:cd:3e:a7:ab:a9:ef:90:28:a2:7a:14:7b:b5:ad:1c:6e:
         fb:ea:42:c9:87:83:25:34:84:7d:57:0b:81:ec:fe:0f:d9:29:
         3f:0d:13:fc:be:4e:f8:04:2a:57:f9:55:fb:1b:0f:16:80:95:
         6d:a0:39:e3:5f:11:b8:c0:92:9a:20:4f:c6:15:b5:48:bb:dc:
         31:79:3a:7d:4c:95:db:22:f6:b1:9f:b1:4f:b7:86:01:d4:45:
         36:a2:7e:8b:9b:50:56:d6:2d:57:cc:0c:ad:bb:55:13:00:61:
         3c:f3:8a:eb:a2:d1:a4:6c:6f:ad:9f:1a:5f:44:1d:e2:ae:74:
         12:9d:58:0e:85:fe:d8:7b:5b:8b:c4:bf:0d:bd:2a:1b:50:0c:
         b8:83:9c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzVsMmd57aZXukreqkk9i1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwMzEwMDMwMDU4WhcNMjYwMzExMDMwMDU4WjAzMTEwLwYDVQQD
EyhiZWZhNDIzNmVlYzYxNzk5ZDI1MDQzZDFkYmIwYjliNTc1ZmE5NDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYSDttBpc+h6ALJLmGOsSHH2iAy4
XmKA8VwQ33gf0wZTFqncj4tvjaR3V1MM5Xs0sCymzeL1JSy1aA9Yh2PI7iDwLVhX
H/zdcNIiDN5xepije4BXv7r08jPnQ7nw7n5HPyqNH4rvgqemOPj1oGH9FrM5HJHZ
fw3w7LeKxSwvfvnqk6SujAwj5U8hYz2NCzqJrRTuTlEdCYaXeq0HixIsOCW+sUyQ
96g956JNpQrcx1ReRw87poLZGt4I+0IqKoQdg3LeIPmJKj2e4W9DVgQwuxYNdhDw
iDh5x1IdAPdmNP5RAQvPJi/9ckc/K/N/4AYzpCyIH4SbYJihcNS0mnbNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL76QjbuxheZ0lBD0duwubV1+pQGMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXV1NiCh
flu8kQTdJIah1EGno97hmgw1HlySMv8uYjnh0JYReUUQKiYtTeV2vfvp5RBuc25p
8SlQsLZOxiGcxpw7g6cnS10FE7tUuU8x1DzT0HFnvBaveO5N10DfMpuuLZdvAvqv
ZmhhgjnLbDHNPqerqe+QKKJ6FHu1rRxu++pCyYeDJTSEfVcLgez+D9kpPw0T/L5O
+AQqV/lV+xsPFoCVbaA5418RuMCSmiBPxhW1SLvcMXk6fUyV2yL2sZ+xT7eGAdRF
NqJ+i5tQVtYtV8wMrbtVEwBhPPOK66LRpGxvrZ8aX0Qd4q50Ep1YDoX+2Htbi8S/
Db0qG1AMuIOcYg==
-----END CERTIFICATE-----
Generated at Tue Mar 10 14:31:01 2026 by rpki-client