Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          t5xrh44tbbUCi4szOWhO2r6QFkNwhQlwMDTvypPWxtI=
Subject key identifier:   1A:A9:36:2B:CB:A3:D0:20:BF:37:AD:AE:ED:CE:C3:9F:43:8C:DF:B0
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019CE146C70F4228F8208BBBD6FD12EFEDB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          107E
Signing time:             Thu 12 Mar 2026 09:00:37 +0000
Manifest this update:     Thu 12 Mar 2026 09:00:37 +0000
Manifest next update:     Fri 13 Mar 2026 09:00:37 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: KWZGOzc7sF4wEI1lbbltrW87AVin31GthpP8WoMsIyU=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:46:c7:0f:42:28:f8:20:8b:bb:d6:fd:12:ef:ed:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Mar 12 09:00:37 2026 GMT
            Not After : Mar 13 09:00:37 2026 GMT
        Subject: CN=1aa9362bcba3d020bf37adaeedcec39f438cdfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:41:2e:5d:00:01:6d:51:d2:b6:50:ad:ea:
                    8c:fc:40:0d:3e:24:82:e0:3c:61:35:0a:aa:66:7d:
                    d1:bf:51:05:c4:6b:25:f0:01:b7:f5:2e:d4:59:00:
                    4d:3a:27:cd:cd:6d:46:b5:7e:6b:a1:66:e6:80:19:
                    3e:a3:17:7c:41:59:0d:9c:96:6a:10:c0:b6:f2:43:
                    9e:35:61:36:15:f3:d6:c9:e0:91:79:0e:28:e5:15:
                    6f:3d:17:f9:c8:d9:3d:08:f4:e2:96:72:4d:eb:92:
                    7a:4c:fd:14:4f:0b:9e:84:3f:06:23:e7:05:cb:36:
                    2f:62:4e:ea:0f:18:80:be:6a:e5:28:cd:b4:c7:09:
                    99:d1:b9:05:55:46:7b:c1:0f:cf:d6:47:b7:34:a9:
                    ae:10:b5:06:13:5e:fa:89:36:9d:79:57:0e:7e:38:
                    aa:a1:92:2d:55:b6:e8:c8:64:ff:54:6b:f0:5e:0d:
                    af:f2:ab:66:d9:96:71:59:2c:ce:1f:f8:52:da:4c:
                    d9:f2:8e:cf:29:d6:60:7a:ed:53:6f:a2:7c:78:c1:
                    37:0c:85:4e:ce:25:7b:ad:30:80:54:d3:c9:0a:5f:
                    13:19:a2:19:d0:51:be:fa:5b:b5:95:50:b9:20:99:
                    01:42:db:e0:19:dc:9e:eb:a5:70:f9:65:0f:9a:60:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:36:2B:CB:A3:D0:20:BF:37:AD:AE:ED:CE:C3:9F:43:8C:DF:B0
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:74:e0:75:fe:22:d9:e9:fa:7e:72:66:b3:fd:76:28:2e:
         29:5c:37:24:79:ec:cc:d0:e7:ce:b6:87:ca:e3:b9:51:62:2a:
         5c:e1:27:83:26:6f:aa:f1:56:64:cc:5b:f3:a0:e7:9d:0d:72:
         e9:d6:4e:b9:09:f6:59:ea:81:c7:51:a5:2f:da:0c:69:04:d4:
         a4:b6:e4:82:6e:1a:24:5a:d8:1e:2d:ff:72:87:a1:6d:8a:2d:
         d8:65:cf:b4:38:52:f5:7e:43:b8:13:7d:59:2a:86:20:db:ad:
         b4:40:6d:12:3b:36:1c:e0:a4:3b:4c:16:44:d0:34:8e:52:12:
         ca:10:0b:91:54:4c:a4:77:24:1c:14:4b:24:f0:f1:1d:95:90:
         86:b5:8c:ec:46:43:59:01:0d:8a:74:25:9c:2b:65:a1:68:95:
         32:ac:b9:2f:27:c4:32:65:3e:96:d0:20:cc:18:bc:0f:58:05:
         67:37:7b:77:09:4c:5e:04:f9:96:af:1d:76:8f:c9:45:ae:e1:
         a6:f2:04:e7:50:45:8d:e3:04:9e:b7:3d:c1:f8:4d:77:ca:63:
         4b:4d:89:9a:dd:04:ab:a4:64:56:df:5a:82:5d:8e:ba:df:39:
         0e:a3:bb:ca:35:4b:c6:3d:75:5f:bb:b3:52:54:4b:76:8c:79:
         33:f2:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:13:45 2026 by rpki-client