Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json)
Hash identifier:          IMrxOalrgX44dmwnCZj2NnKlZRslnvCtz0etXaHE18g=
Subject key identifier:   C0:EE:34:E3:4A:B7:AE:A5:4A:20:16:0E:D2:6B:58:58:3A:6B:11:68
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Certificate issuer:       /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial:       019D394187BB9B0B3515177FA7752D0B14C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 11:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:28 +0000
Files and hashes:         1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: LZS+STcYfLRORgcmCMLY1qLWNy9bkGeChcgJXkJtuKU=)
                          2: xu4367rTCq-PaJR0TqEFWPrUVSU.roa (hash: y/FhYnngcjKCDWpWGI5NMxxal3saQVjOboN8MjiFs1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:87:bb:9b:0b:35:15:17:7f:a7:75:2d:0b:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Validity
            Not Before: Mar 29 11:01:28 2026 GMT
            Not After : Mar 30 11:01:28 2026 GMT
        Subject: CN=c0ee34e34ab7aea54a20160ed26b58583a6b1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:65:0f:da:3d:69:17:67:1b:63:c0:08:9d:
                    34:42:a7:b5:24:e9:2d:df:49:f5:94:6c:eb:92:45:
                    7c:61:3d:87:6f:f0:6a:ac:fe:1f:46:b8:df:a4:44:
                    eb:95:2b:bd:88:32:15:2f:26:36:8d:c4:45:1f:55:
                    fb:43:f1:8c:c7:b3:33:16:30:54:18:0e:dc:ed:6d:
                    b0:5b:53:46:70:ac:95:7e:1c:00:a6:5c:a4:50:ac:
                    4e:ea:75:d3:20:a2:e9:4e:ba:a4:04:50:28:a4:20:
                    ee:69:71:66:3d:b5:c6:28:7b:3c:d5:00:fa:e9:f3:
                    ea:d4:b1:b4:21:2f:b1:49:98:7e:85:a4:d3:4f:14:
                    96:b0:9c:a0:3b:99:bf:00:e9:b7:3e:17:4a:82:e5:
                    7d:a0:75:94:24:83:63:9f:3d:f5:25:3d:79:32:44:
                    98:59:4d:b4:f7:64:f9:0b:5d:61:3f:0c:29:4d:a6:
                    8c:0d:30:9f:ca:ba:d7:c3:7b:bd:9c:40:45:99:38:
                    b2:c4:11:c9:d3:0a:27:61:2d:11:f0:94:42:33:18:
                    30:96:35:24:87:5e:6a:4c:19:d1:43:69:01:d9:9f:
                    28:81:b2:04:b5:c5:a9:77:22:88:46:d2:ea:84:eb:
                    97:2b:4e:8e:34:ad:aa:54:b8:23:72:42:7c:94:1f:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:34:E3:4A:B7:AE:A5:4A:20:16:0E:D2:6B:58:58:3A:6B:11:68
            X509v3 Authority Key Identifier:
                keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:52:11:af:fc:08:2e:ef:3f:70:33:f9:01:d6:83:c1:73:90:
         24:61:6f:70:31:bd:59:9a:f7:3b:8a:ae:39:bf:a4:a5:ec:8a:
         e9:5d:03:f3:38:8a:58:13:7f:17:21:a3:9e:6d:0f:58:c8:99:
         df:fc:c2:6f:42:37:6b:42:ae:19:02:53:ba:19:c3:39:8f:bb:
         b9:27:6e:36:62:13:7e:52:56:b9:03:19:8e:92:27:62:07:50:
         4c:4c:cc:1a:c1:a0:97:37:6e:cb:b0:45:be:d6:52:4b:74:c0:
         f9:b2:58:c6:d6:d2:77:a5:72:c9:cc:d2:d8:bc:16:75:13:8c:
         49:f7:87:c1:23:f2:60:dc:84:de:aa:b7:c0:b6:38:f8:6d:cb:
         a1:37:e1:2e:aa:bb:a8:ba:96:fd:06:e6:e4:df:25:f5:32:80:
         1a:76:4b:45:aa:62:a0:6b:66:c6:46:8c:37:a8:a7:0c:1f:8b:
         c1:ac:da:38:c0:65:1e:f3:78:c4:9c:76:5f:18:db:c4:8f:72:
         0c:6a:c4:63:a7:5f:65:4f:f8:09:0c:5a:25:de:e5:58:b7:34:
         bd:93:67:d5:32:88:8e:50:b0:5a:78:bc:73:b0:6f:57:d9:db:
         af:4b:33:41:b2:a2:e3:f3:ab:43:1a:ff:08:57:03:da:55:7b:
         86:a8:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:38 2026 by rpki-client