Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          TG33XXImW65CUdtGfd5JL0HPBoq29Y/CuYR1MxMwHjc=
Subject key identifier:   B9:9F:9E:57:C3:F4:D8:B7:3E:0D:5D:71:9F:DD:6F:E7:46:BE:B3:79
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       019DA3781F3A84E22370DB285FBD65E6F6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          18C5
Signing time:             Sun 19 Apr 2026 02:00:51 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:51 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:51 +0000
Files and hashes:         1: 9i5swc1J4tp7c1o23nouETORP2E.roa (hash: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg=)
                          2: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: smaEOwA+ix0XQGYY+KyjdroqXBTF9IjAy5fT4jyTaQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:1f:3a:84:e2:23:70:db:28:5f:bd:65:e6:f6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Apr 19 02:00:51 2026 GMT
            Not After : Apr 20 02:00:51 2026 GMT
        Subject: CN=b99f9e57c3f4d8b73e0d5d719fdd6fe746beb379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:0d:67:3b:4f:93:8e:38:fd:12:f2:99:10:
                    b1:41:fd:c2:d4:e9:02:eb:d7:b9:b7:83:c0:d9:40:
                    06:a5:55:a6:a4:db:10:dc:1c:51:48:b5:c4:54:b9:
                    c1:c8:50:cb:b2:40:a1:ce:56:c8:37:99:61:a5:ae:
                    09:90:61:61:6e:ae:42:e6:c2:81:f7:26:86:dd:3d:
                    e5:d4:10:9e:4f:e2:1a:0d:ba:ee:08:ed:14:93:d0:
                    35:e8:56:8d:18:c3:e8:42:5f:28:3c:49:2e:08:61:
                    d3:6d:08:33:b0:65:1a:51:84:60:3b:3d:29:c0:1f:
                    e4:e3:7d:41:f6:66:0a:9f:c5:36:6c:74:5e:cc:c9:
                    a6:5e:07:06:31:2c:24:0f:40:60:fe:8e:df:5a:a8:
                    3b:c9:42:a5:ea:0d:ba:66:7a:e8:19:41:7c:f1:a3:
                    a3:57:c8:ac:1e:01:d8:70:c5:f0:b4:07:e4:33:1c:
                    d7:b4:09:56:ad:2e:d7:cf:63:ac:dd:c2:f7:95:98:
                    31:73:0a:91:90:10:47:c4:40:43:22:40:af:59:85:
                    04:f5:e1:b4:39:a6:f6:3f:cc:08:f6:b3:f7:4e:9a:
                    98:0f:36:f3:98:56:60:70:bd:fc:b8:f8:d1:8e:11:
                    20:c6:17:42:2c:41:a8:40:7b:12:62:76:17:93:06:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9F:9E:57:C3:F4:D8:B7:3E:0D:5D:71:9F:DD:6F:E7:46:BE:B3:79
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:97:88:59:97:7f:bc:43:62:1f:56:ef:0e:f5:22:b2:de:74:
         6b:d4:df:90:06:be:34:be:d0:50:8a:bd:8b:05:16:16:ff:59:
         9d:2c:90:01:39:ae:3d:ae:23:0f:c2:2c:0f:cf:56:83:7e:2b:
         1f:39:2f:0a:0c:67:1b:58:c3:14:d9:0a:00:4e:49:84:3b:9b:
         2e:87:73:0e:b3:1b:0a:c2:e2:e1:1d:22:a1:10:a5:73:eb:a0:
         9f:3e:f5:18:a4:f6:1e:ce:bd:8a:d5:58:53:1b:5b:dd:74:dc:
         3e:84:23:c0:6c:10:a5:e7:3e:05:2c:7c:10:00:f7:7e:c9:35:
         d7:4c:6b:aa:19:7f:1b:c1:76:6c:97:18:c0:08:cd:c1:7b:61:
         64:73:8f:08:05:c2:8f:e7:59:be:d5:e9:e3:e8:93:3a:f4:15:
         14:9c:28:b0:52:5a:36:94:9b:48:f2:fe:34:f5:87:e3:de:e0:
         a9:58:60:f7:a2:de:43:f5:69:72:41:0d:dd:84:f2:54:1c:62:
         35:64:cc:f6:27:b4:e5:76:de:40:0c:b2:ba:5c:61:4d:c2:af:
         07:e9:1d:19:12:56:42:68:e2:1b:99:3c:aa:dd:f0:64:48:6f:
         f0:1b:e1:c4:07:27:b6:39:98:ae:af:a5:0a:48:b0:42:be:aa:
         13:de:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:13 2026 by rpki-client