Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File:                     e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier:          Orbkrh5Lg3h9RkXgVku97IK8ZZ6HX8ko7IQWtUvTqsc=
Subject key identifier:   08:C0:CC:33:5E:14:D4:FA:85:21:1E:83:A9:CB:4D:3C:86:D0:BB:FB
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer:       /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial:       019DA48B73C6C2BE99AAE7BBFE9D38B3B2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number:          1736
Signing time:             Sun 19 Apr 2026 07:01:35 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:35 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:35 +0000
Files and hashes:         1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: mKO1JA4w8AR9IqVXPl50iVmgPif+cDmmzXVrZeoRZ5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:73:c6:c2:be:99:aa:e7:bb:fe:9d:38:b3:b2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
        Validity
            Not Before: Apr 19 07:01:35 2026 GMT
            Not After : Apr 20 07:01:35 2026 GMT
        Subject: CN=08c0cc335e14d4fa85211e83a9cb4d3c86d0bbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:d5:13:ff:17:00:90:ee:4e:f4:bf:1f:39:
                    78:45:db:86:5c:89:51:03:2f:64:69:86:a4:1a:a7:
                    89:70:0e:5e:84:08:f2:6a:2f:cc:f6:30:ca:06:04:
                    75:18:50:bf:ab:40:cb:cc:1d:b6:0f:8b:9c:d7:16:
                    f5:c7:ea:d1:29:75:0f:f8:d4:78:d9:c0:ab:e7:be:
                    88:77:6d:fb:1a:39:77:9c:bd:3d:09:b0:1b:3c:ea:
                    6d:e9:41:05:2d:6f:f2:8e:35:b2:8a:f3:0a:8f:5d:
                    e7:82:fc:98:db:76:83:ef:ab:99:ee:2c:12:75:83:
                    02:14:01:2e:7e:1b:ec:e9:8c:d8:8c:11:34:7e:0d:
                    76:1f:70:2c:94:72:68:ea:08:14:66:c4:8b:b0:54:
                    1b:d0:16:83:41:98:e8:70:ea:39:de:28:cd:10:04:
                    10:6a:04:b9:e3:60:ec:38:08:9e:e7:9c:5e:af:21:
                    b3:35:82:74:ca:51:50:51:ba:01:e6:b2:76:e9:30:
                    b2:e6:54:e4:7c:47:40:44:5d:a0:d1:8d:13:3d:fb:
                    17:e5:72:e8:ae:d8:4c:c5:8e:f7:73:8a:40:e9:d8:
                    31:3c:00:4a:e0:de:64:a4:ad:1d:6d:15:e2:4c:5c:
                    dd:c3:5a:18:ef:72:0f:c1:a8:bd:f3:16:d8:be:cb:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:CC:33:5E:14:D4:FA:85:21:1E:83:A9:CB:4D:3C:86:D0:BB:FB
            X509v3 Authority Key Identifier:
                keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:fd:a8:2d:25:8b:ee:d6:ee:6f:6c:9f:52:a5:ef:3f:46:a4:
         c9:1b:c3:31:5b:b9:0d:c1:99:35:28:88:ca:3f:8d:42:c0:62:
         73:42:62:99:1a:2b:d4:0a:df:e4:b0:7d:ff:ce:c2:0e:03:33:
         d1:65:68:eb:cc:b3:ee:d2:4f:47:c4:cd:1f:a6:95:79:3a:87:
         e8:3e:a1:76:87:6a:6c:38:d2:34:7d:54:9a:a0:4e:c7:43:f3:
         38:e2:49:81:b0:c3:ce:6e:31:51:f5:d2:2b:31:34:16:80:2e:
         0e:02:8d:ea:55:d7:24:f2:5f:45:34:29:0e:62:ec:73:95:f8:
         48:7a:e4:0a:4f:28:a8:da:79:be:24:29:d5:47:76:6e:ad:fd:
         5d:61:2d:06:58:9e:1e:5f:61:0a:9a:08:30:a1:2c:90:ba:f5:
         df:4a:01:5c:45:cb:4c:fc:16:7c:ae:db:80:77:75:c6:50:c1:
         d1:1e:75:21:75:3f:7f:71:c1:26:d2:8f:75:df:19:91:0f:3c:
         9c:64:28:f5:58:34:f9:5c:75:ce:c0:d5:78:fc:47:80:d7:c7:
         c8:ac:48:30:00:69:82:15:4b:27:6f:a5:41:d4:ea:20:a6:24:
         83:0b:6b:31:02:82:1b:79:17:bb:bc:37:14:cc:8d:ba:36:38:
         49:7d:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:54 2026 by rpki-client