Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          B5Jh6DGDHjJq4BsMl8XTWQLTs8R2Na6tNHT9eJwxCLQ=
Subject key identifier:   EF:BB:26:43:F3:E1:8A:62:6C:D8:93:CA:90:2F:C9:5B:8B:14:E4:49
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       019D9AE3857DD4ACDC85520A4874E4612DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          10D9
Signing time:             Fri 17 Apr 2026 10:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:35 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: P5aRN5NIyBJ2Z6LxUO2rrs4r5I0BmSPy5a+mA5Yn7CQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:85:7d:d4:ac:dc:85:52:0a:48:74:e4:61:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Apr 17 10:01:35 2026 GMT
            Not After : Apr 18 10:01:35 2026 GMT
        Subject: CN=efbb2643f3e18a626cd893ca902fc95b8b14e449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:1f:6c:00:01:2f:57:ca:34:b0:cf:67:99:
                    1e:65:17:19:f6:20:63:42:97:41:60:54:fc:b6:8d:
                    8a:a1:ab:fe:9b:0e:95:3f:1c:26:6e:46:83:c2:cc:
                    f2:6f:2c:62:8f:34:53:b6:11:45:a6:06:f5:99:e1:
                    c1:46:01:d3:d2:aa:0f:53:93:49:01:81:cb:8a:18:
                    28:53:7e:89:4c:12:b3:85:5e:09:67:91:dd:37:5a:
                    01:56:8a:d0:60:5d:43:1f:8a:54:d1:ef:78:cc:68:
                    ad:76:49:f5:23:11:68:45:c2:bc:02:1a:46:00:98:
                    e2:bf:e7:da:d5:47:04:46:92:39:a5:7d:4a:b5:6d:
                    d3:f3:04:30:f6:f7:43:c4:ae:be:41:15:bd:c4:e8:
                    38:50:68:e9:13:27:8e:4b:22:2d:2c:4f:b6:3f:fc:
                    85:07:20:71:75:ab:63:d2:b4:78:1c:19:05:83:6e:
                    22:f8:33:a0:e4:4f:df:9a:fe:30:00:aa:83:0b:45:
                    07:7e:82:92:31:5e:8a:96:a6:a9:67:ae:48:0c:a0:
                    8c:34:3c:42:62:f0:d5:15:4f:f9:90:4b:f1:6c:9f:
                    f2:86:f6:97:22:d1:62:54:79:e9:2c:97:d6:b0:a9:
                    b7:87:d0:31:d6:c7:0b:17:34:db:d4:d1:9b:4c:35:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:26:43:F3:E1:8A:62:6C:D8:93:CA:90:2F:C9:5B:8B:14:E4:49
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:9b:84:51:ec:d4:b2:9a:b1:db:a1:0e:14:3a:87:3a:e5:
         06:4f:ca:d1:5f:24:f1:67:89:05:96:0e:44:a1:66:c2:0b:aa:
         b4:e2:0f:7d:37:02:22:5d:d7:75:51:da:db:6d:e3:82:5b:7f:
         7d:22:5e:ea:d2:86:2b:61:14:3c:0a:da:51:be:66:b1:b0:d8:
         25:7c:4d:65:ab:fa:45:34:ed:cd:57:77:ed:9d:b3:f9:dd:dd:
         f4:28:dc:67:80:1d:e4:3d:a3:cd:72:8d:d4:11:1b:ff:69:53:
         b8:21:f5:3f:0a:58:bd:67:8a:3d:66:6e:96:27:b2:0d:a3:77:
         37:aa:b8:30:6e:48:d1:e5:cf:ce:bd:12:a3:fe:74:f4:b5:0a:
         0c:54:9d:bd:2c:34:0b:3c:3f:ae:62:55:05:c9:8a:b9:47:4e:
         9e:9c:ba:a7:f8:f2:30:55:d3:59:8c:e8:dd:05:2b:b8:54:ec:
         53:5f:03:2e:4d:e2:f4:55:de:9f:8a:50:b6:af:56:8e:64:2d:
         89:82:0a:49:7a:dd:2e:85:bc:3f:a2:ea:27:ee:26:f8:89:60:
         91:cc:fe:d4:d4:26:fd:88:39:b9:49:a5:f2:5b:e4:9d:87:62:
         06:a6:d2:b4:0f:82:3b:84:15:c6:40:6f:65:0d:06:a1:30:1f:
         a4:5d:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:15 2026 by rpki-client