Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
File:                     eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json)
Hash identifier:          zdPkhZAqPE2Irirn5mUyNRgQPneOSLhvEKssydmouDc=
Subject key identifier:   4B:E4:1C:97:E4:D0:0E:D3:4A:37:9B:18:ED:69:9D:9D:74:53:B3:40
Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Certificate issuer:       /CN=7b243b732e564690482cc825199f8b591b01f6f2
Certificate serial:       019CAB6B31B290AA8D0B9776B17BECF80D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
Manifest number:          13E9
Signing time:             Sun 01 Mar 2026 22:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:54 +0000
Files and hashes:         1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: 87APQ7KEEyF+dqgtHuyyAXO3QgfgAFnP6AiP8SGAfSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:31:b2:90:aa:8d:0b:97:76:b1:7b:ec:f8:0d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2
        Validity
            Not Before: Mar  1 22:00:54 2026 GMT
            Not After : Mar  2 22:00:54 2026 GMT
        Subject: CN=4be41c97e4d00ed34a379b18ed699d9d7453b340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:a9:c8:c5:c7:14:6c:7d:82:09:8b:71:08:
                    27:b4:8a:57:58:22:20:b6:db:82:7d:5f:e1:55:17:
                    c4:30:7b:f4:72:f1:1f:0b:aa:6c:66:c1:c4:32:53:
                    e7:17:26:8f:7a:09:d4:a6:21:aa:a9:c2:9c:63:fb:
                    02:99:1d:ad:d7:f9:99:28:55:66:f8:5a:5a:e5:c9:
                    f8:be:00:4b:46:f3:ad:73:f6:9d:83:41:9d:dd:35:
                    04:4c:e1:85:91:d4:90:1b:cf:cf:91:6f:66:0a:7a:
                    b8:87:ab:78:36:a0:04:d3:59:59:cd:a6:fa:f8:11:
                    7c:b1:64:71:3a:8b:3c:26:4e:c7:77:32:03:ae:fc:
                    57:cc:eb:a7:40:00:85:37:04:22:3d:81:9d:77:d1:
                    cc:6c:bc:15:90:91:c0:81:9b:38:b5:30:5c:b4:f8:
                    c5:9a:5e:58:c0:ef:68:94:ae:fc:1a:b6:f0:8e:0b:
                    5e:64:f8:23:bb:ad:29:34:3e:41:66:1e:38:51:40:
                    bc:00:21:26:36:13:af:91:76:6a:f4:e4:49:c2:03:
                    86:b8:70:e4:b5:7b:e6:2f:90:72:ce:24:55:f7:5d:
                    b1:82:e2:c8:92:86:86:2b:cd:e3:6e:cc:a9:77:09:
                    1c:08:ca:4c:86:2d:7c:a8:27:8b:62:ba:ac:64:72:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E4:1C:97:E4:D0:0E:D3:4A:37:9B:18:ED:69:9D:9D:74:53:B3:40
            X509v3 Authority Key Identifier:
                keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:ee:d6:a7:4e:ca:0b:72:f6:24:d0:dd:ce:cc:df:32:a9:
         7f:d0:3b:40:76:2f:12:99:d9:dc:d0:4e:9b:a1:7e:95:8f:01:
         fd:35:a0:ec:7d:0e:4a:43:dc:a7:7b:9f:da:c3:47:0b:e0:e4:
         1a:e0:ff:7c:bb:0a:9a:20:b1:ca:35:a1:7a:df:3d:75:2f:d5:
         13:62:d9:11:34:ee:fa:2c:42:bd:e2:0c:86:c5:9f:28:15:81:
         d2:fe:cc:56:b1:86:9d:40:14:4a:c0:5d:d9:1b:e6:6a:d7:15:
         2d:5f:91:38:62:1f:0a:13:2f:51:27:a1:e3:7f:79:31:10:e4:
         37:83:9b:69:fa:9c:f3:f6:4d:a4:f9:5d:db:b8:27:d7:60:da:
         5c:b2:dd:a9:a0:67:72:ad:52:87:5e:5e:a9:31:3c:91:2a:ce:
         05:71:30:88:d1:c8:55:4b:4b:dd:b1:1a:a4:20:0e:06:a2:15:
         03:2a:15:13:63:f6:41:49:3a:0f:e7:2b:85:19:96:c6:d0:c9:
         b7:fd:9c:d9:96:7d:4a:0a:39:0e:b6:9a:f4:e9:05:15:62:96:
         8c:e5:d6:96:b0:f8:63:0f:c2:ff:44:18:ee:24:34:35:2f:18:
         38:dd:fd:65:ba:0a:f5:7c:b6:4a:fa:e1:46:36:bc:bb:27:98:
         54:6f:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:51 2026 by rpki-client