Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File:                     eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier:          QeCGUmXlTqH5cPAwlSS1X8NSUkX6q52uZNyNF6KWRHs=
Subject key identifier:   E0:97:DE:13:04:AF:A6:7F:31:00:40:00:8E:A0:12:44:22:E5:86:7D
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer:       /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial:       019D9AE2D5324C992734BDBF61A7446D2ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 10:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:50 +0000
Files and hashes:         1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: OynM7eDxMZI6VW3AvPDreSgAQv9YtsgW9CGMOpf+u7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:d5:32:4c:99:27:34:bd:bf:61:a7:44:6d:2e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
        Validity
            Not Before: Apr 17 10:00:50 2026 GMT
            Not After : Apr 18 10:00:50 2026 GMT
        Subject: CN=e097de1304afa67f310040008ea0124422e5867d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:1d:8f:87:b2:6c:4d:ab:52:fb:88:a5:70:
                    3a:26:88:f2:35:cd:07:47:3c:30:da:5b:cc:7f:4a:
                    e7:5c:96:75:e3:e1:1a:c0:dc:0d:27:be:c6:b2:f1:
                    77:e5:d4:4b:ed:be:3d:0e:77:01:a1:e7:13:d8:59:
                    72:4d:b5:14:96:eb:77:54:eb:90:25:45:77:2c:ae:
                    84:44:aa:b6:1e:d1:0f:1f:fe:31:ff:0d:f4:ea:5f:
                    b6:c0:e1:6d:2f:90:97:00:45:00:92:51:99:6b:cc:
                    26:83:c4:ab:8d:16:29:f3:df:eb:2c:59:a1:1e:00:
                    39:69:52:f9:f3:53:2a:3a:f2:84:48:a4:66:1c:67:
                    19:cd:6c:d7:88:18:4f:90:be:03:41:ba:e4:b3:ae:
                    84:aa:7a:16:4f:05:4a:63:e8:cb:d6:58:d2:6e:e8:
                    4c:ff:7c:83:4d:94:ad:53:96:8d:47:7c:9a:f4:ea:
                    0a:95:83:7e:85:af:f8:31:41:ef:5d:7c:2a:f7:0a:
                    f0:b2:d7:92:f0:51:42:e0:c7:d0:40:95:de:05:f7:
                    f2:2d:dd:be:f6:3d:c5:07:d1:ae:72:1a:2e:85:16:
                    18:e8:41:91:e2:47:7a:6d:b0:e9:92:73:9e:6b:62:
                    c4:cb:fd:8b:96:e7:27:e8:fd:d1:44:1f:c8:0d:4d:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:DE:13:04:AF:A6:7F:31:00:40:00:8E:A0:12:44:22:E5:86:7D
            X509v3 Authority Key Identifier:
                keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:0a:f8:bb:bf:ff:d5:35:8c:1b:39:2e:4e:30:52:8e:9f:
         5b:36:b2:b6:6f:d1:f8:30:a4:d8:31:6c:ec:16:f2:4f:58:9f:
         18:70:82:af:ff:b5:00:f5:d7:3a:e0:95:32:f3:fc:bf:5a:50:
         f3:77:08:b9:0a:7f:03:0e:38:e1:89:14:c6:3e:5a:7e:fa:be:
         0d:65:7a:e4:60:f6:f7:e2:d8:e9:b5:28:15:00:0d:38:65:87:
         57:2f:42:f0:86:b1:ff:45:b5:a3:fc:88:6f:ed:6b:ce:65:84:
         17:11:a2:fa:40:33:98:6b:e5:27:be:15:69:70:67:c5:0a:f5:
         15:87:4c:6a:7a:21:36:d0:4d:bd:5f:e4:e0:d5:69:0f:94:e2:
         a1:f7:f2:c4:21:1c:ea:67:8a:10:e1:f7:f3:8c:de:eb:d2:12:
         96:c8:68:83:ef:4d:e6:40:82:17:62:ab:e7:ed:31:3c:6c:18:
         27:21:03:5d:f3:56:15:86:c2:82:d3:3d:56:9b:01:67:53:c0:
         80:12:6f:cc:81:1d:b9:9e:ba:d7:1e:b6:81:30:e6:ec:d5:6d:
         e6:b2:2b:06:9e:97:dc:d8:e0:f6:13:b8:28:ea:c3:c9:09:5c:
         f5:a2:7d:ae:05:0d:cb:f2:6a:85:89:3f:27:8a:2d:3d:9f:9b:
         d4:85:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:11 2026 by rpki-client