Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
File:                     EuKAOWRtzDLs61hCj5fMmUuZhXc.mft (raw, json)
Hash identifier:          +N3nCaKv4cdkD+W2sFUKX+z2F+ndpDnkBaEMlBZTUS0=
Subject key identifier:   4D:C4:14:98:77:FF:0E:12:97:E5:E6:5A:A5:C0:9D:79:F7:85:C3:51
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Certificate issuer:       /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial:       019D9B19ED6E3AF69C8125C5A0BCCDB5EE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
Manifest number:          01CB
Signing time:             Fri 17 Apr 2026 11:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 11:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 11:01:00 +0000
Files and hashes:         1: 3pfKAfOgCjCuMnTS6UNkSvzgdXg.roa (hash: fX97IURxx4aVv6kLYDjuvYCpszHdrjfoIHpuOJ1G1Q8=)
                          2: 7ctbrqVxCRbHrUzJk44x6mMUfjw.roa (hash: hwOpHB+DpLevykjKwsf5ChWyNAUq7TbSytnqlDGmM0c=)
                          3: AQhcS-k2oK3bxQWS20M2leCjNhA.roa (hash: aNhFqj72CW3EXnrLF0fWAMHOsCvh/EfcGLmpjcOZo1U=)
                          4: EuKAOWRtzDLs61hCj5fMmUuZhXc.crl (hash: MDK4El4qRs3QbPeQXwjwaws1D+rwTGitWLDrClySJ+E=)
                          5: YppEuD63kZ31TGnLRIN3xiqWGBI.roa (hash: felosXDJ6ap80oigDicxv12faJJwG7IilFVsyq10QVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:ed:6e:3a:f6:9c:81:25:c5:a0:bc:cd:b5:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
        Validity
            Not Before: Apr 17 11:01:00 2026 GMT
            Not After : Apr 18 11:01:00 2026 GMT
        Subject: CN=4dc4149877ff0e1297e5e65aa5c09d79f785c351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:f6:48:33:2b:45:64:7f:5f:c8:b6:8c:d2:
                    47:c5:8b:12:80:44:db:86:ac:f3:61:2c:f5:15:a8:
                    83:0c:32:22:b5:ea:22:b5:7d:6b:0c:52:34:05:52:
                    dc:c5:d0:00:eb:5e:ee:6f:7e:50:6b:87:63:8c:7b:
                    02:a1:17:7c:e5:c9:0d:f8:6c:9e:3f:5e:95:7e:b9:
                    16:c8:cb:4b:e1:7b:0e:ef:bd:6b:31:84:e7:46:6e:
                    fd:35:58:8e:09:be:46:1e:5f:c5:52:66:2e:b2:e7:
                    a8:ed:a6:6f:37:34:bd:4b:33:18:95:23:94:84:6c:
                    66:a4:0e:80:6b:64:a1:9f:a5:04:d0:be:0c:23:e3:
                    8b:6c:fc:33:5e:c0:42:ec:08:9a:47:35:bf:ce:43:
                    24:4e:40:4c:ac:f1:bd:a4:d1:a3:52:f1:ee:b1:3e:
                    c8:ef:7b:4d:e5:ba:a8:14:fc:32:05:66:3d:a0:51:
                    c8:07:2d:f5:47:4b:65:ea:15:5c:cc:27:8a:b0:1a:
                    94:5c:58:f2:86:62:46:fb:50:64:b6:19:26:42:33:
                    cb:60:cd:33:a5:46:29:4b:c4:93:58:1d:58:18:bf:
                    36:bb:92:dc:3b:c0:fc:be:75:08:0e:aa:8d:49:26:
                    8e:21:88:d4:b2:7f:e5:35:be:8a:1d:73:a7:4c:99:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:14:98:77:FF:0E:12:97:E5:E6:5A:A5:C0:9D:79:F7:85:C3:51
            X509v3 Authority Key Identifier:
                keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:23:8d:2f:82:6d:72:30:17:17:58:67:23:12:e3:d4:83:
         b2:ec:cc:fc:d8:3e:4e:27:b2:06:5e:d2:db:39:39:d2:12:03:
         44:7d:20:38:2f:b4:99:4c:04:0a:79:8d:20:a4:4a:b6:3d:24:
         01:77:a6:c1:a1:0a:42:4c:11:34:8e:9a:87:cd:d0:30:2f:6b:
         9c:c2:9c:0f:4d:a1:c7:10:03:69:86:6d:99:46:12:1d:10:7d:
         97:6f:41:ac:7c:19:1e:b1:f9:8f:69:66:53:d1:91:26:4a:7f:
         74:c6:1f:7c:cd:93:d5:f2:ee:23:da:d7:e2:08:2d:98:34:10:
         8d:f5:06:b8:99:60:cf:05:d1:8e:16:96:5e:fa:aa:d5:80:1b:
         30:e6:68:4a:79:34:ce:bc:e3:b4:35:3d:75:72:a0:ce:85:7f:
         f5:d4:cd:e9:08:a8:69:7c:30:61:d7:90:d8:3b:6b:4d:e3:4f:
         fc:39:c2:0e:fa:2c:04:b0:57:1f:1f:d4:55:b5:b3:09:04:31:
         aa:89:96:30:fd:08:68:c8:aa:6c:a3:45:e3:1f:85:a2:8b:33:
         e1:5a:b0:e4:c5:5e:46:4f:1e:e0:96:4b:82:4a:5f:24:ed:04:
         6f:e0:6d:e1:74:a3:99:17:e6:17:bf:6d:81:e5:ad:d0:b3:f8:
         3c:c2:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:55:23 2026 by rpki-client