Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
File:                     ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json)
Hash identifier:          VHrdVRf9v+hyqYglm2YUBx7myYUYezFmZctghndpH50=
Subject key identifier:   FE:28:D8:3F:C1:CC:2C:73:94:48:73:83:F4:94:68:2B:32:0F:57:8E
Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91
Certificate issuer:       /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
Certificate serial:       019D98F4A7EC23574D94AF396B4D7AAEB160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
Manifest number:          0907
Signing time:             Fri 17 Apr 2026 01:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:03 +0000
Files and hashes:         1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: AytLX6Ac+S1jtr0CPTcrSn4BGmiNJXHMRy9TGwZmjT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:a7:ec:23:57:4d:94:af:39:6b:4d:7a:ae:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
        Validity
            Not Before: Apr 17 01:01:03 2026 GMT
            Not After : Apr 18 01:01:03 2026 GMT
        Subject: CN=fe28d83fc1cc2c7394487383f494682b320f578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:d2:c7:da:c3:d2:6b:61:6a:d5:33:bd:66:
                    54:4c:a7:d2:23:a9:e0:11:87:41:88:4e:ad:1b:8a:
                    c6:ce:29:e8:35:e2:eb:d8:f8:4f:3e:1d:ee:65:9e:
                    eb:e3:39:b7:2c:55:d0:e0:28:89:43:a9:77:d0:3a:
                    38:1c:f3:24:b6:f1:f3:3e:d1:32:fd:d3:de:1d:f3:
                    ed:f9:7d:a3:d6:13:9b:c0:37:d1:55:15:86:c0:56:
                    49:a6:b0:13:ff:e1:18:ef:a5:8a:7f:b9:b8:12:d7:
                    65:2a:c4:69:2c:ae:52:77:d5:fe:ec:b7:6e:6b:51:
                    e1:44:af:81:1c:0c:c0:3d:a7:70:ed:a9:b6:e6:79:
                    a2:87:ec:f2:06:60:8e:69:17:c7:8a:84:e5:98:9a:
                    a9:00:a9:46:a8:26:56:70:73:64:eb:85:93:e5:51:
                    8a:dc:0b:ff:5b:80:f9:ec:14:5d:ce:83:4e:cc:6a:
                    b8:d2:d8:d2:50:9c:a9:5b:d5:a6:eb:63:df:39:3e:
                    20:eb:3e:5c:b9:cb:58:e6:91:f7:03:4b:96:be:1b:
                    87:05:12:d2:c0:b6:2f:10:ae:5b:2b:32:84:f8:98:
                    83:9e:4a:3a:81:67:7f:28:eb:7a:09:33:fa:86:8b:
                    a7:be:41:ba:e0:c6:d9:04:50:63:83:00:2f:dc:b3:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:28:D8:3F:C1:CC:2C:73:94:48:73:83:F4:94:68:2B:32:0F:57:8E
            X509v3 Authority Key Identifier:
                keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:34:f5:ae:70:19:7c:08:b6:36:f5:52:8b:ee:5c:65:7a:84:
         05:b3:68:36:ac:3f:de:3c:a0:4d:20:f5:4f:f9:45:33:55:c7:
         2e:6c:3a:75:8b:d0:1b:98:25:ab:1a:dd:4b:03:40:d8:fc:b4:
         9f:02:a5:89:e5:17:fa:0b:09:fa:a5:67:7a:72:c3:7a:da:aa:
         21:72:98:05:e9:e8:20:13:90:f8:cd:08:bd:44:13:b0:41:9a:
         db:42:5a:36:a2:70:fa:7d:88:95:34:15:2d:f0:71:c7:05:71:
         8b:a3:4e:39:5d:29:23:76:2e:ce:28:b7:23:c6:e6:de:d6:83:
         60:27:a3:af:72:81:a6:53:dc:6b:2e:03:f1:54:8e:8b:56:3a:
         b2:63:d5:57:94:4c:89:33:f2:bf:e5:6f:f1:91:7f:53:b0:bd:
         ef:0e:28:e8:95:8b:09:7c:ab:bf:48:e4:8d:bd:75:3a:6a:81:
         28:34:12:fa:57:58:b1:93:47:12:fe:cc:e6:10:07:98:3c:5f:
         22:01:32:ca:b2:71:9b:38:c4:68:35:5b:fe:2d:c1:24:3d:57:
         26:ef:56:3e:39:db:62:18:1c:40:9b:2d:84:3b:c0:e5:63:97:
         6c:3b:68:0c:0d:ed:01:e1:ee:c3:de:3e:fe:a3:5d:16:e3:56:
         2d:76:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:36 2026 by rpki-client