Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          qSSS9hxdLqDo6UwHORYusH2oexTrFhygqsb2o5VBk9g=
Subject key identifier:   6A:16:3E:7F:6B:52:73:6B:42:FA:E8:0A:9D:F9:E5:13:37:87:60:48
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       019D9A3E2493C1D7E0C7EA2E05BF41637916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          104F
Signing time:             Fri 17 Apr 2026 07:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:56 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: qAKMPoCSBJLUQ04y0jDZj7TW1I1HRIQOK9gNwLB5KeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:24:93:c1:d7:e0:c7:ea:2e:05:bf:41:63:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Apr 17 07:00:56 2026 GMT
            Not After : Apr 18 07:00:56 2026 GMT
        Subject: CN=6a163e7f6b52736b42fae80a9df9e51337876048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:c1:ed:87:d9:27:f7:c3:98:c9:41:38:1a:
                    de:ce:05:4b:a1:a9:34:e7:e3:f0:84:01:68:5c:2a:
                    bd:87:0b:75:3d:05:ae:c8:3c:0c:1f:af:ea:ef:d4:
                    fd:10:f1:ac:58:ad:b0:18:ab:c8:07:ae:48:4d:4a:
                    88:4c:88:de:31:dc:28:c9:23:84:7e:cd:2f:1b:5c:
                    bf:96:70:05:6f:4a:2c:1d:e6:bc:82:e4:1b:c1:e2:
                    dd:5f:7a:4a:e6:db:40:3e:80:9b:d2:0b:5e:df:bf:
                    6e:d3:0c:b3:12:ac:20:48:9c:4a:f5:25:19:d5:0a:
                    aa:cd:b0:c6:1d:76:27:ef:a6:a5:22:a1:5f:6a:5b:
                    86:94:54:0f:c2:da:f8:0f:f3:5b:1d:3e:ef:a0:96:
                    07:18:f3:d1:7d:9d:7f:11:ce:81:01:98:df:b9:84:
                    ab:67:76:d9:76:d5:35:42:6c:5e:08:dc:1b:d8:67:
                    bf:7a:3e:fd:f5:41:5c:a6:6d:2f:6b:f4:99:98:69:
                    e8:b5:97:3c:c7:89:51:e1:a0:cf:68:97:d9:19:d5:
                    4d:86:8b:77:a3:6b:22:0f:60:95:2d:4b:76:ed:ca:
                    8f:41:45:c3:f4:24:52:06:c1:4b:da:b0:62:d4:c5:
                    8a:e8:94:1a:c9:ac:3d:19:da:df:a5:66:39:d4:ca:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:3E:7F:6B:52:73:6B:42:FA:E8:0A:9D:F9:E5:13:37:87:60:48
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:bb:86:26:1f:3e:10:5f:69:e1:34:f8:b2:e2:ce:1f:0e:
         2e:4c:d9:16:f2:8f:b6:2e:49:78:52:43:ba:d1:44:7e:af:c8:
         5b:19:21:fb:ab:9c:68:56:ae:18:33:90:01:85:5b:b1:ec:b3:
         3e:f8:9f:4d:0a:32:de:a4:77:0e:d8:98:46:86:23:10:cb:5f:
         80:0f:20:5a:a5:ce:a8:91:ec:0f:94:42:02:61:f8:53:ce:f8:
         be:9a:f8:b1:ec:19:9b:e9:cb:23:d3:32:e0:3e:5f:a6:7d:f5:
         8a:59:d8:de:a8:cf:91:2c:07:0f:4e:77:9e:53:93:d8:68:e7:
         4c:6c:f0:c2:e6:0d:56:00:f6:55:92:47:54:ea:28:65:b0:26:
         00:9b:46:28:4f:6e:53:5b:11:6a:8a:03:66:90:6d:a0:d4:0f:
         89:6b:db:93:5d:b7:87:49:4c:61:dc:6e:e7:48:be:7f:d5:48:
         87:89:f1:40:ed:be:55:5d:4f:46:c5:ac:57:e5:2f:24:b6:dd:
         00:95:e5:2a:64:8a:5a:68:d3:2d:47:05:c7:93:e4:c2:7f:0a:
         1e:6f:ba:a1:fb:f2:bb:69:57:f6:0d:51:a4:32:24:21:a2:c9:
         59:ee:9b:3a:63:90:b8:4b:5e:17:18:94:e0:e6:87:d7:76:2c:
         92:91:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:39 2026 by rpki-client