Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          bnnK0rCAQjWtHkX7cPRz8d6hZu+ZqOOfvTM4emas31A=
Subject key identifier:   38:6D:B7:F3:91:1C:DD:C6:57:29:9C:F6:1A:5C:69:41:77:DA:47:75
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       019D9C99E04EDB8CD02D534F75A24C4DA471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          0B27
Signing time:             Fri 17 Apr 2026 18:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:23 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: At477DcarLAg9eZaFtwGSVdbByqJZgRgu1V766JJa7Q=)
                          2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:99:e0:4e:db:8c:d0:2d:53:4f:75:a2:4c:4d:a4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: Apr 17 18:00:23 2026 GMT
            Not After : Apr 18 18:00:23 2026 GMT
        Subject: CN=386db7f3911cddc657299cf61a5c694177da4775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c2:41:da:9e:a6:8d:70:8a:24:57:91:63:42:
                    85:ca:67:e6:d0:76:61:80:f2:d1:9d:d5:bc:f0:ca:
                    4f:f7:8e:67:5f:f7:66:e3:a9:31:69:5a:2f:ef:1a:
                    a5:93:b7:c0:fb:91:23:fe:dc:13:53:53:0d:fc:ad:
                    c4:64:1b:86:37:a3:d6:c8:11:f6:62:8d:45:e0:7c:
                    92:23:3c:63:9e:d1:59:bc:a6:d6:7b:1a:77:55:4d:
                    b2:5a:69:91:9f:1d:47:d8:e1:ce:46:df:0e:17:c8:
                    be:84:57:c3:f2:8f:12:77:17:f4:a5:26:cf:86:0a:
                    5c:f7:e2:53:ae:c1:71:17:40:73:9c:23:20:a4:f7:
                    80:65:64:0d:3d:69:f8:62:d8:07:74:fa:59:27:26:
                    0f:59:a9:26:cc:a8:10:cb:14:ee:e9:7a:3a:67:d4:
                    a8:06:18:25:ce:1a:ad:b8:f3:cd:2a:1f:51:0c:f0:
                    9d:61:ff:48:99:41:9c:49:22:8d:09:23:27:86:19:
                    be:2a:4e:46:09:b2:63:ca:8e:2b:5a:f1:94:44:85:
                    ac:cb:70:31:26:2e:94:82:ad:b4:a9:28:39:90:ae:
                    96:79:ed:45:b9:a0:78:5b:28:c5:da:27:7e:45:65:
                    60:73:99:6f:35:f6:60:74:ab:7c:f6:fa:f6:d0:ea:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:B7:F3:91:1C:DD:C6:57:29:9C:F6:1A:5C:69:41:77:DA:47:75
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0f:39:66:f0:54:8d:46:e0:85:d2:a6:d0:8d:ab:9b:87:6e:
         90:71:1a:50:9a:d5:de:53:0f:2e:90:52:8d:cd:d1:7d:19:4b:
         ab:c5:67:1c:b0:8f:f2:f3:02:81:a7:63:31:0f:b6:5b:29:7d:
         96:21:9c:72:52:9c:0c:8a:0b:5c:96:76:66:43:52:d0:3c:31:
         f4:45:8e:77:c2:cf:2e:4f:87:eb:56:57:c2:3c:ec:dd:0d:a5:
         77:23:32:2a:3e:12:9a:52:52:d9:76:16:1d:db:a5:96:07:e1:
         3a:04:36:78:36:f5:2a:fc:88:df:c6:81:d8:16:34:f7:09:0e:
         d4:c6:b2:a3:50:21:fd:03:00:ae:cc:f2:48:ed:9c:dd:27:ff:
         dc:61:b2:db:53:98:26:91:2f:50:a1:29:1d:58:b8:68:19:20:
         77:43:71:b4:e8:59:6d:a0:31:ab:5d:78:d3:18:40:80:bc:11:
         40:14:9f:e9:70:d1:bc:a7:e7:fc:91:66:25:2f:4f:2f:5d:1a:
         93:5e:ef:75:88:15:86:ff:33:62:97:f6:ed:23:44:1d:81:62:
         39:81:8e:c9:86:3e:9a:a0:b2:82:fe:ca:0b:df:1c:39:c1:07:
         69:ea:23:ad:6b:41:5a:69:18:3b:04:b0:94:d3:5a:5a:51:6d:
         93:62:07:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmeBO24zQLVNPdaJMTaRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjYwNDE3MTgwMDIzWhcNMjYwNDE4MTgwMDIzWjAzMTEwLwYDVQQD
EygzODZkYjdmMzkxMWNkZGM2NTcyOTljZjYxYTVjNjk0MTc3ZGE0Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sJB2p6mjXCKJFeRY0KFymfm0HZh
gPLRndW88MpP945nX/dm46kxaVov7xqlk7fA+5Ej/twTU1MN/K3EZBuGN6PWyBH2
Yo1F4HySIzxjntFZvKbWexp3VU2yWmmRnx1H2OHORt8OF8i+hFfD8o8Sdxf0pSbP
hgpc9+JTrsFxF0BznCMgpPeAZWQNPWn4YtgHdPpZJyYPWakmzKgQyxTu6Xo6Z9So
BhglzhqtuPPNKh9RDPCdYf9ImUGcSSKNCSMnhhm+Kk5GCbJjyo4rWvGURIWsy3Ax
Ji6Ugq20qSg5kK6Wee1FuaB4WyjF2id+RWVgc5lvNfZgdKt89vr20Ooi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhtt/ORHN3GVymc9hpcaUF32kd1MB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ85ZvBU
jUbghdKm0I2rm4dukHEaUJrV3lMPLpBSjc3RfRlLq8VnHLCP8vMCgadjMQ+2Wyl9
liGcclKcDIoLXJZ2ZkNS0Dwx9EWOd8LPLk+H61ZXwjzs3Q2ldyMyKj4SmlJS2XYW
HdullgfhOgQ2eDb1KvyI38aB2BY09wkO1Mayo1Ah/QMArszySO2c3Sf/3GGy21OY
JpEvUKEpHVi4aBkgd0NxtOhZbaAxq1140xhAgLwRQBSf6XDRvKfn/JFmJS9PL10a
k17vdYgVhv8zYpf27SNEHYFiOYGOyYY+mqCygv7KC98cOcEHaeojrWtBWmkYOwSw
lNNaWlFtk2IH3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:26 2026 by rpki-client