Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File:                     Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier:          ppOb7fc4jhrv6JgXGddtfMTN9qv9VlCHjzTdx/sHlPI=
Subject key identifier:   1C:A6:F4:B3:50:AA:42:E0:53:73:32:BA:6F:6D:6F:49:59:08:3D:06
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer:       /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial:       019D98BD6925F8519A045AE4A29944E96443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number:          1711
Signing time:             Fri 17 Apr 2026 00:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:43 +0000
Files and hashes:         1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: uax8Ivd9wGbwQOKO4f48Qn2cDUrEhtqAQruZSqSxThU=)
                          2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
                          3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:69:25:f8:51:9a:04:5a:e4:a2:99:44:e9:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
        Validity
            Not Before: Apr 17 00:00:43 2026 GMT
            Not After : Apr 18 00:00:43 2026 GMT
        Subject: CN=1ca6f4b350aa42e0537332ba6f6d6f4959083d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:2a:83:1f:3f:5d:e8:9e:17:3f:74:8f:6f:
                    4c:05:fb:80:6b:a1:fd:75:23:b2:a8:80:ce:dd:ae:
                    e1:50:c4:34:36:f0:f1:59:7f:a7:03:23:6e:59:f7:
                    b4:f5:a0:81:e8:a8:28:25:bd:fc:c1:e8:eb:42:70:
                    ab:d2:75:19:0a:b9:14:c7:30:53:c9:d5:54:46:4e:
                    81:7e:56:f2:a6:7c:3e:67:c9:6b:38:79:ee:b7:3e:
                    d6:71:4c:0f:13:ff:92:59:60:8d:5a:c5:8c:17:db:
                    d1:3d:a9:64:e6:12:4d:c9:95:82:e9:c8:71:c9:dc:
                    3a:d8:43:40:aa:92:96:c2:65:cb:e9:36:91:2e:af:
                    51:44:47:b7:5b:4d:2a:a8:cf:02:9f:e9:30:7b:1e:
                    2b:1c:75:f9:ef:d2:85:b6:29:ce:27:7c:63:ed:f6:
                    43:3f:27:0d:d6:0c:0f:a6:1b:4d:69:94:c9:3a:6d:
                    b3:7a:14:ef:99:18:ba:87:ef:d1:83:0f:25:83:23:
                    82:bf:b2:6e:40:7e:9f:c5:a7:c4:1c:ed:86:1e:c6:
                    46:e1:c0:fa:72:f2:84:df:10:56:8b:40:3b:5c:22:
                    6a:e5:31:c3:bc:4b:f8:2a:a1:f7:e7:19:a2:3b:6d:
                    08:ec:ca:28:8f:b1:84:57:c5:a2:e5:10:4d:be:53:
                    4b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A6:F4:B3:50:AA:42:E0:53:73:32:BA:6F:6D:6F:49:59:08:3D:06
            X509v3 Authority Key Identifier:
                keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:81:61:03:ab:66:43:78:b8:2e:fc:d9:c8:32:01:fe:87:21:
         9a:ea:01:7e:6d:b1:a4:01:70:b0:aa:c5:77:d4:25:d1:2a:01:
         cd:31:fd:bd:0c:7a:8c:56:a3:5e:35:b7:d0:29:67:be:0b:a3:
         8e:78:ab:8b:b0:8c:9a:94:4d:3f:9a:49:e6:93:1a:58:41:4e:
         94:b6:a6:7e:f5:12:09:ce:6e:3c:1f:ca:c4:5c:b5:d6:3f:3d:
         6c:ad:44:ca:72:82:2d:ad:be:55:57:16:63:22:9a:32:7d:ef:
         d0:8d:0e:45:22:68:de:f3:66:1e:e6:39:5b:45:c0:ce:e0:0a:
         e4:32:d2:94:4b:3a:f2:9c:f3:74:13:52:fd:32:27:59:a6:e3:
         f8:f2:bb:f0:ce:11:6a:43:de:e1:85:97:b6:c0:b6:44:59:b4:
         09:bc:ae:25:9f:6d:6e:0a:cf:1d:4c:ed:4a:25:5b:95:5b:33:
         62:ee:33:8e:6b:88:cd:ab:b8:40:2f:ef:ea:17:d8:a3:d7:2f:
         11:6e:91:02:e8:2a:5d:b0:e4:a4:39:d0:bd:a4:1e:30:17:3b:
         cd:99:18:b0:42:83:b6:ac:1e:ac:ac:f4:34:93:d9:8c:84:42:
         3c:79:c5:cb:01:82:8c:83:ed:2f:64:c3:33:e7:fc:7c:95:1b:
         e7:d9:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:16 2026 by rpki-client