Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File:                     EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier:          DX+0+YhwbXfUvJr3JlXSSt21XiNCGfbjMm6Eup4ZC1g=
Subject key identifier:   1D:AF:64:D3:64:4B:72:60:F1:E4:3D:C3:24:95:32:82:82:24:4E:67
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer:       /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial:       019D9B505B61BF9E4D48931DAF773F686B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number:          1904
Signing time:             Fri 17 Apr 2026 12:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:27 +0000
Files and hashes:         1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: 4jBPLaNM72eics17X8UnbkC1v6k08jrM4vStRBBKfSg=)
                          2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:5b:61:bf:9e:4d:48:93:1d:af:77:3f:68:6b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
        Validity
            Not Before: Apr 17 12:00:27 2026 GMT
            Not After : Apr 18 12:00:27 2026 GMT
        Subject: CN=1daf64d3644b7260f1e43dc32495328282244e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:77:71:cf:1e:fa:fd:78:9a:f2:68:53:ae:
                    bb:b7:27:1c:5c:73:22:6b:c5:77:ce:59:47:b3:d0:
                    3e:b7:a5:01:4d:ff:51:a1:11:12:89:4b:70:de:71:
                    08:b9:74:38:96:43:b5:37:c7:b8:f5:eb:9a:91:b7:
                    0a:be:63:2d:fc:c0:fa:84:6c:fc:eb:b8:aa:6e:e5:
                    60:4c:b1:f9:85:83:f0:cf:43:8a:fe:84:ac:51:9f:
                    da:44:c4:4e:c8:42:ad:77:ff:69:00:b7:4b:72:01:
                    9d:20:2c:55:c2:be:e6:df:29:79:7b:9f:b8:84:43:
                    7f:5a:3d:21:83:9b:8c:67:dd:15:dd:3c:b2:13:d6:
                    d3:e3:8f:0f:80:bb:38:00:5c:55:74:30:eb:10:30:
                    08:8b:4a:ff:1c:6a:71:c4:eb:1c:58:40:98:de:c3:
                    1f:ab:4a:9f:6f:d8:67:e9:55:ae:3c:94:25:07:af:
                    e0:f5:a3:d6:5c:1f:54:ac:99:26:f9:88:d5:4d:b4:
                    be:a8:2b:da:80:bb:a8:60:eb:9d:a0:01:e0:5e:9d:
                    fb:b3:ed:63:31:64:c1:29:95:d1:31:c2:f3:4c:d0:
                    d4:48:bc:c1:61:81:11:ba:f7:4c:8a:3d:b6:6a:4d:
                    5f:80:7a:3e:78:37:77:d6:60:4d:3a:56:da:5a:bd:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AF:64:D3:64:4B:72:60:F1:E4:3D:C3:24:95:32:82:82:24:4E:67
            X509v3 Authority Key Identifier:
                keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:32:73:0e:2f:ea:20:24:79:35:20:b6:4b:20:3e:19:75:2f:
         d3:df:62:28:52:74:52:8d:40:91:8e:64:7e:b9:96:a6:9d:6a:
         59:fe:a0:01:e0:f8:b9:e4:7b:20:f2:ee:33:9d:78:9e:b8:55:
         74:2d:03:1a:86:35:65:a4:ff:ff:87:b7:bd:3a:09:68:38:1a:
         58:59:b5:41:f1:e0:12:55:30:ed:d1:c8:3b:31:c1:2b:a9:9c:
         25:7c:99:e9:d8:ed:ce:d1:6d:3b:6e:10:5c:3e:2f:eb:77:83:
         4f:a3:12:d6:2a:d9:26:87:dd:c2:d6:e8:86:21:7f:3d:e3:e2:
         9c:4f:5f:8c:74:97:80:17:e3:39:88:96:e8:77:ea:ca:47:bc:
         64:19:77:49:74:e6:bf:20:a5:2a:05:52:05:44:25:9d:d8:65:
         fb:e1:61:6c:8f:30:73:19:0c:b1:cb:21:b1:e5:66:84:cf:03:
         e4:fb:3c:d9:b0:9b:83:b1:ff:58:60:73:57:ab:47:50:de:24:
         c1:4d:1f:92:06:9a:29:4f:7b:f3:99:0b:2e:cd:96:c0:89:de:
         19:04:a9:1e:85:36:60:aa:31:6c:f9:41:67:90:f0:e1:fa:f6:
         52:f1:5c:e1:cf:76:0b:ff:40:d0:5b:17:ae:22:df:f9:d9:47:
         46:03:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:25 2026 by rpki-client