Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          4l+77V2hW3ndFdPAYjFZvNtMuBZOAL1SuzRek2Urpk0=
Subject key identifier:   57:DC:42:72:25:1C:12:98:00:B9:7A:5A:F5:52:2D:21:85:BD:19:78
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019D9A3ED7965B24176AB1CDC2CF1C5A456D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          18E2
Signing time:             Fri 17 Apr 2026 07:01:42 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:42 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:42 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: dWienzzz2ZaB6+h2aSt8USLTcfbgoOrH7fQbjS5sx0E=)
                          3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
                          4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:d7:96:5b:24:17:6a:b1:cd:c2:cf:1c:5a:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Apr 17 07:01:42 2026 GMT
            Not After : Apr 18 07:01:42 2026 GMT
        Subject: CN=57dc4272251c129800b97a5af5522d2185bd1978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:69:d6:2b:23:e9:fe:09:b4:df:db:00:7e:
                    43:cb:22:4a:06:c7:66:ab:95:38:c9:ca:14:c7:29:
                    7a:d0:01:17:87:92:dc:1b:d0:a0:aa:54:90:4a:da:
                    9b:10:29:87:e0:18:61:07:b5:0c:b4:a7:9e:50:f0:
                    8b:1f:34:00:8f:b1:3a:21:fb:e2:3c:83:25:91:a1:
                    d4:73:f3:85:00:0b:e3:bf:c3:d3:67:89:a7:51:f6:
                    74:8a:fd:b6:73:ad:b8:82:8f:67:ec:32:06:2e:54:
                    b5:ad:d7:b6:27:92:d3:08:4f:06:ab:20:8e:dc:48:
                    86:39:d6:d7:58:5c:3a:66:38:f6:5c:d8:ed:09:e6:
                    44:07:61:ea:76:45:69:52:48:3a:f1:50:f6:0f:b4:
                    a5:ab:3d:a3:96:d2:dd:61:32:bf:ef:5b:50:d4:24:
                    0f:5f:92:dc:7b:eb:49:4c:41:05:5a:ce:af:59:ee:
                    05:3c:98:0f:b8:42:58:78:d7:2f:c1:df:86:ee:5b:
                    48:96:15:27:a5:9f:26:f0:35:29:56:cc:6f:64:34:
                    59:15:04:20:87:44:58:01:21:cb:c9:08:d9:8a:b9:
                    42:83:2d:18:f5:de:29:42:ed:0c:07:92:68:2e:80:
                    69:30:a5:3c:46:69:68:04:94:0b:df:0e:51:15:15:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:42:72:25:1C:12:98:00:B9:7A:5A:F5:52:2D:21:85:BD:19:78
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:62:48:41:5a:74:ae:35:c2:99:66:c4:ee:0f:70:16:70:5c:
         f9:eb:a4:7a:ef:7d:7d:e3:ce:91:85:f0:4e:29:cb:ff:f5:54:
         47:b5:1b:e0:47:5b:24:e3:dd:c9:24:bd:6e:72:45:69:fb:30:
         1b:43:05:7b:02:04:ac:ce:7c:c0:f3:76:e8:f3:4d:0a:3e:18:
         cb:da:b1:53:24:47:97:11:75:19:1a:f0:c8:76:58:79:12:a2:
         df:d7:28:37:4f:ed:c2:7a:e2:6c:3d:ca:58:20:bb:3b:c7:53:
         66:e7:e1:89:6e:a8:cd:7e:bf:7f:93:e4:3b:2e:9f:20:a9:fc:
         52:2d:68:4b:4a:cc:0a:a9:6d:7f:54:8b:c6:5f:03:5f:62:84:
         8e:ab:73:0d:26:d1:ee:1c:9e:ee:99:d0:b7:9f:88:b3:5b:f9:
         9c:6c:60:8a:63:b8:b6:12:a5:b1:c4:b4:11:d5:da:ec:02:ce:
         fe:6c:ea:48:d0:64:9c:a2:05:c2:25:2c:b3:17:5e:0c:1d:08:
         e5:bf:c5:cf:8e:9e:b0:a6:b1:af:40:c0:af:8c:3c:da:7d:3e:
         0f:9a:7d:5f:ec:45:eb:b9:68:0f:fc:01:b7:d9:dc:01:a5:f3:
         1a:53:86:3f:26:85:41:d3:c1:ba:9e:2d:12:68:79:9f:40:3d:
         0c:34:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:41 2026 by rpki-client