Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
File:                     euirxe_YoA4Rx7LA2OH3b4IUYks.mft (raw, json)
Hash identifier:          PLLYiudz7w5f0xgupUb48FvnqXGrTS/53Ig+RTwUJJU=
Subject key identifier:   27:D2:10:64:98:EC:D8:67:2D:B8:CC:4B:C7:51:78:61:BC:5A:3A:DB
Authority key identifier: 7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B
Certificate issuer:       /CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
Certificate serial:       019CAAC6811F758B356EA541398D6A035029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
Manifest number:          0C40
Signing time:             Sun 01 Mar 2026 19:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:01 +0000
Files and hashes:         1: euirxe_YoA4Rx7LA2OH3b4IUYks.crl (hash: RRHJLzWfb7iXQlgTjC/QySeSouv/OGT7XknplaLRqkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:81:1f:75:8b:35:6e:a5:41:39:8d:6a:03:50:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
        Validity
            Not Before: Mar  1 19:01:01 2026 GMT
            Not After : Mar  2 19:01:01 2026 GMT
        Subject: CN=27d2106498ecd8672db8cc4bc7517861bc5a3adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:ae:12:36:12:14:67:06:47:65:a2:97:5f:
                    ef:1c:9b:1a:71:68:4d:3a:93:ae:0c:e2:0d:72:4e:
                    24:65:20:ca:da:d3:80:2e:73:b4:bf:f4:96:6a:54:
                    64:74:66:8c:27:97:c5:7b:fb:ae:16:48:fe:cf:57:
                    f1:d5:c1:13:bc:2a:fa:e1:80:1b:a6:66:c5:89:ab:
                    92:22:ae:cd:da:1a:d6:12:6c:3f:d4:b9:43:d3:4a:
                    20:8c:9d:bc:61:54:fe:42:52:6d:9c:8f:ca:f6:54:
                    7c:88:a4:75:db:79:0f:ff:2b:87:32:13:55:c9:40:
                    c2:9e:15:63:01:89:9c:27:dc:fe:d8:89:07:71:00:
                    ee:b8:d2:70:8d:ec:ce:46:1d:04:7e:ab:65:34:37:
                    1c:45:7f:23:5a:a6:a4:1b:53:fd:6b:e7:ce:44:00:
                    ea:23:36:1e:f1:60:ee:2b:9e:3f:d4:58:67:ea:0d:
                    15:2e:7b:0b:40:e9:82:10:96:72:6b:bf:72:5a:90:
                    85:f1:f3:bc:66:e7:eb:e3:8b:b4:0a:ad:0e:ac:3c:
                    bb:d7:ea:93:92:96:47:d1:99:10:e9:78:c1:94:d6:
                    bf:30:2e:39:41:e0:3c:cd:b0:08:d8:bd:fa:f6:18:
                    3f:8e:a6:67:55:2e:43:88:3d:1f:6f:c4:bb:f7:55:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:10:64:98:EC:D8:67:2D:B8:CC:4B:C7:51:78:61:BC:5A:3A:DB
            X509v3 Authority Key Identifier:
                keyid:7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:96:9b:f4:77:06:79:23:7b:11:e8:4e:dd:ac:6f:e9:af:62:
         cf:75:b7:25:6d:9d:0d:08:18:75:cb:b9:8d:40:84:64:8b:51:
         fc:ea:5c:b2:49:43:5b:7d:8a:93:c2:b8:84:05:58:0c:1b:f8:
         ea:6b:ba:3e:ab:b6:54:a5:ed:9f:5e:08:a7:ad:b1:70:46:aa:
         dd:75:ee:b7:56:26:1d:58:4f:b9:5e:54:77:46:be:c1:4a:9b:
         7f:31:26:9b:3c:45:a6:95:51:47:31:d4:cf:d0:a7:51:b2:a6:
         75:08:67:12:bb:76:a6:5a:39:1f:18:06:c8:73:84:84:5d:b8:
         7a:cc:2c:99:b3:1f:cd:42:40:00:dd:c0:cb:b7:a4:a3:a4:83:
         52:4a:86:8a:4a:6e:a1:2b:68:06:4a:d0:de:39:d2:53:19:bb:
         a9:a9:7d:b2:81:85:18:50:99:22:f4:c3:d7:f5:eb:c4:d1:6d:
         90:c6:4b:98:56:a3:cb:28:bb:48:54:34:eb:36:3e:e8:2b:12:
         04:d3:b4:96:32:35:8f:99:a5:b6:b3:c8:7b:9c:14:8b:91:fe:
         4d:13:21:cf:10:25:46:b8:2c:0d:ad:16:56:46:05:90:72:79:
         97:38:d3:a4:d4:27:03:7e:ec:a1:11:ca:26:da:35:63:b2:a2:
         27:8d:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:35 2026 by rpki-client