Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          sHSbh0NwZsOTP0U1j2kc1rdqyl8APisCEfbQ8RTMdi8=
Subject key identifier:   BE:70:9D:E8:B2:9A:F8:F7:42:EE:CC:C4:CF:74:83:96:60:F0:28:CC
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       019D98F4803985E9A62665A677F53CDD6C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          0792
Signing time:             Fri 17 Apr 2026 01:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:53 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: DQv5QQM/jrnOJBP/3tzEx32CP84HtiYAZ+pywXo9I98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:80:39:85:e9:a6:26:65:a6:77:f5:3c:dd:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Apr 17 01:00:53 2026 GMT
            Not After : Apr 18 01:00:53 2026 GMT
        Subject: CN=be709de8b29af8f742eeccc4cf74839660f028cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:e8:47:48:77:6b:30:cb:7f:99:5d:72:78:
                    9c:cc:de:a5:96:ba:45:e3:67:94:e8:2e:56:c9:12:
                    74:1f:08:09:3c:12:e7:18:07:11:9b:e8:cb:b3:6c:
                    c0:d9:57:90:22:b9:2f:d0:45:b8:76:ff:a1:e0:87:
                    4f:31:c6:5e:25:7b:ea:fb:f8:a8:cd:3f:e6:03:e7:
                    72:5e:d8:77:b6:cc:4e:b6:e8:b5:91:63:0b:a4:1b:
                    c7:6b:a6:ec:a4:a3:89:94:c8:e0:e3:9a:dd:43:c0:
                    f7:8d:75:3e:cd:8c:6b:7d:0a:4c:a4:bd:44:2a:c9:
                    5f:dd:74:24:bc:72:5e:30:e5:fb:d5:ba:28:3f:01:
                    c9:06:d7:5a:4c:3c:5c:86:28:41:23:fb:f3:8a:06:
                    dd:eb:0c:03:75:68:8d:0b:db:8a:a6:73:db:25:f6:
                    81:85:51:29:c4:52:1e:9e:9c:5f:64:57:87:e7:52:
                    8d:58:fc:37:63:90:d2:5a:ea:43:e7:39:7b:f7:57:
                    73:a9:ba:15:03:c3:69:07:0b:52:5a:d3:87:38:29:
                    8f:1e:7e:1a:ca:6c:5d:f6:6b:89:d6:de:19:2f:b1:
                    86:6a:13:fd:d2:92:ca:4c:d4:46:ea:bb:2c:07:40:
                    4c:bc:89:9a:b5:01:f1:f6:c4:ab:85:0e:34:3f:62:
                    15:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:9D:E8:B2:9A:F8:F7:42:EE:CC:C4:CF:74:83:96:60:F0:28:CC
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:1e:de:b5:69:2b:f3:9e:a8:8c:bb:5d:b7:9f:01:0d:23:
         64:b7:82:39:fc:52:42:fd:e9:82:ff:d6:6e:1e:45:33:fe:5b:
         e4:6f:78:81:60:2f:50:11:34:16:66:2d:a3:d6:f0:60:e9:11:
         82:ad:82:cc:ce:03:12:08:d7:43:c5:6a:b1:04:ca:99:47:3e:
         8e:8f:46:91:99:9d:62:98:75:5a:f3:2b:c2:7b:d4:2c:a4:33:
         55:a7:70:75:ab:ec:5a:a8:fc:31:10:38:37:0c:d7:ce:3b:96:
         99:b0:12:d7:30:33:ee:ef:c7:29:e0:66:9f:1b:dd:71:38:79:
         0f:25:8e:51:4b:6d:be:33:a4:91:71:2f:d5:98:2a:6d:26:29:
         e0:73:54:97:0a:ab:69:a3:17:23:57:fa:8e:be:26:8a:cb:bc:
         46:d5:f3:58:61:6d:fd:91:b4:a0:10:12:76:1c:35:1c:e4:c6:
         2a:5b:ec:cc:b1:d6:24:17:78:b4:ad:fa:da:8d:cc:19:1f:0e:
         6a:c9:9e:25:a3:cf:50:2d:be:30:d3:0c:b1:a8:59:e4:f8:c4:
         d9:94:67:20:24:b2:22:52:ab:22:8c:cb:c5:af:3f:35:04:73:
         6c:59:4c:7c:61:1a:85:36:04:ea:7f:83:5f:0c:f2:e0:7a:b5:
         b5:60:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:31 2026 by rpki-client