Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
File:                     eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json)
Hash identifier:          TwQSdQweZB/sKVV9jkOhdlnQoJlIhtr4IU1nMWY8vg4=
Subject key identifier:   AA:F8:6D:AC:AD:02:B9:F6:9B:C0:B0:2D:70:C3:DF:B9:43:AF:4F:B2
Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Certificate issuer:       /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Certificate serial:       019D9850B232184D37BBFE9B8C1B4F37D832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 22:01:58 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:58 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:58 +0000
Files and hashes:         1: EZCwycKupK72kXY5TYKnJInErsM.roa (hash: POKu/vlmNB7+n/NzihgIJqPuXnS4TGL1GaOCLIcj0pg=)
                          2: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: UoT7LGKjzVkdy5RzjpREqNkIKPnRMXnsW+HGRZQX6/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:b2:32:18:4d:37:bb:fe:9b:8c:1b:4f:37:d8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
        Validity
            Not Before: Apr 16 22:01:58 2026 GMT
            Not After : Apr 17 22:01:58 2026 GMT
        Subject: CN=aaf86dacad02b9f69bc0b02d70c3dfb943af4fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:44:5a:04:3d:64:af:38:bf:94:fe:bc:fe:
                    c6:f3:44:d1:82:57:fa:47:b5:91:4b:bd:1f:3f:36:
                    34:3e:56:0b:b6:ab:a6:7d:f1:e0:96:48:28:3b:41:
                    1f:d5:35:fe:eb:ed:87:13:8e:36:8c:95:d8:ac:aa:
                    7c:4b:57:43:62:47:a9:21:c8:14:22:5d:61:d0:9d:
                    96:65:1d:59:60:ef:0c:ae:bb:d5:b9:f7:d5:4a:31:
                    5e:0d:ef:74:a4:f6:d2:71:54:96:0d:85:42:c5:b2:
                    71:f2:20:d1:12:04:19:01:60:e5:53:69:0c:84:c8:
                    21:26:5c:dc:8d:9b:33:a9:2e:0d:94:cc:10:4a:29:
                    47:b1:c5:76:e2:87:1c:53:4b:cb:4f:89:fb:5a:ae:
                    69:32:2d:84:59:3b:d8:fc:4c:28:89:44:10:74:ba:
                    76:59:96:7c:fa:6a:26:af:7f:3e:01:f7:95:32:4e:
                    7b:c6:af:6b:49:7e:76:2f:d7:c7:59:6c:2d:15:6f:
                    02:99:26:af:a0:97:1e:4e:d1:3d:b4:85:f5:20:2c:
                    d6:1b:a5:62:65:d1:b0:c8:21:3d:bc:73:97:9f:a3:
                    8e:89:e7:c1:cb:7c:c4:5f:ab:93:8c:21:e9:46:f0:
                    ed:16:c7:9c:2f:6f:63:ec:e8:12:9e:69:5d:c5:7e:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:6D:AC:AD:02:B9:F6:9B:C0:B0:2D:70:C3:DF:B9:43:AF:4F:B2
            X509v3 Authority Key Identifier:
                keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bf:c4:38:13:17:dd:f2:09:bc:33:22:11:52:ff:5f:4b:cc:
         3c:19:11:a6:1d:81:26:d1:64:16:62:4f:09:10:b2:8c:e1:d1:
         5f:e3:fb:57:4c:31:4b:4f:c7:fc:a9:6b:94:9d:37:2b:3a:0e:
         f4:c5:04:16:e8:d8:c7:a4:4a:35:33:c8:49:d3:31:79:2a:c7:
         90:e8:53:f3:27:b7:ad:4a:b2:00:5c:7e:b3:ad:bd:d7:30:c5:
         53:3e:1b:f8:07:a3:b9:36:27:04:f0:4c:2e:a9:50:79:d0:5b:
         96:8a:23:9b:d5:e4:85:68:ea:73:26:3b:cd:f3:43:e5:53:71:
         69:ef:73:d4:3d:0d:70:fe:ed:f6:17:5a:df:c5:3c:bc:2b:17:
         74:ae:8b:b7:13:8d:27:72:c3:1c:6c:33:51:46:cb:f2:07:b4:
         a9:0f:37:8c:05:cf:c7:ca:1e:dd:74:e9:ab:85:d8:b1:13:48:
         fe:84:94:75:cd:2a:b0:b6:cf:48:51:7e:3b:d0:83:93:2f:0b:
         60:f4:43:04:11:fb:ac:4c:eb:8c:1f:3e:b6:d1:0f:88:70:d9:
         1e:e5:5f:d3:f2:3b:d3:a2:8c:8f:46:c7:ee:3f:6c:d3:2d:56:
         f3:02:7c:07:0a:df:77:18:dd:8b:51:d1:3d:80:3b:15:ef:c4:
         4a:1c:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:13 2026 by rpki-client