Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          94yxdjtsCiHZNv5dF1d+uokeRj9ECDzgzcPZSxNchLk=
Subject key identifier:   22:B2:23:55:51:73:FE:8D:19:BE:1F:1E:FF:5B:84:CB:FC:45:DC:AD
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       019D99CFEBFDA8BC95EADE13D9C5515F4F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:33 +0000
Files and hashes:         1: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: qiAOaoqtXvqiivA2tLdkWyhi90gIk03dFmAA29hxpQA=)
                          2: m3YFLRolOJzOKxQ9tZfTdlSKifw.roa (hash: i5pG82cl0NYlQscJwoNQNnDgodQ3zb/qtbRnFjtDuso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:eb:fd:a8:bc:95:ea:de:13:d9:c5:51:5f:4f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Apr 17 05:00:33 2026 GMT
            Not After : Apr 18 05:00:33 2026 GMT
        Subject: CN=22b223555173fe8d19be1f1eff5b84cbfc45dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:4e:94:db:fb:14:83:8b:9e:c3:5b:90:51:
                    a9:3a:93:dc:be:af:8a:80:78:37:6c:2c:75:a6:8f:
                    68:08:f4:fa:04:f7:8e:59:99:2d:5f:6e:27:24:05:
                    42:29:f6:b4:d3:30:80:1a:33:f2:c4:43:77:7d:c1:
                    62:8d:0f:60:3b:13:8e:0a:ad:4b:4c:e2:c6:e6:2a:
                    73:43:09:f5:d2:53:5b:d6:ed:3d:a9:74:b6:17:00:
                    64:e9:6e:44:94:fd:ce:47:b5:d4:74:aa:7a:f8:a7:
                    bb:76:0a:36:b8:d3:cc:af:a3:e0:be:d3:f2:b5:03:
                    52:9c:84:33:79:89:f4:46:ec:51:48:32:12:7c:25:
                    6e:14:c5:ba:e7:8a:3a:91:6c:9b:5a:9e:6e:3c:b1:
                    c8:49:05:ce:39:dc:73:e5:b3:0a:bb:93:a2:b9:a0:
                    15:cb:44:4c:bc:65:4c:05:f6:99:b2:d9:5c:7d:b9:
                    c7:59:8a:0b:40:c2:01:5f:e3:46:1e:4e:b5:11:31:
                    b4:88:32:68:7d:6e:a0:aa:12:63:4f:e6:2d:da:56:
                    04:7c:39:e8:f8:ef:70:67:30:13:5f:a3:f7:da:d3:
                    70:32:a2:f8:e3:d0:11:41:c0:47:2d:26:47:28:14:
                    e6:b3:46:53:01:6d:fd:37:e7:4b:28:44:cd:e2:56:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B2:23:55:51:73:FE:8D:19:BE:1F:1E:FF:5B:84:CB:FC:45:DC:AD
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:b2:2b:05:5d:38:ba:5f:70:66:73:36:9f:a8:de:5c:58:
         53:d3:d6:37:35:69:47:5b:ad:50:35:9c:a4:fe:be:69:b8:0d:
         3c:f7:ef:53:2f:9d:85:7c:43:7d:fa:5f:22:83:d3:04:9b:ef:
         d7:e1:69:c0:90:38:f6:61:6c:41:05:6e:8f:12:81:9f:67:3d:
         84:71:ac:99:de:2e:56:0a:ec:26:a3:f5:6b:5c:ef:3b:22:cc:
         eb:a7:09:cb:19:71:85:34:9a:f9:d8:18:ec:c9:d6:d2:50:52:
         e1:38:6a:b5:09:0a:dc:7f:4e:49:12:ea:1f:cf:2f:4d:65:07:
         71:ea:32:71:0a:38:1f:8a:8e:63:bd:23:91:72:06:69:0d:e0:
         e1:f9:62:df:0f:60:7e:7d:d6:05:d2:e5:bf:82:27:b3:49:12:
         52:64:bd:80:bd:e3:12:33:0c:ee:73:ac:dc:20:7f:24:d2:bf:
         e7:47:1e:eb:12:0a:2d:79:92:f9:f8:c9:29:24:a3:95:5d:ce:
         0a:a5:2f:0a:86:2a:fc:c2:08:a6:f3:98:60:df:e4:3e:42:22:
         84:be:01:b9:8a:1f:d3:af:78:54:32:ea:de:f7:82:45:ac:df:
         90:8b:f4:a2:1f:d9:a4:27:a6:1f:c6:c0:92:19:1a:8f:69:a7:
         27:3c:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:13 2026 by rpki-client