Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          gbNkIABQz0Dc6YhZkWli7PHLIuFN3QQaDbZT1XvM/58=
Subject key identifier:   59:7E:64:FD:01:94:8E:20:AE:1B:C3:5C:84:85:0B:91:35:34:61:D5
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       019D9B50DF06EC70DAA83D6C2499ECA959D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          02A3
Signing time:             Fri 17 Apr 2026 12:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:01 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 8Lzqjd1T1QTX7UTJhu8hNH8lTYQZN6OdSM3uGlbG3KY=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
                          6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:df:06:ec:70:da:a8:3d:6c:24:99:ec:a9:59:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Apr 17 12:01:01 2026 GMT
            Not After : Apr 18 12:01:01 2026 GMT
        Subject: CN=597e64fd01948e20ae1bc35c84850b91353461d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:b7:9d:0c:a2:f8:97:85:ec:0b:ea:2d:cc:
                    71:12:95:29:56:17:97:3b:5d:d7:1e:49:98:09:30:
                    eb:65:63:7b:71:7e:68:6b:ee:45:b1:3b:ba:24:10:
                    96:1a:f6:e5:f2:4f:1c:cc:d1:35:ad:60:19:6d:af:
                    15:ea:b8:fe:a3:c9:d9:4e:9f:7e:44:d3:5a:60:11:
                    83:ce:ed:44:9d:eb:3e:ec:7b:2f:a1:42:a7:81:1d:
                    4b:75:81:15:c4:be:d1:31:16:c2:5d:8e:10:12:9e:
                    cb:5c:ed:71:c1:a5:3d:8e:1e:82:65:24:22:7a:f1:
                    72:6b:fa:3b:dd:07:5d:e8:cd:88:4e:c7:52:20:7e:
                    6f:dd:ef:cc:60:91:b1:cf:5b:2e:2d:ff:5e:08:7a:
                    f6:20:9c:7e:53:0b:9d:60:ef:dc:1d:f8:2a:93:0c:
                    cf:7d:d9:ff:34:59:bc:f9:bd:e1:e9:32:53:b1:0a:
                    3e:46:ed:33:80:bb:41:5e:f8:ae:76:07:d5:2a:38:
                    54:d4:b3:25:46:1d:24:c3:cc:95:29:be:69:1b:ba:
                    50:f2:9d:8a:16:2d:81:24:f0:8d:e3:6e:de:80:cf:
                    5c:6c:58:f7:da:a7:79:96:9a:04:e9:59:18:c1:7d:
                    04:ca:6b:49:63:3d:69:88:23:ea:28:43:10:9a:c4:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7E:64:FD:01:94:8E:20:AE:1B:C3:5C:84:85:0B:91:35:34:61:D5
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:74:da:a0:99:6f:5c:3d:22:f2:44:72:08:ae:2b:eb:6c:26:
         3c:25:50:90:73:7c:40:72:94:87:20:76:1b:92:82:99:9e:57:
         7c:05:73:14:c8:84:10:3b:e9:39:5a:91:9f:bd:d2:93:99:e2:
         8e:b6:5e:12:dd:89:2a:a3:c6:ad:6a:18:a2:4a:35:44:d6:e1:
         67:1c:35:b5:59:a4:9a:a3:8f:27:b9:b6:0c:93:00:49:1a:6a:
         00:d8:7a:5b:3f:4f:b0:1d:b8:eb:4d:34:c2:4a:ec:74:17:9f:
         3c:9f:e5:ce:d6:7a:a5:05:7d:ac:41:3f:cc:c3:09:56:24:06:
         8d:00:bd:fc:48:0d:3f:b0:67:9e:c3:0b:8b:b9:3f:87:65:4f:
         6c:84:e5:33:5f:68:51:d9:5b:6a:a1:5f:47:7e:67:9d:eb:ee:
         67:43:f4:25:13:0a:bd:0e:8f:96:7c:34:b0:e3:2b:7d:dd:de:
         ff:3c:7f:ad:36:e1:16:13:34:b9:14:fc:8c:40:36:d0:46:35:
         31:ff:3f:9a:07:7e:c5:19:e1:7e:fa:c2:17:c0:ae:d5:1c:d4:
         29:b0:2c:42:d1:37:46:48:c7:7f:3a:85:ab:49:21:47:f8:36:
         04:0a:e4:34:63:3b:c8:e7:cb:ea:14:9f:31:40:13:99:c7:2a:
         9d:da:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:58 2026 by rpki-client