Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
File:                     EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json)
Hash identifier:          SaoKOAcBx3zOGnkAkSqjcRQes1ZFvDy7r4Bh99C4z6M=
Subject key identifier:   4A:90:33:B2:AF:72:C6:2A:4E:91:9C:72:C0:C6:8D:20:C5:CE:16:30
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Certificate issuer:       /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial:       019D9BF50AB00ED4899B9D679BC31DC0309A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
Manifest number:          0371
Signing time:             Fri 17 Apr 2026 15:00:20 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:20 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:20 +0000
Files and hashes:         1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: TiiG6oisCnYfqkmyy1DSpBmZqFpkS1p1ndBdzJzkT4Q=)
                          2: yXyD_zifD57_3ENmURpKOxN4wrI.roa (hash: vtmbJA6HNA5a5SEYjfVwIxLDIaP7c5sX/Ao1BROY2M8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:0a:b0:0e:d4:89:9b:9d:67:9b:c3:1d:c0:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
        Validity
            Not Before: Apr 17 15:00:20 2026 GMT
            Not After : Apr 18 15:00:20 2026 GMT
        Subject: CN=4a9033b2af72c62a4e919c72c0c68d20c5ce1630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:d7:6b:e1:ce:11:ba:83:e7:64:0b:93:1e:
                    6c:30:67:41:01:24:10:9b:1c:cb:1c:4d:46:49:84:
                    1e:83:4a:d8:12:f2:09:6a:57:f9:92:2c:3a:2c:a5:
                    37:a7:d1:92:52:d1:bd:c3:73:4c:5b:58:06:49:30:
                    93:19:a6:d6:4e:b0:d1:ec:d9:9b:12:bb:02:7a:d0:
                    7d:ae:1a:a3:16:50:5a:44:56:21:f9:c2:94:3f:a2:
                    30:51:1e:1a:c1:da:33:6d:98:97:9d:f6:a1:88:39:
                    90:26:6b:7e:0b:eb:96:e7:d4:e3:e1:04:01:58:c2:
                    0a:17:6a:7e:cb:57:e4:a1:81:5c:e5:08:41:46:9b:
                    31:ec:a0:d7:6f:18:33:20:07:5c:cb:ad:c1:9e:62:
                    62:eb:eb:a1:42:49:03:c8:0e:45:0c:ac:1a:a2:75:
                    9e:d8:a9:04:01:07:19:bb:f3:cd:2b:ea:6d:8c:38:
                    76:64:dd:6d:bb:1d:87:1d:cd:05:fa:b1:3c:78:94:
                    10:c6:73:70:a5:2a:8c:f4:8f:62:80:c9:ce:5b:7a:
                    3b:a9:1e:e5:83:94:3c:f3:0b:da:4f:5c:aa:66:75:
                    7f:12:4c:8c:d6:2a:98:89:4c:77:47:0e:08:62:a4:
                    57:1b:27:65:71:5e:00:a2:cc:39:8c:11:ee:df:65:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:90:33:B2:AF:72:C6:2A:4E:91:9C:72:C0:C6:8D:20:C5:CE:16:30
            X509v3 Authority Key Identifier:
                keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:97:d1:f5:f5:90:65:7e:3d:c0:d1:28:d6:ef:c8:71:a0:de:
         f0:6c:e7:6e:48:c7:67:e4:f5:36:dd:cd:84:2d:77:95:7e:c3:
         f5:81:d3:2e:33:79:56:0b:63:e8:2e:9e:b8:1d:02:f3:5d:4a:
         4d:ae:14:c7:63:a7:c6:95:15:9a:33:2f:d6:5f:7f:02:f9:70:
         08:b5:d1:81:14:66:bc:22:bf:88:eb:bc:c2:67:95:8d:d2:30:
         87:7b:b9:37:c3:2a:69:db:2b:87:5c:42:75:74:33:b0:b8:a7:
         b6:31:41:93:31:b4:cd:26:c8:34:c9:ee:10:f6:98:ed:91:2a:
         43:5d:f2:b7:25:93:21:8d:25:2e:63:4e:86:40:a9:40:63:4b:
         a7:17:92:0b:07:de:b7:97:ce:05:86:28:b1:3b:4d:85:ca:ef:
         82:14:e3:d6:5b:98:c2:e7:af:77:5e:72:ef:80:40:f9:dd:72:
         d0:fa:bd:37:ce:07:ba:de:37:7c:cd:27:a7:22:98:eb:a3:73:
         c7:e3:11:dc:a3:f2:b5:9a:3c:13:82:bb:50:ab:c6:8d:ad:41:
         b4:83:7e:5f:73:76:0f:25:97:a1:f1:c1:5b:96:a8:06:f2:97:
         95:4a:cc:ae:bc:68:7f:1d:e1:49:b5:32:46:ec:64:3f:d7:db:
         50:1c:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:06 2026 by rpki-client