Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          Czb4v+7Fs3zfPPyG8TEPLIpsNbRpvlxOEcPP7sMEsws=
Subject key identifier:   4E:41:9D:72:69:BD:52:3A:E8:F5:74:E5:CA:25:D2:4D:AE:FD:A6:F8
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       019D9CD16DBDCC27A3EF4E0C7C9D3F82B7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          9D
Signing time:             Fri 17 Apr 2026 19:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:03 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: BIbm6YJs9yNkXyfKXgXTew8ufiURGxS2vWBCbj5BKpE=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:6d:bd:cc:27:a3:ef:4e:0c:7c:9d:3f:82:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Apr 17 19:01:03 2026 GMT
            Not After : Apr 18 19:01:03 2026 GMT
        Subject: CN=4e419d7269bd523ae8f574e5ca25d24daefda6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:58:4f:ae:b5:98:4f:a0:ea:1a:f9:48:99:
                    99:fd:b4:62:db:8e:b0:10:4c:21:79:51:e7:05:9c:
                    60:b7:76:7f:0f:7f:86:cc:23:51:15:79:50:4d:f6:
                    0f:0f:53:2e:ed:a9:98:4e:65:50:3f:70:04:7c:41:
                    1c:98:1a:73:43:ec:85:aa:86:0e:46:37:1e:ff:e7:
                    61:e8:02:bc:16:7b:e5:aa:d3:5e:3f:a6:8f:a6:0c:
                    a1:70:e8:36:0a:c2:ff:a0:4c:1c:de:b5:5d:fa:da:
                    cd:8e:be:31:98:04:24:62:1c:be:55:0d:01:c8:bf:
                    6e:10:4a:e3:f2:a0:b2:a8:9e:8b:6e:bb:30:ab:aa:
                    59:83:bf:4e:6d:cf:77:6b:db:3e:ad:d2:66:ee:86:
                    55:88:ef:9e:99:f6:97:48:47:d7:f8:0a:7b:e3:47:
                    05:e5:bc:4d:db:42:41:1d:f7:3f:16:ef:9e:4e:26:
                    bf:67:63:ce:73:b1:cf:fd:ac:b9:49:19:64:db:e2:
                    11:58:21:3d:64:1b:dd:9a:d6:75:0c:0a:bb:54:07:
                    0d:d3:bd:34:88:df:ba:92:70:a5:25:08:4a:83:a4:
                    a1:a6:36:80:9c:9d:0a:db:4b:12:54:fb:08:27:c4:
                    6d:bb:00:04:59:8c:f7:35:69:59:bd:05:fa:82:d7:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:41:9D:72:69:BD:52:3A:E8:F5:74:E5:CA:25:D2:4D:AE:FD:A6:F8
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:0b:0c:bd:22:59:60:eb:1b:08:bf:33:4c:57:e4:05:fc:
         30:c1:50:d0:b5:cb:02:0d:89:90:bf:84:13:14:70:5e:97:49:
         84:59:b5:12:92:45:54:60:fa:84:0a:8e:74:e5:05:4f:81:a8:
         11:87:45:2c:0c:cc:b6:03:76:63:a6:c0:55:d1:1c:6f:91:20:
         e3:9d:dc:c2:fe:20:db:0c:c7:f9:ee:f9:d1:b2:c1:c5:7c:b4:
         b2:3a:08:ea:43:cd:c9:c4:ba:2f:9d:47:47:fa:32:b0:d6:65:
         87:4d:33:45:28:d8:04:7f:34:a1:b6:71:65:6d:ab:58:13:88:
         25:9c:a4:4c:de:f3:ea:59:b2:cd:b1:51:82:80:34:52:b2:b1:
         e6:f5:53:ad:03:f9:10:8b:4d:5c:54:0e:0b:e2:c7:90:cd:56:
         ca:05:52:5b:53:11:6e:be:c1:b2:7e:8f:28:60:a7:e2:fd:94:
         15:ea:8f:59:ea:c0:a4:97:2c:6f:94:38:41:f9:51:5a:2a:69:
         eb:a7:a3:03:03:cf:33:fc:78:f0:39:12:f2:00:d6:33:7b:eb:
         c7:23:de:ea:bd:36:2a:b1:e0:c0:83:88:4f:c9:70:a2:ae:a2:
         a2:90:7d:0c:cf:f0:6e:2f:4c:21:95:1b:0c:31:7c:3e:f9:4c:
         3b:22:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:26 2026 by rpki-client