Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          pm+tEsuQhQLfbilQZ18pI1uwnjfLyiEAYqYb0Jutp8g=
Subject key identifier:   56:82:A2:88:23:F5:D5:E4:1A:6C:61:2F:3C:85:D6:2E:90:99:86:2C
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       019D99D06109D85E8CC3222518DE84480DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0D0B
Signing time:             Fri 17 Apr 2026 05:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:03 +0000
Files and hashes:         1: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: 6r0VXzzK9+ZyjIlCKUNjON3ZMiZx2sDbBFe7nh1ppoo=)
                          2: qxD1W6hqRWConVGSQ-eLV8mf_vc.roa (hash: 82D2ADqVdGbGAgEAlHSx5QuT441/zoNjvjslWGw4J00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:61:09:d8:5e:8c:c3:22:25:18:de:84:48:0d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Apr 17 05:01:03 2026 GMT
            Not After : Apr 18 05:01:03 2026 GMT
        Subject: CN=5682a28823f5d5e41a6c612f3c85d62e9099862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:e7:5f:ed:8a:61:04:5e:ce:e8:70:8e:bf:
                    b2:56:52:e6:99:57:cf:56:38:c0:64:2f:64:7a:86:
                    80:c8:4a:e7:ae:74:90:97:5e:6a:b0:5c:05:e8:99:
                    93:c7:0f:d9:7f:41:58:07:37:50:a2:83:bc:f5:46:
                    b0:3c:a5:9d:b4:39:e5:cc:bf:24:bc:68:43:1f:c6:
                    eb:e1:b0:f2:aa:0e:67:b1:19:c8:09:ac:ae:5c:17:
                    11:23:6d:ae:b7:bc:62:a6:87:6c:00:8f:94:33:1f:
                    c7:d9:8f:05:16:97:86:8d:1f:66:57:ca:08:8a:1d:
                    63:aa:71:67:b6:94:44:b8:2b:d1:1e:c4:27:d4:d9:
                    f3:28:67:68:44:2f:e4:a1:a7:3a:fb:6f:16:65:8d:
                    8f:18:93:7c:24:19:02:fb:8f:52:2d:ed:95:51:ee:
                    c7:71:67:d1:16:6a:2f:2e:90:fe:14:9f:74:bb:3c:
                    ed:be:01:b2:a8:43:05:1d:30:cc:40:ef:e6:51:4b:
                    81:15:69:63:7f:1b:1a:61:e7:6e:fe:9b:0a:d6:0a:
                    7b:95:82:db:bf:71:e9:d9:8d:d5:46:44:48:19:13:
                    4e:11:9f:6b:55:ef:76:c6:98:73:0f:b6:d8:e9:7c:
                    25:3b:83:a9:e0:9d:00:83:1c:3f:ec:50:1f:17:e6:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:82:A2:88:23:F5:D5:E4:1A:6C:61:2F:3C:85:D6:2E:90:99:86:2C
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:8b:af:c4:1d:05:d6:e6:65:2e:f6:68:f6:d9:15:8d:23:
         d2:a0:20:1f:bf:3a:2b:63:b2:75:17:49:e0:5b:9a:53:11:e3:
         87:30:79:47:13:2b:ba:72:80:f0:b0:7e:ab:74:c7:e1:bd:ae:
         4f:be:d5:41:51:57:1b:70:93:8f:65:ba:60:dd:c0:10:9a:76:
         66:74:a3:63:73:b9:f6:d2:6e:a1:23:6c:65:f7:b7:11:c2:b3:
         e1:5e:e7:62:c0:5d:cf:d9:b7:a4:45:27:4a:27:00:35:ac:b5:
         e1:04:f7:d8:20:03:02:c7:7b:85:67:04:1a:7a:7a:2c:97:15:
         60:0d:f2:93:a5:6e:82:5a:71:f8:d6:43:08:83:ef:59:77:fc:
         a2:1c:19:5b:b8:dd:7a:27:7e:75:09:c9:47:67:c8:6d:f0:c1:
         75:03:91:a5:24:e1:dc:75:c2:f8:72:38:8a:3e:f3:16:f8:28:
         94:0e:71:0d:87:29:aa:b6:37:42:af:64:b1:b6:65:db:95:6e:
         f9:16:f4:e3:2c:ad:d7:4c:bb:06:a1:d4:93:bf:8c:be:17:cd:
         77:54:0d:1a:59:e0:8f:39:db:38:b2:41:fe:57:6b:58:9e:68:
         11:cc:d3:9c:0d:ad:f5:42:63:c5:e0:a3:21:9e:3b:76:ef:b9:
         2b:cf:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:08 2026 by rpki-client