Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          15LdFxJtLEGDjv3rHVnziOcIcwr3c93Cg0O+AhDV3Ig=
Subject key identifier:   AD:7F:4F:8F:18:DD:6B:A7:90:33:F9:38:43:9D:C0:D3:94:08:86:1D
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       019D9A75024086D40D3085EC795A04E719BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          015E
Signing time:             Fri 17 Apr 2026 08:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:52 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: NaiQLYnOjA0wy1Il8pKPYwBIyDxvnb6XMwjV4sLU4z0=)
                          2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:02:40:86:d4:0d:30:85:ec:79:5a:04:e7:19:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Apr 17 08:00:52 2026 GMT
            Not After : Apr 18 08:00:52 2026 GMT
        Subject: CN=ad7f4f8f18dd6ba79033f938439dc0d39408861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:6e:ac:fc:1c:d9:c5:ec:f9:58:73:ef:67:
                    f0:0d:5a:a1:8d:43:63:e3:a2:e6:96:37:9e:fd:d2:
                    05:cb:01:9d:b7:96:ee:be:7f:b4:15:02:1f:57:e9:
                    81:a2:e1:d0:91:02:28:f3:fa:4b:49:1d:46:e3:25:
                    a0:cc:b2:85:51:22:ff:ce:21:96:c6:a2:94:70:bf:
                    f6:ee:7e:a0:de:83:13:2a:a8:db:c6:5e:28:45:71:
                    83:41:f5:92:c9:d6:c9:8f:86:ad:56:95:d1:14:d0:
                    16:5c:a2:f8:e9:ba:44:a0:9c:7d:83:b0:ad:be:6c:
                    1e:bb:86:41:2f:b5:fc:cb:1e:a7:13:8e:33:b8:f8:
                    31:ea:2c:c7:c5:18:b9:35:15:09:dc:55:b7:38:7e:
                    6d:db:0f:c6:85:be:c8:df:e3:c6:e8:53:bd:b4:97:
                    0b:88:81:47:6e:0b:5a:05:a4:78:63:58:33:92:4f:
                    2b:c6:bf:2a:6c:a6:66:9e:65:4f:d9:74:08:bd:b2:
                    74:d8:9a:7d:69:58:b8:3b:56:2b:51:b7:7a:03:61:
                    bc:45:d8:3e:ed:40:db:84:bb:2c:f4:05:e3:30:0a:
                    f9:88:86:5a:05:c7:f5:16:81:01:eb:fb:17:1a:39:
                    a3:75:9a:12:3f:f3:cc:b0:1b:1c:8b:bb:46:1e:20:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:4F:8F:18:DD:6B:A7:90:33:F9:38:43:9D:C0:D3:94:08:86:1D
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:79:d1:9c:7d:fb:29:a6:d3:a0:7a:34:6f:16:93:d5:76:7d:
         73:a3:c4:c2:2e:2f:49:80:19:1c:38:77:3b:f6:9d:60:e5:4e:
         75:4a:7f:18:c6:5c:ce:6a:5c:67:15:36:e2:11:be:a4:70:88:
         67:6b:03:71:bc:37:f1:3f:6e:fb:92:36:6a:fc:0f:62:97:55:
         b0:6d:46:d9:be:a8:c0:b6:aa:67:fc:fb:11:49:6f:61:c4:38:
         bc:04:81:22:ed:7e:72:6f:3f:2e:22:ff:ab:7d:42:15:4e:f9:
         22:27:81:77:fc:85:c9:c5:5d:20:0a:82:c7:a5:dc:6d:0f:d8:
         f2:68:3d:fb:5b:88:8a:b2:a9:79:cf:b9:11:76:fa:17:ef:00:
         6f:06:66:28:75:25:15:ce:3f:fb:25:c9:57:44:66:fe:a3:67:
         b9:f9:fa:5d:95:ab:a9:ab:b0:fa:87:79:a7:d4:36:64:ad:f1:
         6c:fa:70:4d:63:03:80:4d:db:5f:b5:7b:f7:c2:ed:f3:74:6f:
         71:24:ae:c0:a8:87:30:18:1a:d5:3a:c2:a9:ed:d1:5a:6a:8d:
         6e:fa:21:67:22:d6:51:f8:9d:18:d6:2e:42:f2:37:2b:17:1d:
         d3:df:fc:ef:c7:4a:38:7c:a3:8d:4c:05:c0:bf:55:e6:35:ce:
         65:ef:b2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adQJAhtQNMIXseVoE5xm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw
Mjk1MGIwHhcNMjYwNDE3MDgwMDUyWhcNMjYwNDE4MDgwMDUyWjAzMTEwLwYDVQQD
EyhhZDdmNGY4ZjE4ZGQ2YmE3OTAzM2Y5Mzg0MzlkYzBkMzk0MDg4NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+NurPwc2cXs+Vhz72fwDVqhjUNj
46Lmljee/dIFywGdt5buvn+0FQIfV+mBouHQkQIo8/pLSR1G4yWgzLKFUSL/ziGW
xqKUcL/27n6g3oMTKqjbxl4oRXGDQfWSydbJj4atVpXRFNAWXKL46bpEoJx9g7Ct
vmweu4ZBL7X8yx6nE44zuPgx6izHxRi5NRUJ3FW3OH5t2w/Ghb7I3+PG6FO9tJcL
iIFHbgtaBaR4Y1gzkk8rxr8qbKZmnmVP2XQIvbJ02Jp9aVi4O1YrUbd6A2G8Rdg+
7UDbhLss9AXjMAr5iIZaBcf1FoEB6/sXGjmjdZoSP/PMsBsci7tGHiCmHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1/T48Y3WunkDP5OEOdwNOUCIYdMB8GA1UdIwQY
MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt
MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji
LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHnRnH37
KabToHo0bxaT1XZ9c6PEwi4vSYAZHDh3O/adYOVOdUp/GMZczmpcZxU24hG+pHCI
Z2sDcbw38T9u+5I2avwPYpdVsG1G2b6owLaqZ/z7EUlvYcQ4vASBIu1+cm8/LiL/
q31CFU75IieBd/yFycVdIAqCx6XcbQ/Y8mg9+1uIirKpec+5EXb6F+8AbwZmKHUl
Fc4/+yXJV0Rm/qNnufn6XZWrqauw+od5p9Q2ZK3xbPpwTWMDgE3bX7V798Lt83Rv
cSSuwKiHMBga1TrCqe3RWmqNbvohZyLWUfidGNYuQvI3Kxcd09/878dKOHyjjUwF
wL9V5jXOZe+yEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:57 2026 by rpki-client