Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          Zb2hhm77BGAtyud2cCRQmziexqG9bB5+Qn+L4WfFTcE=
Subject key identifier:   CD:29:55:99:84:84:F3:66:39:83:04:E9:04:DB:5E:66:F0:AC:A4:B2
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       019DA3E603DD435E559930456F45A7DD9102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0ECF
Signing time:             Sun 19 Apr 2026 04:00:53 +0000
Manifest this update:     Sun 19 Apr 2026 04:00:53 +0000
Manifest next update:     Mon 20 Apr 2026 04:00:53 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: ME12jXSMKPviP71lt2Ll/YYImYrx02i2JKyOuJij2BE=)
                          2: LjyKQnoqZ5RymbjzsonMI_FvadE.roa (hash: fUfxxZQ9bErMyThXgB9Vm8HXoJC9cjybZ/MiJy6eLxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:03:dd:43:5e:55:99:30:45:6f:45:a7:dd:91:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Apr 19 04:00:53 2026 GMT
            Not After : Apr 20 04:00:53 2026 GMT
        Subject: CN=cd2955998484f366398304e904db5e66f0aca4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:9f:da:d7:e2:2f:1a:be:88:83:fa:24:ed:
                    84:64:43:6d:b8:07:85:2a:70:79:ed:9c:69:c4:a6:
                    fb:5b:e6:c9:ab:0c:79:09:98:e6:1c:4d:48:5e:a8:
                    c0:f1:70:aa:f2:08:e4:21:3a:25:c9:16:14:7c:40:
                    3b:d4:77:d8:3a:35:88:f9:61:01:5a:06:82:55:a9:
                    55:b5:7f:bf:c4:8c:05:0b:5b:e3:6a:c5:b8:5d:df:
                    b3:b0:49:73:92:6a:2d:a0:fc:51:3a:4d:16:04:52:
                    51:83:74:50:13:e3:ce:7b:11:7c:6a:9c:3b:c2:f1:
                    e0:95:ba:57:ec:f1:2d:05:17:dc:e1:e9:6b:65:35:
                    b1:08:30:87:df:69:f4:a2:fb:96:8c:94:b2:c2:22:
                    af:9e:b8:11:af:10:20:ff:30:0e:00:4c:e9:46:56:
                    63:be:5c:32:d0:b1:1e:2d:9f:8f:5b:6a:db:91:c9:
                    a8:ec:56:87:3f:3e:89:c2:c2:dc:58:28:4f:a2:9e:
                    68:73:9c:58:cf:42:79:5e:ac:97:ae:8c:4d:15:17:
                    61:7f:61:89:28:47:ef:71:3b:f5:0f:17:8a:2f:07:
                    84:28:aa:02:2e:b2:90:bb:07:1e:b1:99:ff:5b:68:
                    bb:ab:ef:a9:f9:c1:05:e9:ba:3e:6e:aa:2c:4e:6e:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:29:55:99:84:84:F3:66:39:83:04:E9:04:DB:5E:66:F0:AC:A4:B2
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:91:fe:18:b5:0d:68:5e:52:61:00:bf:3d:0b:d7:f1:3f:
         86:1c:42:61:45:32:69:a2:18:7b:75:1b:9f:df:94:b8:b2:31:
         e6:00:24:ec:52:c5:11:91:73:dc:b8:8f:ce:df:2c:a2:1a:34:
         6e:5b:fc:d9:74:2e:a4:c4:ef:10:a7:f2:67:61:3a:83:e0:5e:
         33:fe:14:9b:0e:ee:1a:c4:24:e2:3d:d4:a5:54:8b:8e:55:b1:
         d7:38:15:7b:5b:04:8a:54:44:95:b3:fb:c4:da:60:32:20:6a:
         b9:a0:ee:4c:b8:2e:f7:71:35:6a:28:49:de:ed:06:49:f6:9f:
         5c:33:e7:0d:bb:e3:1b:05:16:fc:71:88:a7:44:5f:4a:a5:e7:
         3a:6e:65:a8:ef:69:82:0d:ec:f2:e0:a0:f1:1c:a1:42:29:b8:
         31:92:73:16:12:6f:bf:c3:16:1c:40:bf:81:c6:fb:c1:77:19:
         e8:ba:e4:55:9a:d0:2b:4e:3d:1d:df:fa:39:4a:62:ed:4a:ad:
         2e:62:6e:e2:59:e4:dd:8d:b9:6e:52:32:a2:43:72:f6:39:79:
         44:cb:1d:48:5e:60:b4:ae:76:24:c1:0b:da:a5:5b:b3:46:2f:
         3f:90:c7:f2:0a:39:f8:36:08:67:e3:2e:5a:01:ba:21:98:e0:
         c2:d7:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:11 2026 by rpki-client