Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          ZKVCQJuPJvB6ve5lgPqKhqLQtzjB6GXddr9PQ8r+7sQ=
Subject key identifier:   F8:87:C9:E6:84:DB:F8:A2:47:2A:7F:84:16:18:AF:34:FB:5A:1C:78
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       019D9B50CA5E993A873B78D31C92E2C6F78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          07A9
Signing time:             Fri 17 Apr 2026 12:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:56 +0000
Files and hashes:         1: RLR72YRiJVyCWPKBdtMEO1UXGxo.roa (hash: 5N61eUvI++Qd4nCDGm+6k0H44mOvPhvyKSYwjTVvkeA=)
                          2: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: kwEsKX1UBNwkrLV9dKGrPC6N+Wu2KD97vjORYv002lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:ca:5e:99:3a:87:3b:78:d3:1c:92:e2:c6:f7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Apr 17 12:00:56 2026 GMT
            Not After : Apr 18 12:00:56 2026 GMT
        Subject: CN=f887c9e684dbf8a2472a7f841618af34fb5a1c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:8f:9d:b5:67:cd:d1:4b:eb:67:7b:09:8e:
                    f5:9b:b8:d4:e7:d5:1d:ff:31:c8:66:b5:bb:a8:cd:
                    87:a7:46:11:77:5b:3b:56:e3:bb:5b:ae:1c:52:59:
                    2e:eb:62:f9:20:87:a0:8f:a1:4a:cd:f7:12:c1:4a:
                    de:b2:cc:f9:11:28:e7:d1:81:7f:be:88:a5:71:b3:
                    11:7e:07:57:83:04:8e:32:3e:95:79:70:b4:2f:d2:
                    d5:2b:13:e0:85:6d:68:fb:3c:e1:cc:ea:72:5b:96:
                    9f:ae:8a:7f:b5:65:41:6a:ef:2a:1d:63:16:62:f9:
                    2e:3e:ec:25:9c:ac:b4:cc:1a:b4:d5:72:4d:1d:d7:
                    13:6f:3b:b2:88:0a:28:4b:fe:40:a4:88:dc:2a:ae:
                    81:42:16:05:8f:6e:a2:da:19:73:5d:d5:a8:e0:40:
                    a6:a1:60:ee:ad:ca:aa:a1:ea:2c:99:e1:a8:4c:f2:
                    b2:9c:73:67:ed:69:6e:a8:9d:83:d2:ac:f9:19:74:
                    26:48:6f:51:71:24:07:47:b4:c1:30:0c:69:bf:41:
                    fc:eb:93:2e:5d:aa:b0:49:d0:fb:b7:89:e9:ab:99:
                    dd:8c:13:1f:66:59:f5:4a:22:a9:ff:2c:fa:1c:86:
                    3a:86:2e:f8:b3:bd:01:f8:4a:aa:de:08:9d:70:0b:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:87:C9:E6:84:DB:F8:A2:47:2A:7F:84:16:18:AF:34:FB:5A:1C:78
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:00:8e:fd:10:3c:21:8b:be:3c:74:ed:bb:29:d8:c3:b3:55:
         44:05:e5:c6:8a:03:23:0a:5f:5a:c4:bb:f8:46:2f:75:8d:d4:
         25:9e:5f:e5:bf:04:68:31:94:93:0e:f7:c3:e7:d1:b9:6f:f9:
         32:06:32:2a:a9:6a:6d:d0:dc:d2:9b:ab:d6:72:b6:1d:c4:79:
         90:d0:fa:f0:6d:9a:2e:13:39:77:71:8d:1b:68:fc:e7:9c:12:
         11:b5:f5:6f:d5:6a:6d:95:28:c1:41:57:19:ed:8d:37:6e:81:
         ab:1d:b4:d6:9f:48:43:89:18:1d:8b:3b:ef:18:0f:ad:49:0e:
         6c:d9:33:10:00:45:86:eb:f2:05:a1:38:63:06:8e:fb:22:25:
         85:51:1b:db:cf:b8:02:f8:34:0f:d4:03:cd:1e:a3:f6:c6:bd:
         69:bc:43:42:e7:a1:40:58:33:6f:30:12:66:bb:95:fb:19:03:
         bf:96:ac:82:4f:ce:49:85:f7:89:99:e0:41:a9:79:e1:21:a3:
         b8:ee:2e:57:ea:af:e6:5e:51:0a:3f:01:12:b3:a3:f6:ac:c4:
         37:bd:ce:69:a9:d1:17:6c:5b:01:81:9b:f2:ce:9a:3d:59:99:
         a6:20:c2:79:27:74:13:b4:f2:5f:85:0a:ca:13:81:17:b1:6d:
         3a:d4:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:26 2026 by rpki-client