Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          uokdjltB0msK11ZYWA0gbww93gqJpE/jRET9ku4s6wM=
Subject key identifier:   BB:20:80:90:52:B5:C3:8C:96:6E:4C:30:2B:4B:CE:97:58:35:53:E6
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       019CAC46E5025730BC2634DB0F1D0F5660CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          17DB
Signing time:             Mon 02 Mar 2026 02:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:53 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: e5QZkuPSyopg/1mZWa6nULh4w3jvdxLpgHVg73yJh48=)
                          2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:e5:02:57:30:bc:26:34:db:0f:1d:0f:56:60:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Mar  2 02:00:53 2026 GMT
            Not After : Mar  3 02:00:53 2026 GMT
        Subject: CN=bb20809052b5c38c966e4c302b4bce97583553e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:d5:63:9a:57:67:c2:30:92:fb:f9:ed:ec:
                    8e:cc:a6:05:b9:87:e7:31:a3:8f:34:c6:14:28:d1:
                    6a:e2:05:a4:69:98:37:80:cb:f5:16:d5:9f:57:04:
                    58:c6:c6:af:a1:1d:d0:80:f6:66:89:ea:5e:d2:f7:
                    5b:2e:9b:df:a7:5d:4e:f7:75:29:bd:27:91:4a:02:
                    ec:e1:03:29:72:0e:38:5c:53:2f:fb:6a:95:f8:84:
                    e5:05:ee:83:26:71:3e:21:24:ba:93:1a:90:64:d9:
                    db:51:5e:4f:71:af:d0:60:ce:ee:12:d6:a3:20:61:
                    4c:c4:1d:19:4e:1b:36:3e:40:5d:bd:10:ea:e1:c8:
                    0c:c8:dd:ca:a9:bb:62:b3:65:39:3b:f4:1b:e5:58:
                    b6:9e:1a:ad:b8:f5:33:44:6b:49:67:3c:d8:b2:f5:
                    1b:d3:ce:d4:b0:9e:05:b2:5a:bd:06:c1:64:e1:46:
                    49:13:a1:22:90:39:f1:80:10:42:ff:5b:31:db:aa:
                    f0:dd:62:07:8a:d6:7e:06:e8:44:f6:cb:84:54:41:
                    6d:e1:95:f1:ad:fc:fa:69:82:96:24:ad:c0:f2:5e:
                    35:cb:ee:27:2c:8f:77:c6:e8:b3:2c:96:dc:6a:6f:
                    68:da:b9:95:84:a0:65:1c:69:a1:50:9e:dd:b8:18:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:80:90:52:B5:C3:8C:96:6E:4C:30:2B:4B:CE:97:58:35:53:E6
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:12:d7:c7:08:94:72:40:42:6c:c2:fd:57:c3:d2:37:2f:
         72:3e:35:8e:66:fa:ac:de:37:1d:65:7d:29:08:06:22:75:70:
         ff:c1:99:8c:f0:2f:b4:86:fc:ac:cc:a2:8f:8e:26:01:60:c7:
         89:9f:37:d6:e6:5d:9c:d2:59:63:06:16:f8:46:98:80:54:15:
         f7:9f:20:17:a4:e5:a0:9f:18:50:e1:38:80:13:c4:b4:fd:0c:
         b5:cf:69:78:25:3f:ff:38:e8:ab:a6:6f:f8:0d:6f:9a:1b:b2:
         99:14:ca:e3:fb:1a:46:12:76:8e:2c:6a:e5:0f:31:bd:a0:d2:
         de:d7:5d:8b:d6:10:54:f1:8b:1c:4a:d6:2c:1a:93:f7:5a:a7:
         a5:db:d8:d3:b1:84:1c:af:dc:da:a2:ae:34:49:36:66:c3:57:
         71:c1:3e:93:01:0d:48:ca:54:54:12:ca:b0:de:14:af:ac:0a:
         ca:0c:d1:60:05:bb:bd:2a:f1:95:aa:64:26:fb:15:98:da:1e:
         7c:49:9d:60:28:94:91:34:a5:e9:e1:0b:34:bd:6d:c2:52:96:
         85:f9:2e:f7:d8:d2:5c:8f:84:5f:ba:ea:0a:7a:da:e1:99:7d:
         70:3d:e9:63:a8:0f:29:6d:a7:53:53:97:5e:05:58:da:09:48:
         98:02:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:14 2026 by rpki-client