Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          IAx3YOo7GQeM4xSxlR00E/vCpEtUtj1PWfhrmaMm7/w=
Subject key identifier:   82:AF:FC:1E:81:3E:6B:FE:AF:E8:90:3F:38:7E:7A:A3:58:7B:DC:1A
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       019D9998CED1402B5A8C21A6ACD08DA5561A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          157E
Signing time:             Fri 17 Apr 2026 04:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:21 +0000
Files and hashes:         1: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: Ix5ucv9WEE850KZJblmz0Tj7PxDBDhWGkQAcaYDpoLo=)
                          2: FVaF3betIOHg4wPft72ngyCZePE.roa (hash: AegadGCHV5CrBJ9fTUuKeMkqUQ9CrMdfpb5QnM9p2ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:ce:d1:40:2b:5a:8c:21:a6:ac:d0:8d:a5:56:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Apr 17 04:00:21 2026 GMT
            Not After : Apr 18 04:00:21 2026 GMT
        Subject: CN=82affc1e813e6bfeafe8903f387e7aa3587bdc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:94:87:e2:cf:8d:3d:da:85:81:57:8f:63:
                    d8:ce:74:7a:1e:87:ae:32:ea:23:97:0d:05:b2:3e:
                    d1:14:e6:4f:5e:06:aa:96:51:28:19:2b:87:05:57:
                    35:1c:23:e3:84:ad:b8:d5:5d:33:25:da:1d:a5:15:
                    25:37:8e:32:db:6c:c6:6f:a0:70:ba:81:2e:eb:5e:
                    1f:a2:69:61:6e:85:97:4c:91:bd:08:d0:91:33:29:
                    b3:5d:65:9f:8e:c6:ea:bb:a0:fd:37:4c:32:ce:03:
                    2b:49:dd:0c:25:68:c4:cb:e6:bc:6e:f3:88:71:52:
                    e0:f2:35:56:b3:98:54:66:a6:ea:5a:94:30:64:97:
                    53:f2:ec:66:fd:df:24:b0:eb:dc:0c:79:4a:82:c9:
                    35:73:f7:6d:f2:2b:cf:c2:74:d6:fb:12:e5:de:87:
                    be:bb:d9:86:72:72:f4:48:d7:17:75:e0:8d:dd:6a:
                    52:45:f4:08:30:cd:1d:43:35:dd:8a:7d:18:dc:f0:
                    4b:92:ae:da:7f:d0:df:83:e1:22:2d:91:f2:d7:2d:
                    22:2e:83:21:29:2c:a0:7a:98:bb:a2:68:e8:a3:89:
                    24:19:02:21:3b:22:85:ff:21:ae:4f:f6:8f:93:97:
                    9c:c0:fb:ac:8c:89:81:83:4d:d1:86:fc:a4:47:cc:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:FC:1E:81:3E:6B:FE:AF:E8:90:3F:38:7E:7A:A3:58:7B:DC:1A
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:09:b5:06:c2:71:ff:bf:24:35:07:58:df:78:36:5f:2a:96:
         24:05:6a:79:6f:19:8c:70:43:92:44:e0:09:d6:40:46:70:51:
         c6:91:97:8a:15:6f:46:d6:45:07:b1:d4:17:4f:74:44:12:a7:
         7f:65:b8:ed:13:d4:2e:d1:e5:c5:8f:20:4f:eb:a0:00:da:94:
         45:d5:77:8c:dc:28:f3:0a:6b:a9:6f:6c:26:66:79:24:0f:92:
         cd:09:61:13:50:83:9c:24:76:a1:a8:94:8d:ca:c5:90:21:93:
         5c:c0:90:4b:a2:b2:40:75:e5:57:35:bf:b6:b5:35:7c:47:0e:
         a8:ec:a6:95:50:f8:57:1e:f9:92:83:b8:76:81:7f:92:66:78:
         61:76:bf:d6:4f:af:39:77:63:1a:d4:ff:81:f0:1a:5e:6d:ab:
         c3:85:7c:20:bf:4d:98:05:b6:6f:a6:59:8f:9f:8b:b9:74:a6:
         e9:c4:69:6b:c6:f2:9a:70:42:12:cc:32:f8:e0:58:0a:0c:a8:
         ed:00:19:e0:52:cd:da:c0:67:a2:50:6f:dc:8c:6d:25:4e:22:
         5b:f0:c8:43:e8:4f:14:e8:7f:68:7c:22:1f:9b:ad:38:e2:7e:
         eb:1d:57:67:36:5e:80:42:99:65:d6:fb:8a:d8:3a:64:da:7a:
         96:84:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:16 2026 by rpki-client