Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
File:                     eeOR1_ik51JOBfUxkEKdsk2fs6c.mft (raw, json)
Hash identifier:          VNhD2klUb7ieF8mbq6VVP+hKnrywWO+/mIs7fX+4DwY=
Subject key identifier:   3F:D2:D2:A7:45:35:E3:AA:B8:B3:5E:84:09:01:BE:B4:3D:66:3D:95
Authority key identifier: 79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7
Certificate issuer:       /CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
Certificate serial:       019D99D00AB935371CF7E3FC3072B9060518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
Manifest number:          072D
Signing time:             Fri 17 Apr 2026 05:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:41 +0000
Files and hashes:         1: eeOR1_ik51JOBfUxkEKdsk2fs6c.crl (hash: z3SbjGpXnd8U6ORIe+vnw3ZpITt7FMtEpcWp5s38unQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:0a:b9:35:37:1c:f7:e3:fc:30:72:b9:06:05:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
        Validity
            Not Before: Apr 17 05:00:41 2026 GMT
            Not After : Apr 18 05:00:41 2026 GMT
        Subject: CN=3fd2d2a74535e3aab8b35e840901beb43d663d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:ab:3f:5a:d6:c4:6c:52:f5:e2:1d:19:ee:
                    34:1e:64:09:ea:7a:ce:b1:60:27:aa:d5:ed:92:93:
                    b1:5b:14:ab:8e:e3:eb:a0:4b:78:6d:17:c5:72:d9:
                    64:bc:b4:39:07:82:ff:9d:e7:94:fd:a9:aa:ae:f7:
                    ef:55:87:46:35:31:24:aa:34:df:d6:6d:6f:64:01:
                    57:01:b8:5a:e5:85:cb:8f:92:bb:89:7a:aa:41:78:
                    44:33:1f:79:64:65:59:ff:1c:de:8b:5a:c0:61:42:
                    a1:a7:24:cd:31:d3:9e:03:57:f0:e0:a5:2a:42:9c:
                    f9:ac:f3:d1:96:ae:5c:2c:24:4c:3e:5c:05:6f:cd:
                    c2:ae:ae:68:d3:b4:84:8a:a3:e8:b1:61:ef:ef:84:
                    55:6c:f4:20:8a:ef:26:19:77:d7:e7:05:4c:c6:6a:
                    25:55:76:a3:ec:4c:f2:75:13:0c:d2:db:13:b6:7d:
                    a2:71:5d:22:44:3c:e4:24:e8:9e:f9:2e:48:a1:40:
                    4a:d6:bd:6a:53:c0:fa:c4:25:34:78:5c:5e:f4:97:
                    1f:08:3b:53:5e:8b:fe:da:fe:a2:ac:2f:3f:e8:90:
                    26:83:d7:95:2c:eb:d5:56:b4:d8:8c:7c:cc:29:04:
                    7a:0c:18:2b:6e:5b:4b:8d:5d:43:08:63:36:52:ab:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D2:D2:A7:45:35:E3:AA:B8:B3:5E:84:09:01:BE:B4:3D:66:3D:95
            X509v3 Authority Key Identifier:
                keyid:79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:da:30:98:6c:6a:67:47:79:bc:aa:e8:4d:26:a6:1c:e3:f9:
         a0:22:92:9a:ed:91:98:23:b9:6e:08:6b:e6:bb:f6:e9:b5:45:
         55:2e:40:2f:11:1f:8d:61:18:2d:12:2e:fe:8a:60:55:31:be:
         9c:5d:fc:2f:8a:23:34:44:0c:ca:92:9a:4c:c8:e8:a7:95:e5:
         aa:fb:84:0d:80:d5:eb:fc:58:34:1d:0b:42:b2:41:94:13:36:
         25:06:e3:03:73:37:6f:c3:02:80:a3:8f:ae:88:9f:5b:d9:b6:
         91:f2:e7:a3:f5:31:33:7e:5d:ac:8b:99:a9:95:b9:a9:44:a5:
         5c:7b:79:00:16:30:51:c9:72:ea:70:49:13:76:3d:e1:82:37:
         50:7f:95:e7:34:c4:a7:f4:ef:a1:41:75:7b:19:bc:da:a6:b9:
         58:58:79:6d:a1:26:a5:05:ef:54:05:5f:e8:7f:73:95:14:db:
         d0:83:ed:b5:1c:b3:3a:14:1c:1d:7a:df:0f:e6:1f:13:28:c2:
         03:23:a4:d1:dd:1d:29:0c:b7:76:91:17:e8:e6:2d:6d:53:e9:
         2c:fd:52:fb:5c:cc:53:99:b5:40:cf:b3:0b:9c:ec:75:dd:25:
         0d:aa:81:4e:e2:b3:0e:31:69:23:6a:1f:e7:73:94:84:5a:84:
         fb:d9:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:26 2026 by rpki-client