Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          G0jNA1MExnAhsCAeOfkGLAdrzlditO0tCWGAYIFUfXs=
Subject key identifier:   D6:B7:D7:73:0A:FA:0F:86:74:B1:CC:7B:1E:FA:E9:B9:8C:26:C5:F6
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019DA29C191778D0F5942DAD92DFFDFA83F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          0752
Signing time:             Sat 18 Apr 2026 22:00:32 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:32 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:32 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: YJi4yhuxvu6O70kPs6JKeGmn0wzH9AMO/b+R3V9XDhM=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:19:17:78:d0:f5:94:2d:ad:92:df:fd:fa:83:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Apr 18 22:00:32 2026 GMT
            Not After : Apr 19 22:00:32 2026 GMT
        Subject: CN=d6b7d7730afa0f8674b1cc7b1efae9b98c26c5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:5c:0e:10:a1:39:2d:30:a7:09:8f:37:9b:
                    50:7f:cc:35:a5:93:f7:01:b3:e2:b3:17:75:3a:ce:
                    03:5b:e0:e3:9c:e0:c2:26:7b:cc:49:8e:be:ab:6d:
                    9d:ee:4b:92:e7:20:29:8f:6d:1b:dc:b0:81:95:b1:
                    cf:87:02:ba:60:dd:b0:4f:d9:01:2f:81:7d:9e:c6:
                    2e:b8:69:19:e8:7a:5f:2c:44:ee:f1:66:d4:f6:77:
                    05:2c:2a:93:ba:6f:aa:98:b0:b2:bc:ad:c0:5c:fd:
                    06:c4:21:e6:ec:b1:38:df:b4:eb:1c:52:e0:16:ad:
                    f5:b8:32:80:04:be:a6:57:9f:eb:59:65:38:f5:ef:
                    47:44:d8:f7:27:97:72:f1:70:d9:5f:d3:c0:39:9d:
                    00:33:10:05:e6:92:ef:4c:db:a3:d9:03:6f:31:3a:
                    4b:6e:2f:be:9a:88:de:a9:45:0f:d5:c2:2b:3e:e2:
                    2e:04:c4:4a:5d:9b:ea:23:86:78:85:39:a5:c7:f0:
                    c1:62:3b:ff:d5:bf:f4:3d:1c:06:0e:df:c2:48:88:
                    3d:af:0e:b5:8b:2a:51:ac:7c:30:02:c2:af:b4:19:
                    11:a0:1d:0c:03:e0:e3:85:aa:e4:df:12:91:ee:86:
                    86:45:57:cd:bd:5e:31:6a:09:42:08:15:8d:20:a9:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B7:D7:73:0A:FA:0F:86:74:B1:CC:7B:1E:FA:E9:B9:8C:26:C5:F6
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:e8:e1:75:9a:94:b8:dd:55:a1:9e:9e:b3:d0:d2:ed:fb:
         b2:c7:ee:1c:97:d3:33:ba:82:e7:73:f2:2e:07:a6:53:83:47:
         80:a5:36:16:7c:ce:fd:01:f0:2b:9f:c8:ab:19:34:b7:9c:0a:
         f8:6a:85:6c:1f:0e:da:c8:1b:ac:20:70:4a:68:65:d8:fa:b6:
         f2:89:ec:18:88:d0:2e:23:87:34:f5:f5:48:26:30:2e:47:de:
         07:41:f0:3e:7f:5f:77:19:a4:65:e4:24:cf:8c:8e:14:ce:b6:
         3c:48:53:4a:f9:60:6b:53:3a:93:f9:70:44:4f:aa:e9:50:b4:
         9f:fd:ba:74:b8:cf:30:15:18:91:a6:91:56:94:c0:1b:ef:db:
         a5:0f:4e:24:9f:34:2c:e9:13:a4:0d:95:d9:36:de:d3:31:2c:
         15:0e:fb:8f:09:9c:f2:92:11:39:fd:74:ac:79:1a:eb:71:6c:
         c3:8e:10:af:e3:62:70:1c:8b:9f:f8:89:9a:17:7f:d3:04:b7:
         ec:7c:4f:59:19:83:1d:22:5a:05:cf:1a:96:c7:55:65:1b:19:
         3e:ad:3a:17:7b:8b:29:42:a6:1e:70:1b:58:ea:29:0b:82:f3:
         a7:16:55:39:74:b8:0b:3e:1a:83:a3:b3:b2:85:b7:94:b7:a9:
         73:ce:6a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inBkXeND1lC2tkt/9+oP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx
NGQzN2IwHhcNMjYwNDE4MjIwMDMyWhcNMjYwNDE5MjIwMDMyWjAzMTEwLwYDVQQD
EyhkNmI3ZDc3MzBhZmEwZjg2NzRiMWNjN2IxZWZhZTliOThjMjZjNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzFcDhChOS0wpwmPN5tQf8w1pZP3
AbPisxd1Os4DW+DjnODCJnvMSY6+q22d7kuS5yApj20b3LCBlbHPhwK6YN2wT9kB
L4F9nsYuuGkZ6HpfLETu8WbU9ncFLCqTum+qmLCyvK3AXP0GxCHm7LE437TrHFLg
Fq31uDKABL6mV5/rWWU49e9HRNj3J5dy8XDZX9PAOZ0AMxAF5pLvTNuj2QNvMTpL
bi++mojeqUUP1cIrPuIuBMRKXZvqI4Z4hTmlx/DBYjv/1b/0PRwGDt/CSIg9rw61
iypRrHwwAsKvtBkRoB0MA+Djhark3xKR7oaGRVfNvV4xaglCCBWNIKnjNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa313MK+g+GdLHMex766bmMJsX2MB8GA1UdIwQY
MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt
MmRkNmUxMTEzZjM0LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0
LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPHo4XWa
lLjdVaGenrPQ0u37ssfuHJfTM7qC53PyLgemU4NHgKU2FnzO/QHwK5/Iqxk0t5wK
+GqFbB8O2sgbrCBwSmhl2Pq28onsGIjQLiOHNPX1SCYwLkfeB0HwPn9fdxmkZeQk
z4yOFM62PEhTSvlga1M6k/lwRE+q6VC0n/26dLjPMBUYkaaRVpTAG+/bpQ9OJJ80
LOkTpA2V2Tbe0zEsFQ77jwmc8pIROf10rHka63Fsw44Qr+NicByLn/iJmhd/0wS3
7HxPWRmDHSJaBc8alsdVZRsZPq06F3uLKUKmHnAbWOopC4LzpxZVOXS4Cz4ag6Oz
soW3lLepc85qWQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:55 2026 by rpki-client