Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          caVFFf2JRFoQ5kub3ajNSxzbL9udWSm9Xtosrd6NAOM=
Subject key identifier:   F8:CC:AB:41:E3:3D:D2:56:9F:EF:1E:B4:03:ED:16:A6:97:D1:05:34
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       019D9D08214AF5B8F700B63BE6850A3A6D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          DB
Signing time:             Fri 17 Apr 2026 20:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:48 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: 2lyC5gXJd4+9goQ4loWJ21hwbke8nrYP2pHLNNjejug=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:21:4a:f5:b8:f7:00:b6:3b:e6:85:0a:3a:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: Apr 17 20:00:48 2026 GMT
            Not After : Apr 18 20:00:48 2026 GMT
        Subject: CN=f8ccab41e33dd2569fef1eb403ed16a697d10534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:80:f2:ac:b7:b9:21:5a:68:4d:6d:9d:cd:
                    c1:03:78:bc:45:94:aa:92:d8:6f:65:9f:a0:ce:92:
                    33:b4:aa:c9:96:91:1f:a8:37:72:32:0a:a4:3e:89:
                    fe:4a:58:4d:47:63:9a:7c:cb:93:4c:d0:37:ae:ec:
                    81:5c:63:76:ca:c8:db:f2:d0:cc:2f:c8:88:c1:b2:
                    50:ca:12:40:c5:9b:99:f6:5f:d5:c1:56:4a:0d:3e:
                    0b:7b:2d:f7:f2:51:8e:aa:06:be:dd:d6:c8:c4:e2:
                    07:92:cb:63:bd:77:68:89:fd:64:58:44:af:c0:51:
                    1e:ce:7b:7d:e5:f4:90:c3:bf:16:49:78:14:89:77:
                    cc:c8:62:a2:7b:69:0f:b4:58:94:79:a5:f8:56:89:
                    22:f8:71:35:85:d5:84:95:d3:66:a1:ea:43:b7:15:
                    0d:e1:88:c4:fd:98:f4:ce:86:c7:55:d7:38:b5:3b:
                    19:d0:c2:b2:b2:3a:82:fd:ac:4c:54:7b:66:cb:2f:
                    23:78:e8:88:46:92:c5:6a:a8:92:f2:24:89:98:7a:
                    af:b3:cb:15:cc:8a:0e:7b:44:49:21:22:db:2c:74:
                    e0:28:94:24:07:80:74:ae:eb:75:83:d0:57:9a:26:
                    55:3b:94:1b:b9:53:71:30:fd:fe:43:f7:e7:15:3c:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:AB:41:E3:3D:D2:56:9F:EF:1E:B4:03:ED:16:A6:97:D1:05:34
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:5c:d7:5e:11:81:59:84:5e:e7:71:52:ab:24:b3:a6:8d:
         a9:84:3f:93:c4:39:5b:bb:b3:06:48:f5:7a:95:ea:f8:bf:70:
         aa:15:58:91:67:7c:32:ce:8b:13:f9:76:37:2e:68:a2:c6:03:
         b7:8f:3a:d4:8c:8c:b3:b2:32:9b:eb:5d:f6:66:97:54:a1:c4:
         87:1e:92:9b:fa:6c:44:02:74:bf:7c:d4:34:48:83:a4:b0:cd:
         4a:e5:91:9b:a3:9b:7e:e4:4e:e5:bc:2e:0c:82:a8:99:74:8a:
         ac:84:97:a2:8e:20:fa:ae:02:41:1d:d5:90:e4:5d:fb:04:56:
         86:18:4d:93:b2:c9:f0:ba:34:6e:25:70:2c:22:6e:93:87:9c:
         8b:0e:50:2f:25:82:8c:c2:b9:02:8d:69:28:4a:ed:69:d1:7c:
         6e:a5:69:50:84:57:2b:7d:d3:de:a7:82:72:d0:2c:46:50:cd:
         d6:ff:36:96:b9:0b:75:74:2d:71:1f:c9:d8:bd:51:92:5a:93:
         93:05:69:36:3b:70:8b:5a:2b:ae:df:af:dd:d7:ea:6d:eb:85:
         6f:67:84:90:fa:f6:a7:a3:af:25:e4:3d:28:8c:6a:6f:a3:3b:
         86:f1:f9:02:25:ce:40:43:3c:b3:cc:9f:59:22:13:63:4b:8c:
         41:a4:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:44 2026 by rpki-client