Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft
File:                     e5Vy2PhM92bs___gwvneO_Erg0U.mft (raw, json)
Hash identifier:          ZaMihY5xQ6AmlF1FGID4mOFPSPuKklzlx6fNrr/sieY=
Subject key identifier:   CA:22:DF:7E:69:87:70:B9:56:44:F9:4D:AC:93:FB:51:EE:B3:1F:7C
Authority key identifier: 7B:95:72:D8:F8:4C:F7:66:EC:FF:FF:E0:C2:F9:DE:3B:F1:2B:83:45
Certificate issuer:       /CN=7b9572d8f84cf766ecffffe0c2f9de3bf12b8345
Certificate serial:       019D9BF57F3D9120489CD934296580208B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5Vy2PhM92bs___gwvneO_Erg0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft
Manifest number:          39
Signing time:             Fri 17 Apr 2026 15:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:50 +0000
Files and hashes:         1: e5Vy2PhM92bs___gwvneO_Erg0U.crl (hash: MrQz3zHKcFfQ1+lLGyVjuiEMFMCQ92Kui3gWBcCNI5A=)
                          2: euH4k8gP4JyKgTjarxF7V2NLUYg.asa (hash: vd+fJRbr4ZujP4exWxq/V291lBJKscIQg/Of2EvWI/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5Vy2PhM92bs___gwvneO_Erg0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:7f:3d:91:20:48:9c:d9:34:29:65:80:20:8b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9572d8f84cf766ecffffe0c2f9de3bf12b8345
        Validity
            Not Before: Apr 17 15:00:50 2026 GMT
            Not After : Apr 18 15:00:50 2026 GMT
        Subject: CN=ca22df7e698770b95644f94dac93fb51eeb31f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:25:cc:56:ef:9a:25:fb:08:70:34:8f:72:
                    fa:53:78:59:8e:b3:a2:b2:e7:70:b5:17:7f:30:bd:
                    c3:7f:78:5d:4c:3c:82:1b:b4:b2:d6:09:cd:98:bd:
                    07:7b:06:08:71:73:b4:66:6b:14:bc:3f:cf:51:2b:
                    31:25:7e:3c:52:af:ba:36:2c:e8:9e:0d:e7:9b:b5:
                    b4:d1:5e:ac:02:0f:54:74:5e:be:04:a6:4e:45:5a:
                    7c:36:d2:66:8b:19:f9:a3:83:d8:bc:d0:e6:81:ab:
                    c4:1a:04:f4:06:04:f0:f8:1c:b7:29:e3:d9:10:8b:
                    2a:3b:9c:39:1e:24:9e:e5:eb:8e:af:a5:fc:ca:17:
                    97:cb:e3:da:99:1d:f5:64:83:19:a3:b3:fe:e6:5e:
                    32:27:ec:b2:1c:01:64:4e:38:b7:94:5e:03:53:27:
                    b2:45:50:8e:52:c2:9b:1b:07:81:49:87:b9:21:e2:
                    3b:39:e9:07:b4:b2:d9:9e:59:66:71:1f:37:13:ec:
                    10:0e:4e:0e:d7:e1:eb:0a:03:c9:de:81:60:10:23:
                    ca:70:7f:ff:33:fc:2b:93:63:93:c5:5a:b2:7f:19:
                    d9:bf:ae:bc:d1:36:1d:bf:51:f9:2e:68:ca:58:1c:
                    30:9b:1c:0f:9a:d0:aa:3e:15:ce:31:23:69:14:60:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:22:DF:7E:69:87:70:B9:56:44:F9:4D:AC:93:FB:51:EE:B3:1F:7C
            X509v3 Authority Key Identifier:
                keyid:7B:95:72:D8:F8:4C:F7:66:EC:FF:FF:E0:C2:F9:DE:3B:F1:2B:83:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5Vy2PhM92bs___gwvneO_Erg0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7ec150-172c-4893-bd29-82c1a9d5e783/1/e5Vy2PhM92bs___gwvneO_Erg0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c4:62:f0:26:70:83:d0:73:45:a7:0f:00:25:a9:50:94:e8:
         e8:f8:2c:99:01:9d:7a:a3:8d:97:a2:f3:5f:fd:74:f9:c9:75:
         3a:17:10:e1:d3:7d:b4:eb:5b:a4:1c:81:e4:df:2f:52:3c:38:
         05:db:92:7e:37:74:11:12:49:6f:de:e5:bd:7c:8f:fa:f5:2e:
         ae:2e:3c:df:19:f7:2b:f1:ba:a2:04:40:e8:e9:5f:50:aa:3d:
         4e:6b:67:b3:2b:a3:13:2d:92:31:32:5d:11:e3:f2:b5:31:e8:
         f4:32:c9:7f:03:02:b6:7d:eb:ed:98:a0:ea:a3:37:60:86:92:
         38:ba:4c:03:e7:f6:62:13:8e:a2:b4:87:34:f2:9e:d1:a2:d9:
         93:10:45:99:3f:c4:52:e4:1b:e6:45:76:58:53:77:c2:f1:41:
         ac:f0:cd:f9:e2:c0:73:3f:18:73:27:ac:e8:b3:49:0e:78:3a:
         47:a3:a2:c6:b4:80:25:b8:c3:02:9d:03:dc:1a:fa:de:a3:ea:
         a2:78:fc:08:93:a8:04:57:c8:cb:28:d4:09:17:8f:53:5c:28:
         85:21:91:7b:27:1f:e2:ee:b3:4e:01:72:f3:b7:7c:05:86:50:
         a3:09:fb:d7:02:ae:dc:e9:e7:bc:20:5d:ae:e2:cf:e2:fe:7b:
         70:47:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:11 2026 by rpki-client