Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          BMtU02od54swHefM/Kj2a0SgqQ5+UtnCsTPSERi8LR4=
Subject key identifier:   7F:CA:D8:D1:04:65:A0:13:45:48:C3:08:02:9D:CB:FD:44:6F:A9:67
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       019DA48B5A847F161239A977F220DE46F55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          09E4
Signing time:             Sun 19 Apr 2026 07:01:29 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:29 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:29 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: QNw1ntAogj3bzCcPnBuiSM0AAYaqUjsKIwLgfafFBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:5a:84:7f:16:12:39:a9:77:f2:20:de:46:f5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Apr 19 07:01:29 2026 GMT
            Not After : Apr 20 07:01:29 2026 GMT
        Subject: CN=7fcad8d10465a0134548c308029dcbfd446fa967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:22:e0:66:38:4e:a9:34:97:b1:f8:b5:76:
                    61:3d:ef:62:d0:3d:9f:18:84:50:03:ae:e8:82:9c:
                    f1:87:20:4e:96:53:34:30:17:cf:7d:fd:51:9d:97:
                    c2:85:be:43:3f:a4:83:1a:95:e4:a5:d5:d4:c8:9a:
                    42:a2:72:a3:da:92:ab:55:4f:ac:7e:71:e3:e8:73:
                    44:a3:b0:5b:c2:a3:d8:8e:a5:3a:d2:84:73:ef:26:
                    be:48:d1:59:6d:c0:b3:1c:37:eb:d7:cd:23:cb:aa:
                    f5:71:79:7a:f7:9f:24:92:6a:9e:68:fa:81:bf:d4:
                    39:5b:99:07:40:c5:f9:9f:af:80:a7:89:20:cc:79:
                    99:a3:74:40:35:c1:d7:83:68:06:2c:07:e6:e5:64:
                    62:30:aa:3c:1d:6f:ec:ca:4a:7f:12:94:d2:d5:4a:
                    26:fc:17:d8:8b:b9:c2:d8:42:9e:57:21:71:45:65:
                    fd:2a:b0:18:9a:b5:26:6f:48:4c:1d:53:fa:48:54:
                    ad:b5:55:3e:d0:e9:c1:8e:b2:62:a7:4f:14:02:03:
                    69:2d:46:84:11:7a:24:98:77:d0:96:ea:fc:59:89:
                    32:6c:ee:be:e4:5b:58:5f:19:32:39:e5:fe:87:cc:
                    59:3c:f9:23:dc:62:43:ad:f2:e6:bd:c9:53:d3:70:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CA:D8:D1:04:65:A0:13:45:48:C3:08:02:9D:CB:FD:44:6F:A9:67
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:f1:bc:a8:18:7f:ad:44:80:78:f5:4a:c4:96:3b:92:be:
         e7:5e:64:91:1d:21:1e:e7:81:da:47:e6:6b:48:ca:53:60:c1:
         00:5a:db:be:48:96:c8:c3:fa:03:53:12:17:ba:47:56:d4:41:
         24:dc:b2:f1:9b:9a:bc:8e:5f:a0:de:cb:46:1b:90:a4:33:2a:
         a7:9b:75:fa:bc:19:54:e8:1b:f9:8c:e4:93:0d:f1:20:6a:d6:
         71:54:2c:76:4d:31:be:0f:9e:14:e9:88:4a:26:0f:ae:94:1d:
         69:1d:78:b4:84:67:a7:e0:67:6f:09:e6:bf:aa:e8:ba:1a:00:
         a8:d9:70:97:84:80:d8:bb:b6:15:d7:7e:1e:b8:3c:d1:2d:6c:
         d5:e1:e9:b3:6e:c0:3d:6a:ed:69:e5:e7:fe:58:ab:be:ea:41:
         03:9b:5c:2d:a6:07:aa:aa:d2:db:fb:1f:29:d0:2b:f8:ab:df:
         d4:2f:ca:d7:e1:84:87:bc:7a:71:17:ff:ab:e1:1e:83:e5:fd:
         de:0a:c2:16:74:1e:9b:5f:88:8a:6e:ed:20:98:49:e3:91:b0:
         75:77:cd:e3:70:19:a9:12:21:d0:89:4a:7e:42:e5:48:d4:3a:
         5f:1d:f8:a7:57:ae:a0:0b:46:1e:9f:fa:a8:8e:b8:94:3c:1e:
         ba:47:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:01 2026 by rpki-client