Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier:          krbWQiXmVWAbWPuNFueWHK2MsZEaoDj6TdFAz+P94yY=
Subject key identifier:   DD:56:6D:1D:B3:B7:8E:84:89:BE:6D:AC:EE:E9:50:C5:10:85:77:F6
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer:       /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial:       019D2A3B71DC0C35CF5EE970E0F5C2C45B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number:          056A
Signing time:             Thu 26 Mar 2026 13:00:31 +0000
Manifest this update:     Thu 26 Mar 2026 13:00:31 +0000
Manifest next update:     Fri 27 Mar 2026 13:00:31 +0000
Files and hashes:         1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: ThZ7dQ4pslJLF/2JhV3CvgtIqQ5OsXxzYj0dsZwy/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:71:dc:0c:35:cf:5e:e9:70:e0:f5:c2:c4:5b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Validity
            Not Before: Mar 26 13:00:31 2026 GMT
            Not After : Mar 27 13:00:31 2026 GMT
        Subject: CN=dd566d1db3b78e8489be6daceee950c5108577f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:8c:01:4f:d8:89:d1:97:7c:60:6e:dc:32:
                    f2:02:8d:cb:31:05:0c:52:b3:0f:d7:49:f5:ae:36:
                    60:94:1d:3c:b4:ec:33:df:e4:d4:f3:d0:86:08:e3:
                    a2:a2:56:90:15:7a:6b:4c:b5:cb:37:6e:19:4a:61:
                    a8:6b:7c:80:57:24:3b:46:fc:77:7b:b1:bd:36:4a:
                    89:e9:9f:25:db:8f:de:95:ea:de:4b:a3:75:3b:b0:
                    a2:9a:2d:6a:1d:d1:2a:dd:80:76:df:c7:6d:48:38:
                    c5:65:07:9e:2f:65:c7:10:1d:15:32:ba:82:e9:c5:
                    ef:0c:fe:f2:4a:f9:34:7a:23:f7:15:89:7b:0a:82:
                    a7:e7:13:3f:09:cf:73:1f:73:b8:40:7d:a1:f4:6d:
                    a1:a1:92:15:cc:b0:0d:d4:81:d7:9e:64:03:d7:d5:
                    1a:5c:5b:34:83:1f:6f:b6:13:2a:fb:5a:5f:a5:2c:
                    f4:5b:1b:8c:13:b1:cf:73:5a:27:98:95:58:cf:59:
                    90:46:99:e6:e5:47:bc:57:f8:20:03:7b:4d:cf:e3:
                    ea:99:6c:36:80:fc:51:98:b6:f6:9f:dc:b6:b0:8b:
                    f7:71:d2:43:9c:91:55:e7:99:89:9e:c6:27:7c:92:
                    12:a1:36:21:31:cc:ae:bf:6c:49:d7:35:2b:4b:3e:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:6D:1D:B3:B7:8E:84:89:BE:6D:AC:EE:E9:50:C5:10:85:77:F6
            X509v3 Authority Key Identifier:
                keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:18:fb:61:a9:e8:2b:ce:28:58:ea:3f:b0:08:63:79:2d:
         fa:94:7e:f3:9e:90:49:ce:c0:9d:8d:3d:99:b6:3d:1b:e7:2d:
         50:84:6c:cf:62:6e:e3:5a:93:c3:6a:ba:88:ee:f0:51:c4:c5:
         27:7c:82:35:c9:16:39:df:56:5d:12:55:8f:ee:be:2b:d5:95:
         9e:a4:19:ff:fa:00:4d:08:19:9b:4a:bb:ec:09:1c:fd:f5:14:
         7c:6a:94:c8:3f:22:de:8d:17:a2:fc:d3:b0:c9:2f:10:39:77:
         96:58:21:17:a7:22:76:aa:61:3e:35:63:ea:57:af:42:e3:51:
         4a:c9:b4:bb:93:5f:bb:6b:c5:ff:30:03:3f:ce:0e:80:b1:f2:
         9b:17:38:54:fe:e9:8d:b9:3f:08:bb:f8:d5:4a:48:7a:18:e4:
         68:4f:4d:c8:47:ca:77:d8:5a:2c:6f:f9:07:c9:8d:79:dc:29:
         05:e3:3f:7e:d0:0c:5f:86:5e:85:d8:ac:18:e5:74:9e:8e:97:
         6a:37:9b:83:42:0f:a0:21:4e:67:83:9c:4d:c8:1b:de:2e:90:
         c2:37:37:a0:df:97:fa:6d:95:8c:bf:3a:5a:d8:30:2b:a0:c9:
         f4:25:20:32:5a:c0:a3:48:96:d7:44:37:97:3c:94:52:86:9b:
         7e:8a:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:08 2026 by rpki-client