Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
File:                     eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft (raw, json)
Hash identifier:          WYWBnYV0Q3kczfkioIn0CwvLCk0PupeiCNl7tJ+4nQ0=
Subject key identifier:   EC:23:08:B6:1B:BF:7F:66:AC:BF:FC:8E:C1:31:D9:C0:F0:87:A7:04
Authority key identifier: 78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C
Certificate issuer:       /CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
Certificate serial:       019D2AE09A3A7D1C7E77CB86CF8EFE923E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 16:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:55 +0000
Files and hashes:         1: eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl (hash: lmnr8Yp7fv9cBpM7gBwLR/N0Rey3vyOYovn2qiWhGoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:9a:3a:7d:1c:7e:77:cb:86:cf:8e:fe:92:3e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7859669c2b7c0b25c07e7932b8a1f98b0bbedc4c
        Validity
            Not Before: Mar 26 16:00:55 2026 GMT
            Not After : Mar 27 16:00:55 2026 GMT
        Subject: CN=ec2308b61bbf7f66acbffc8ec131d9c0f087a704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:91:35:25:cc:05:78:50:97:29:45:2a:90:
                    84:8e:30:e4:10:cb:10:9a:03:cd:29:ea:db:e3:28:
                    14:66:a1:02:79:f1:88:d4:e6:42:11:f4:ad:3a:b5:
                    93:cb:2e:02:18:66:98:5d:20:f2:3d:33:47:51:8b:
                    ee:05:e4:13:1e:a4:47:34:7b:1b:fb:07:4a:b3:3f:
                    e9:38:f0:19:cb:bd:98:8a:63:da:33:d6:29:6c:14:
                    d7:f9:9c:f3:a9:8d:9e:2c:c3:2c:f5:2c:e3:50:28:
                    b1:e4:0c:1a:2e:7b:f7:ec:3b:47:a1:3c:b3:27:25:
                    e3:62:77:b1:bf:22:67:8c:43:2a:42:98:3c:49:0a:
                    87:72:67:59:ee:33:3f:96:3e:46:72:92:71:90:91:
                    94:2f:e4:af:98:c6:60:83:22:ad:a1:6c:a7:36:53:
                    de:24:00:25:b7:37:4e:b3:1f:ab:78:4d:06:67:0b:
                    ab:9c:56:c8:4d:8e:d1:d1:6b:02:23:30:f9:a1:52:
                    33:5f:a4:21:e9:ae:31:a6:56:e8:21:45:bf:1b:5f:
                    62:4c:ef:38:2a:69:d0:7b:97:79:ec:31:7b:15:e3:
                    83:36:1a:82:95:6a:05:00:92:54:f1:8d:ce:3c:2d:
                    19:aa:df:e5:b5:8f:e6:15:7c:c0:a4:bc:eb:a9:f3:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:23:08:B6:1B:BF:7F:66:AC:BF:FC:8E:C1:31:D9:C0:F0:87:A7:04
            X509v3 Authority Key Identifier:
                keyid:78:59:66:9C:2B:7C:0B:25:C0:7E:79:32:B8:A1:F9:8B:0B:BE:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4b5495-1072-4ef3-8669-fc3559696246/1/eFlmnCt8CyXAfnkyuKH5iwu-3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:52:4f:c2:59:eb:d7:ef:c0:66:70:bf:0e:eb:72:f5:87:
         5b:97:f0:bd:19:f8:b9:4c:4d:80:17:9e:3c:e2:2b:51:98:dd:
         ed:87:ed:e6:5a:24:e9:26:fa:5d:42:10:7b:3f:7d:fa:d5:55:
         c2:fd:ef:80:cf:67:ae:4e:43:ec:e5:b2:87:c7:97:76:db:1a:
         01:6d:7b:05:c9:63:6c:c0:95:d6:f9:0f:21:19:8f:3d:ae:56:
         63:0c:71:ad:78:f4:e0:4c:05:82:dc:d1:87:f1:6a:43:84:52:
         97:bd:77:49:6a:8a:23:29:b0:17:af:ae:fd:64:9b:b1:ca:31:
         9b:ec:45:ae:66:17:49:10:b8:1a:0c:4c:bf:1e:01:f2:62:f5:
         69:25:d4:1f:79:19:d0:2b:82:1e:89:02:b6:b1:cf:14:94:70:
         4b:17:4b:bb:83:2d:22:7b:f0:f3:06:c2:21:87:4d:0f:0d:99:
         4e:93:33:38:f9:16:96:fa:59:88:c3:0e:b7:d1:33:e7:bb:64:
         22:19:f6:9d:e9:e8:b8:24:39:e2:c6:e8:59:3f:f5:7e:da:ac:
         11:0c:54:43:b1:9b:79:aa:17:88:7b:fb:1f:84:82:72:ad:35:
         1d:b6:88:f1:ce:59:84:32:ce:97:34:7d:ac:60:d4:28:83:6b:
         1b:59:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:16 2026 by rpki-client