Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
File:                     ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json)
Hash identifier:          6rTxwykVf1+/0C9f/RuivmvKSNmKMRwvNkDxq00s/1w=
Subject key identifier:   EB:55:9F:39:AA:A6:41:2B:C3:09:15:DD:2F:77:F1:1E:20:DE:29:E6
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Certificate issuer:       /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial:       019D28843D2A000E793C7CD6337557656CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
Manifest number:          03CF
Signing time:             Thu 26 Mar 2026 05:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:48 +0000
Files and hashes:         1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: QG7Fo/t4TEhcfJYbeARqze0nq1JUg9KkaFrQW5rWMG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:3d:2a:00:0e:79:3c:7c:d6:33:75:57:65:6c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
        Validity
            Not Before: Mar 26 05:00:48 2026 GMT
            Not After : Mar 27 05:00:48 2026 GMT
        Subject: CN=eb559f39aaa6412bc30915dd2f77f11e20de29e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:32:62:10:d3:e6:b9:e0:11:c0:c9:91:4b:
                    5c:db:0a:e5:c7:ea:90:83:0f:c5:1d:c1:0f:e9:b4:
                    5e:8a:97:96:aa:72:61:8c:13:77:45:ca:89:6d:fe:
                    50:1a:b4:34:64:33:df:4d:50:b8:49:90:57:3a:86:
                    02:4d:31:79:54:8e:6a:f6:7f:f7:2f:87:96:e0:f5:
                    19:2a:7f:bc:77:6c:69:19:2d:e6:3a:8a:8a:73:4a:
                    6d:9d:df:dc:39:6f:d4:3b:72:63:68:aa:93:0e:6f:
                    f9:64:4c:ad:2c:a7:18:85:e1:47:0f:5a:d3:9a:5f:
                    67:d4:05:3b:a8:f1:9c:04:47:11:0b:8d:69:a3:17:
                    8e:51:5f:bd:56:b8:e8:0b:f7:8c:fa:79:6c:af:12:
                    f2:9b:31:c4:ba:34:12:33:37:ed:c1:49:3e:bb:76:
                    6a:b8:3d:f0:cc:8a:51:6e:30:6c:e1:2b:51:2c:52:
                    ed:46:38:24:84:ad:ec:2e:40:11:12:f1:77:78:24:
                    35:98:dd:ee:8f:6b:83:ad:e6:d8:61:76:90:a1:4b:
                    30:5e:56:1b:06:95:4b:ee:50:38:af:d0:ae:49:98:
                    50:72:76:13:79:f4:7e:3a:58:3a:19:96:87:a2:48:
                    4a:ba:38:75:fd:15:a1:fc:28:38:06:6d:a2:9c:73:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:9F:39:AA:A6:41:2B:C3:09:15:DD:2F:77:F1:1E:20:DE:29:E6
            X509v3 Authority Key Identifier:
                keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:d0:70:61:2b:89:32:4d:ba:95:43:52:97:66:83:c4:e3:
         e9:28:fd:8c:16:a9:d2:09:94:c4:4f:67:97:b3:33:5d:06:52:
         9a:dd:34:b6:78:2b:12:09:67:86:64:77:bf:f3:38:94:dd:05:
         fe:c0:c6:c7:ce:b8:b5:fc:a3:97:e5:b2:20:23:98:cc:aa:b7:
         ad:b5:80:11:6e:71:37:ad:16:f6:4f:26:5c:92:68:7a:7c:6e:
         8f:13:0b:be:00:53:69:46:72:d9:d9:73:e0:b8:be:ca:5d:17:
         e0:2b:67:c7:c2:ae:43:2a:69:1b:72:97:2c:2c:68:b7:ad:37:
         62:ea:d0:93:f7:b6:a2:d7:81:84:89:10:bc:05:86:30:2e:4e:
         42:da:01:50:a4:d5:69:0b:9c:50:c4:7f:5d:75:fc:8b:e5:12:
         c3:79:16:3f:7e:6b:e3:a2:4d:92:39:09:5a:21:8f:6f:f2:2a:
         34:b6:13:4b:28:7b:58:bb:49:f8:0f:4e:be:62:f0:03:d8:4d:
         bd:ba:cf:b2:73:c7:57:89:cc:1f:44:67:d8:e7:ea:45:4b:35:
         4d:0d:18:99:9c:fe:3c:fb:a0:20:03:fd:cf:2b:c2:db:9b:1b:
         e7:86:e8:68:fc:44:75:d1:30:2a:b6:5f:d3:b1:24:cc:e6:ce:
         d2:f1:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:27 2026 by rpki-client