Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          jGRz2aYFTPymFttNRrBG8s9edlvghW1f3V7GhWT9Qq0=
Subject key identifier:   51:B6:40:EE:A3:EA:43:AB:C8:3B:0C:C8:8A:22:A8:38:24:B7:8E:39
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       019D25F18D4635ACB5E9C0C4E61E3D0E753E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          0629
Signing time:             Wed 25 Mar 2026 17:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:20 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: 8Hdh2GRpUKHSu/aoHq1dw1Wz5ZoZzeK1J27kofAKkHQ=)
                          2: UMttTqdPGlYVEJ9xSG18eV0MP_Y.roa (hash: ElV3W7IWRaicNCEm+0BYxqdFsKSgxVaeMH7JmOjRFOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:8d:46:35:ac:b5:e9:c0:c4:e6:1e:3d:0e:75:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Mar 25 17:01:20 2026 GMT
            Not After : Mar 26 17:01:20 2026 GMT
        Subject: CN=51b640eea3ea43abc83b0cc88a22a83824b78e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:71:d0:8d:34:48:2c:5f:b1:5b:af:f8:98:
                    22:33:e6:6f:bc:57:7a:f1:b3:27:c9:d2:8a:d1:23:
                    0b:52:5d:ad:38:72:62:6c:0c:2c:37:13:ee:8b:2b:
                    5f:73:a5:5f:a8:39:15:01:49:f2:b5:80:c5:bc:45:
                    57:3e:ae:31:2e:32:56:68:99:0f:b3:0f:3d:2f:60:
                    2d:76:80:f1:24:15:bc:8a:af:cc:92:34:e2:45:80:
                    9f:e2:12:4c:4f:1b:6b:51:90:c9:eb:09:42:5c:2c:
                    4a:00:ae:b1:c4:e5:10:df:9a:e1:cd:eb:12:ac:22:
                    63:db:4f:c6:c6:83:73:54:79:7e:e3:9f:51:cf:9c:
                    04:33:7b:4e:a5:f4:a9:e7:35:d2:b0:34:b5:2f:54:
                    a1:fc:6e:9d:bf:34:10:bd:4e:f3:9d:d0:00:e6:5f:
                    e7:f6:24:8f:ba:49:20:6f:2d:eb:55:ad:c2:04:48:
                    d7:62:5e:94:9d:b5:6e:eb:02:42:96:a0:ea:ac:cc:
                    5d:e5:b2:18:ad:59:cf:56:fe:b6:ea:0a:6e:8b:50:
                    62:44:a7:f6:e1:31:f2:13:fa:5c:3f:bc:d7:19:4c:
                    d5:8d:22:57:3c:07:99:9b:44:db:aa:4a:2d:e6:0d:
                    c6:f4:18:fd:51:c6:b8:fd:37:10:be:97:3d:7b:35:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:40:EE:A3:EA:43:AB:C8:3B:0C:C8:8A:22:A8:38:24:B7:8E:39
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:27:6d:08:2c:47:61:b8:69:60:ca:65:a0:f4:73:aa:8c:13:
         58:e6:4d:83:cf:a5:84:06:c3:e6:c7:22:ac:26:02:c2:c0:47:
         0a:3b:85:a2:8f:b0:85:4a:30:d5:04:9c:f9:ab:dc:81:b3:4e:
         62:1c:cc:5f:88:7e:be:bc:71:71:4c:ae:79:10:d9:88:97:ef:
         d2:28:39:46:86:20:f0:95:18:7d:b0:76:ee:ac:d0:a9:b6:c1:
         75:ce:19:38:7b:9f:d4:d2:ab:93:1f:09:2e:9a:23:0c:9b:6d:
         e7:d6:8f:a2:cf:74:a3:57:04:02:37:46:49:ec:43:b3:e0:02:
         4f:a8:cd:85:7b:f0:67:5e:84:78:c7:6d:d6:f7:27:90:ab:79:
         36:a2:48:ce:f4:c5:14:8c:eb:ae:ba:44:4a:dd:be:37:9e:4b:
         fd:76:9e:2d:93:63:a5:7b:aa:fd:89:79:98:3c:54:5c:06:df:
         73:57:b8:11:fd:ba:74:ab:9b:7a:2d:51:7d:71:51:71:e4:be:
         f2:2d:f2:86:11:a8:30:ca:80:4f:e5:19:48:58:cd:97:fe:db:
         67:50:ab:7e:f5:5d:3a:af:74:e2:d6:f3:aa:34:ae:3e:19:b0:
         26:c2:a4:c1:4e:59:80:06:ff:c9:20:1f:58:db:fe:51:79:d9:
         33:09:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:36 2026 by rpki-client