Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft
File:                     ebBozkt45F5gxswUavYHsI-EPfw.mft (raw, json)
Hash identifier:          sHqhOKqjo7NT150snpvSX6QeJ9KYM4cGGY0WE5wUGRo=
Subject key identifier:   00:9F:F7:24:48:9D:EC:1F:38:A2:BC:A3:D2:CD:BD:CA:27:CE:6F:49
Authority key identifier: 79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC
Certificate issuer:       /CN=79b068ce4b78e45e60c6cc146af607b08f843dfc
Certificate serial:       019D2816814A5E266C9E0CF83D5CF892CC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft
Manifest number:          0166
Signing time:             Thu 26 Mar 2026 03:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:56 +0000
Files and hashes:         1: ebBozkt45F5gxswUavYHsI-EPfw.crl (hash: Ze9wpyqC5gkFLA6GhJ5ITC9gd5JuFomdFRxRt5ZPrIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:81:4a:5e:26:6c:9e:0c:f8:3d:5c:f8:92:cc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b068ce4b78e45e60c6cc146af607b08f843dfc
        Validity
            Not Before: Mar 26 03:00:56 2026 GMT
            Not After : Mar 27 03:00:56 2026 GMT
        Subject: CN=009ff724489dec1f38a2bca3d2cdbdca27ce6f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:21:67:4a:b0:f2:81:93:58:73:d3:a1:66:
                    d2:25:ac:79:ca:9b:88:f3:d8:4b:04:5a:ae:ef:de:
                    6b:25:f9:20:bc:ef:4a:95:a3:ad:db:a3:a4:34:a8:
                    05:1d:ab:01:85:01:4a:d4:01:70:95:7e:b1:95:91:
                    be:94:0f:fa:5f:dd:ff:56:c2:14:a7:96:c9:d8:3f:
                    fe:23:d6:6c:71:ed:69:7b:29:f7:22:4c:89:0b:5b:
                    27:ee:c7:ee:bb:15:40:3e:90:81:d4:7b:ec:a1:a9:
                    c0:ff:9c:cb:c7:49:1d:83:64:4b:3e:c5:03:7b:5d:
                    d0:df:10:39:14:23:b5:c3:1a:38:46:5f:51:ed:c8:
                    aa:6b:63:c0:db:87:67:e2:20:d1:58:66:40:10:14:
                    a4:7f:67:d0:9a:28:7b:10:98:11:d9:f2:1d:ba:f8:
                    0f:71:28:15:18:53:06:f3:8d:c3:a7:83:d6:94:19:
                    58:54:f3:90:4b:a6:1a:06:12:38:ca:f5:85:51:69:
                    cc:fa:b9:aa:ed:59:2d:46:3c:b8:6e:10:59:e6:16:
                    da:08:72:5d:34:2f:b5:7e:99:a2:12:b1:19:bb:c3:
                    0b:3d:f2:ff:5f:3a:e9:7a:1a:70:a1:9e:0e:59:6a:
                    10:65:48:cf:ff:a5:a4:66:63:70:59:3b:19:00:4d:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:F7:24:48:9D:EC:1F:38:A2:BC:A3:D2:CD:BD:CA:27:CE:6F:49
            X509v3 Authority Key Identifier:
                keyid:79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f7:1d:02:15:86:31:f9:99:97:35:6c:7e:f9:e8:7b:32:68:
         fd:57:eb:1f:a8:38:4f:70:6f:ab:d2:67:17:5d:6f:4e:7e:ea:
         44:10:df:c0:e7:8d:af:b7:b1:2d:35:04:cd:1c:a4:b0:2d:32:
         7f:1c:97:80:1e:55:a7:5c:fe:c3:0c:2d:e0:ff:9e:d5:0f:78:
         89:ba:18:b1:20:02:7e:a4:3a:8a:e3:85:56:96:92:4e:55:8c:
         97:c7:24:e2:b8:af:e3:e9:82:e0:1e:d0:50:a3:c4:13:23:5e:
         85:39:fb:ad:82:c6:5d:f8:76:de:9f:2b:1f:e7:84:45:03:a9:
         a4:43:f1:e4:ac:f4:28:3d:15:c0:0e:e8:d0:b5:ef:38:f6:56:
         a7:b8:d7:15:bd:fd:9d:13:08:13:9f:11:b9:30:2d:f2:0e:19:
         37:99:ed:be:be:71:04:93:b8:4a:ea:c8:5c:9a:ea:31:c8:ad:
         95:81:4e:29:b0:8c:50:32:9e:44:95:24:07:35:3c:79:01:cb:
         f4:b9:92:e9:c4:3d:92:a1:e5:b7:66:20:02:f6:9b:70:5b:63:
         f4:08:58:b8:01:cd:51:95:23:c5:80:8d:c2:33:d8:66:7a:df:
         16:31:4b:cb:fe:ef:81:f0:2a:80:1e:1c:49:cb:23:f4:32:6a:
         e0:a0:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:32 2026 by rpki-client