Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          b9jPPjC7LC1vtkjjIXQfN7PEDXkOajYFt/CKEj9aB7g=
Subject key identifier:   C1:3B:16:D2:ED:34:0F:7F:5D:33:BC:8B:93:F0:70:2A:4C:28:63:33
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       019D27046DC14A36C4AC2C76DD52F7F83D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          0757
Signing time:             Wed 25 Mar 2026 22:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:34 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:34 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: RGcUIJIhqCviUrcAZRvRW5KWGVvIdBS9FJGM0mVZ8Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:6d:c1:4a:36:c4:ac:2c:76:dd:52:f7:f8:3d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Mar 25 22:01:34 2026 GMT
            Not After : Mar 26 22:01:34 2026 GMT
        Subject: CN=c13b16d2ed340f7f5d33bc8b93f0702a4c286333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:1d:cc:61:d2:7d:ad:8d:10:4e:14:71:eb:
                    18:bd:92:11:f4:35:dd:c6:b5:af:33:e7:f8:a9:f8:
                    ee:29:8c:79:37:78:18:38:8a:4a:29:b0:be:92:96:
                    7d:4d:b0:f2:80:0e:25:3e:7c:49:72:db:3b:38:f0:
                    64:5f:15:b4:f1:98:7e:d8:90:26:02:e9:5f:d2:9e:
                    ba:7c:5a:5e:9f:8e:ce:ca:69:88:61:94:40:2c:f8:
                    1c:27:39:ca:52:e1:76:f7:42:6d:a8:4e:76:a2:db:
                    de:40:48:44:a4:81:7b:9e:4c:0a:01:cb:88:60:8b:
                    61:7b:74:93:3b:f5:52:fc:ee:4a:a5:12:34:e9:4d:
                    4b:f3:bf:8f:5b:1e:72:eb:09:7b:e2:6c:2d:29:0f:
                    57:02:0b:7f:58:91:b0:7f:1b:56:65:54:b9:b5:d1:
                    77:6b:42:4d:c2:66:4f:bd:2a:28:a2:1e:0b:d4:a2:
                    ef:b4:87:56:70:47:89:fb:d1:0f:49:b5:da:a4:79:
                    34:4d:cf:73:d8:03:c9:f9:bc:27:00:6e:2c:dd:b2:
                    99:d8:2c:bd:78:8f:0e:c4:e5:80:09:d9:e6:f8:6e:
                    e7:ce:bc:6e:3b:57:c7:4e:57:da:a6:83:47:ee:aa:
                    4b:4b:7b:81:fb:af:36:87:d0:e1:5e:4c:b5:7f:02:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:16:D2:ED:34:0F:7F:5D:33:BC:8B:93:F0:70:2A:4C:28:63:33
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:84:93:41:d7:60:ea:de:b8:23:b3:23:47:00:3f:cd:b0:84:
         4f:a0:1a:71:5b:86:dd:65:29:97:f2:34:60:f8:3d:be:db:ba:
         45:b1:fc:8c:f2:d8:29:e5:e7:b9:41:23:2c:4c:c5:99:38:36:
         5b:f8:88:c2:25:5e:f2:ec:b4:01:bb:e6:8d:5e:05:97:5e:b2:
         ff:da:09:e4:31:80:c6:c8:53:b1:75:a4:b5:eb:d3:9a:32:4d:
         5a:cf:99:58:28:61:85:1c:24:d9:85:b2:43:aa:9b:b0:2e:ff:
         fe:fa:6b:7f:f0:ea:14:4a:89:ef:99:d6:03:5a:48:40:48:91:
         80:d5:01:e8:4e:08:72:7e:7a:05:8a:ad:3c:e1:03:cb:6a:75:
         cc:f4:9f:65:8c:3d:eb:a7:e8:23:05:81:1e:4b:83:d7:cd:1f:
         d8:2b:01:41:ec:0f:65:a3:61:bf:49:ec:cb:d1:48:7f:9e:5e:
         21:c9:7a:be:0a:b6:d8:9d:e7:5a:f2:ad:2d:e9:85:d0:7c:33:
         21:2e:47:02:ae:22:1e:91:70:3a:c5:ab:ae:4c:88:2d:31:d9:
         22:ce:7f:8d:7d:40:36:41:6e:cb:ab:8a:45:87:d3:e8:a1:0d:
         71:f0:7a:9d:de:89:60:b7:c4:33:8f:8c:18:02:b5:05:0f:c1:
         41:d1:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:32 2026 by rpki-client