Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          dMU0cB/UhZM3PaNV0ksHOaJkDZneDHXtJZYWu6Wfk+o=
Subject key identifier:   17:71:3C:46:9A:96:CA:11:F2:3E:DA:5B:65:54:AF:A6:AF:95:E5:1A
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       019D25F11FE0B8DB195CD27A808553994911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:52 +0000
Files and hashes:         1: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: TPfVdmnBN4Dvc5iRuhdAXlHGPmdrRgUiWRMhKweOwBU=)
                          2: m3YFLRolOJzOKxQ9tZfTdlSKifw.roa (hash: i5pG82cl0NYlQscJwoNQNnDgodQ3zb/qtbRnFjtDuso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:1f:e0:b8:db:19:5c:d2:7a:80:85:53:99:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Mar 25 17:00:52 2026 GMT
            Not After : Mar 26 17:00:52 2026 GMT
        Subject: CN=17713c469a96ca11f23eda5b6554afa6af95e51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:29:bd:19:6e:4c:eb:5a:87:6e:97:fc:b1:
                    10:a7:06:bc:93:d7:f4:76:41:95:3b:97:9f:ac:01:
                    a5:ee:86:2e:af:e7:d6:88:fb:17:69:22:e2:0f:2f:
                    4e:07:4b:16:58:79:55:be:b3:f8:87:40:b0:55:8a:
                    f7:95:85:ef:07:4b:68:2c:bb:4a:b2:ed:23:de:f2:
                    70:a3:2c:3e:3d:f4:fc:30:d3:fa:d3:92:db:84:e9:
                    18:60:41:2a:40:44:e0:6e:87:1c:be:c4:e3:f9:cf:
                    6e:51:21:dd:ef:7b:6c:60:2f:4b:f1:d1:33:1d:83:
                    c7:b1:0b:d7:e5:65:4c:68:1a:c0:3c:53:19:68:03:
                    8a:b5:36:76:72:18:79:fe:c3:66:4d:fa:a6:13:7b:
                    ed:87:98:c9:10:11:4e:cf:99:ed:ee:3d:da:8a:f5:
                    3c:8f:53:48:03:75:9b:21:c4:9f:91:b0:6a:a0:8f:
                    cd:96:ad:f7:1f:b6:2d:c5:74:93:42:bb:d9:83:7c:
                    61:32:7c:88:17:4b:3b:3c:a4:9a:fa:58:88:c4:23:
                    2d:13:f0:a6:da:47:5f:cd:d0:0b:e2:cf:c3:cb:51:
                    2a:87:e0:b0:1a:0d:ef:83:d9:f0:cd:53:e2:b1:97:
                    df:15:ad:8f:e9:df:61:f2:50:b2:45:5a:4c:47:e4:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:71:3C:46:9A:96:CA:11:F2:3E:DA:5B:65:54:AF:A6:AF:95:E5:1A
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:d8:2f:f5:aa:44:27:7f:44:62:35:49:f6:8a:65:b7:60:
         d4:a4:18:2a:44:99:d6:07:39:b1:37:05:5e:b5:8c:2d:f5:b2:
         f1:47:eb:1e:6c:5f:90:9f:73:20:75:83:10:05:ee:e9:b9:77:
         d5:52:c4:db:99:dc:a2:81:54:92:9b:19:99:a4:51:42:f7:dd:
         e7:c2:f4:10:a6:ff:13:fa:98:d1:5f:ab:f3:49:05:d2:5e:e1:
         d2:90:b5:ce:97:ff:33:b1:41:b1:e2:e2:80:2e:6f:a0:4f:7d:
         51:14:d5:a5:c5:cb:5b:f3:e4:1b:52:bd:28:70:83:76:34:2d:
         5d:56:a9:45:25:5d:63:89:e0:ce:b5:cc:9f:3a:4a:c8:4e:fc:
         7c:f1:4d:dd:eb:48:a1:59:7d:ba:eb:7d:1c:d6:42:f0:f4:52:
         13:d7:70:20:b4:f5:66:4d:a8:b6:46:bf:21:e3:91:7d:8d:5f:
         a2:ea:57:e7:5d:fd:c8:cd:66:d6:3d:70:89:76:3b:6f:65:5b:
         7c:92:c2:30:6b:ab:d8:b6:90:3a:31:79:2a:23:ff:21:2e:7a:
         7b:26:4c:2c:12:ed:87:fb:e4:7b:e1:e8:33:93:cb:1d:0b:08:
         f3:07:71:da:5b:57:5a:16:ac:31:1c:21:69:a9:c1:f4:b2:21:
         a8:8f:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:12 2026 by rpki-client