Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File:                     0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier:          DS/LTFki1nkvoez9oEDE7QrF0sJMCcmkWvCy80JfMnM=
Subject key identifier:   C5:8A:7A:5C:90:EE:31:E8:1C:50:54:F0:CA:37:D7:56:30:E8:E2:62
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer:       /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial:       019E1CEB3AADACB35C2B757A36508C958CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number:          04AC
Signing time:             Tue 12 May 2026 16:00:38 +0000
Manifest this update:     Tue 12 May 2026 16:00:38 +0000
Manifest next update:     Wed 13 May 2026 16:00:38 +0000
Files and hashes:         1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: /3MuV5dYqvpwUT0pdA+bssuYHG9TzkRmr3eak0bpzro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:3a:ad:ac:b3:5c:2b:75:7a:36:50:8c:95:8c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
        Validity
            Not Before: May 12 16:00:38 2026 GMT
            Not After : May 13 16:00:38 2026 GMT
        Subject: CN=c58a7a5c90ee31e81c5054f0ca37d75630e8e262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:ab:ce:6d:47:b5:20:04:34:30:e2:ea:c5:
                    b5:0f:32:8d:1b:63:2f:f1:fa:b7:b0:fd:f8:6a:ad:
                    48:af:58:39:38:30:bf:8e:73:a8:67:51:89:30:aa:
                    53:a0:19:a1:4a:2a:14:5d:de:1d:f4:e0:8d:a8:39:
                    77:61:04:03:59:05:80:52:4b:ce:04:a2:2a:34:a7:
                    01:6b:4c:c3:33:5f:75:4f:fa:52:7e:8f:8f:61:4e:
                    22:6a:7a:ee:77:c0:fa:19:75:65:5c:73:3b:73:01:
                    10:db:10:92:34:ff:d6:0d:1e:4f:8a:89:c8:2a:58:
                    cd:ce:b7:a0:8c:83:3e:ee:f7:b3:5b:30:64:ae:81:
                    8b:7d:6a:9d:44:ad:51:1a:64:93:27:f2:5d:10:7b:
                    64:0f:a7:d5:62:03:8b:30:7a:d4:6c:a6:78:68:b0:
                    3e:22:61:b3:6f:35:1d:65:a3:5f:d9:21:cf:76:cd:
                    e1:23:bc:97:36:e4:99:63:8c:73:1f:a6:3d:8e:c3:
                    15:51:df:2c:34:cd:9b:70:0c:7f:32:d5:1d:8d:b4:
                    3b:88:c8:05:58:74:be:bb:ce:da:5a:0f:de:4a:57:
                    80:9e:2f:d5:b4:f2:14:9a:9c:a3:5a:28:e2:52:a2:
                    b1:40:43:5d:93:28:61:5b:f6:18:17:dd:af:cc:bf:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8A:7A:5C:90:EE:31:E8:1C:50:54:F0:CA:37:D7:56:30:E8:E2:62
            X509v3 Authority Key Identifier:
                keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:98:19:ea:9c:4b:d9:d6:6b:a0:26:5f:a8:05:cf:bf:d9:81:
         0d:9d:25:88:94:58:01:c9:6c:5c:49:0e:10:7b:3a:2d:68:fe:
         8e:77:d0:7a:c8:69:ae:68:1f:cd:47:6f:2b:6c:ba:cf:91:f4:
         41:b2:7d:5b:1c:2a:7e:d8:c8:d0:57:9d:46:9c:6e:2a:0b:02:
         27:f3:b4:ec:bc:e4:44:0f:49:65:59:1b:c3:3e:d2:a7:21:1a:
         3e:54:42:8d:23:68:f6:fb:8b:77:b3:93:3e:66:53:bc:2a:b5:
         ee:fd:33:9c:6f:10:e6:03:8b:b0:70:f9:cf:2e:31:92:86:07:
         c2:39:ff:ce:e4:d8:6f:95:c7:c7:f2:4c:06:d6:77:28:8d:23:
         d6:2b:a5:64:ba:d6:82:16:30:9f:4c:86:3b:63:d6:8c:c4:92:
         79:2c:c2:e8:34:8d:db:40:91:0d:6e:b7:2c:d9:5d:8a:0b:0f:
         81:de:f8:21:fb:df:40:fb:54:2b:42:71:68:8f:b9:35:13:7e:
         59:fd:47:ce:6c:1d:3b:be:54:0c:20:2f:13:a5:9a:29:65:8c:
         80:91:4e:fb:45:c4:8d:30:fb:7f:c8:c9:52:b4:0f:33:a2:8e:
         da:f5:3d:97:a7:3f:5d:00:f5:06:32:87:31:64:d2:2c:fc:04:
         7a:d9:b2:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6zqtrLNcK3V6NlCMlYz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWI4NmY4OTM3ODZiYzQ3N2QzZDAwYmEwZmYxZTIzOWVl
NjIyNmQwHhcNMjYwNTEyMTYwMDM4WhcNMjYwNTEzMTYwMDM4WjAzMTEwLwYDVQQD
EyhjNThhN2E1YzkwZWUzMWU4MWM1MDU0ZjBjYTM3ZDc1NjMwZThlMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc+rzm1HtSAENDDi6sW1DzKNG2Mv
8fq3sP34aq1Ir1g5ODC/jnOoZ1GJMKpToBmhSioUXd4d9OCNqDl3YQQDWQWAUkvO
BKIqNKcBa0zDM191T/pSfo+PYU4ianrud8D6GXVlXHM7cwEQ2xCSNP/WDR5PionI
KljNzregjIM+7vezWzBkroGLfWqdRK1RGmSTJ/JdEHtkD6fVYgOLMHrUbKZ4aLA+
ImGzbzUdZaNf2SHPds3hI7yXNuSZY4xzH6Y9jsMVUd8sNM2bcAx/MtUdjbQ7iMgF
WHS+u87aWg/eSleAni/VtPIUmpyjWijiUqKxQENdkyhhW/YYF92vzL/x+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWKelyQ7jHoHFBU8Mo311Yw6OJiMB8GA1UdIwQY
MBaAFNHrhviTeGvEd9PQC6D/HiOe5iJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQt
ZGMxNGU5YzFiNzQ1LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQtZGMxNGU5YzFiNzQ1
LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5gZ6pxL
2dZroCZfqAXPv9mBDZ0liJRYAclsXEkOEHs6LWj+jnfQeshprmgfzUdvK2y6z5H0
QbJ9WxwqftjI0FedRpxuKgsCJ/O07LzkRA9JZVkbwz7SpyEaPlRCjSNo9vuLd7OT
PmZTvCq17v0znG8Q5gOLsHD5zy4xkoYHwjn/zuTYb5XHx/JMBtZ3KI0j1iulZLrW
ghYwn0yGO2PWjMSSeSzC6DSN20CRDW63LNldigsPgd74IfvfQPtUK0JxaI+5NRN+
Wf1HzmwdO75UDCAvE6WaKWWMgJFO+0XEjTD7f8jJUrQPM6KO2vU9l6c/XQD1BjKH
MWTSLPwEetmy/g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:54:12 2026 by rpki-client