Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          UcdwVkYOZGx9fwICFMTzc04dg/PpfntUe7adMutGZ3w=
Subject key identifier:   90:BC:43:87:E6:6D:55:A3:CF:49:43:99:EE:C7:C9:8C:A1:77:03:86
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019E1FB5D4C7FBFC4DAFD5EDD38EDFC95E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          1273
Signing time:             Wed 13 May 2026 05:01:10 +0000
Manifest this update:     Wed 13 May 2026 05:01:10 +0000
Manifest next update:     Thu 14 May 2026 05:01:10 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: g+lwxuAoQyKJtl1TDILVBhcUulmQC2oknBA5JmnOYFo=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:d4:c7:fb:fc:4d:af:d5:ed:d3:8e:df:c9:5e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: May 13 05:01:10 2026 GMT
            Not After : May 14 05:01:10 2026 GMT
        Subject: CN=90bc4387e66d55a3cf494399eec7c98ca1770386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:15:bd:dd:b1:08:f7:09:a8:eb:f1:2f:43:
                    12:72:d2:d5:e3:cb:9c:0f:fd:60:b3:c5:5b:10:8f:
                    dd:66:d0:68:50:7b:c0:d6:2e:86:37:38:63:e9:26:
                    8f:a8:93:dd:f3:a8:3a:b4:7e:72:4e:d5:17:14:c9:
                    d0:2a:fb:cb:33:ad:b1:da:f3:13:a3:75:68:2e:90:
                    fc:97:1c:85:fb:cc:28:36:1f:68:30:90:44:38:4b:
                    c8:6d:d6:0e:24:ae:ec:14:1b:43:51:9a:1d:75:fb:
                    1c:30:57:f5:83:34:b0:28:5a:cc:97:35:74:fe:ef:
                    3c:92:30:34:19:50:e7:75:3f:2a:52:1d:fb:d8:99:
                    bf:8f:f0:7f:bf:f1:74:96:ee:aa:25:a5:d8:44:f4:
                    92:71:01:7a:48:e6:99:75:5a:48:a4:b7:ae:bd:9d:
                    a7:23:8c:8f:5e:f4:7b:31:8b:bd:7c:03:1a:36:a0:
                    f8:c3:25:26:8f:26:6c:74:8d:3b:19:36:60:9a:ec:
                    15:99:b3:f9:cc:b4:c7:a5:db:0f:38:a9:d6:46:b8:
                    0c:bb:ad:7f:08:e9:22:bc:9f:55:a6:eb:10:d4:a0:
                    88:c5:a9:a8:0e:17:e8:4c:84:21:86:eb:22:28:a3:
                    2b:6f:ee:93:24:de:7d:b5:26:bf:68:9f:f7:f4:bd:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:43:87:E6:6D:55:A3:CF:49:43:99:EE:C7:C9:8C:A1:77:03:86
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:34:8c:cc:0e:37:0d:b3:08:3a:63:c5:45:a3:be:ab:e4:ef:
         8b:39:b7:49:1f:92:93:fb:bb:49:2f:f3:3f:b8:2e:28:4c:eb:
         c2:76:44:5a:22:b2:13:7c:ca:75:14:f6:37:3c:5f:62:07:9b:
         25:16:09:b0:41:a5:05:f4:f7:bc:e4:ad:0c:90:cc:8f:69:aa:
         b3:71:9e:95:03:21:64:87:b3:01:d8:3d:ec:8d:80:7b:2d:63:
         b8:8f:6b:58:5d:b6:b2:ee:37:95:6e:35:11:76:68:0e:e5:85:
         b5:55:7d:00:b7:12:f0:18:56:4d:6a:c0:9e:bd:6c:38:e6:48:
         16:af:ef:5b:4e:a5:02:fe:47:7e:2e:86:91:7b:c3:56:1d:2e:
         cc:e1:3a:c5:f9:96:62:98:ba:01:86:d3:fa:80:27:37:6b:2f:
         30:fd:24:94:c3:c1:5b:cf:07:d2:1e:ad:46:83:77:34:3e:ea:
         b7:03:63:b0:9f:6b:3d:f7:61:79:0f:a8:6b:52:5d:a3:41:e1:
         df:46:a3:18:d0:ac:a6:dd:d7:df:9b:16:25:3a:64:11:04:a5:
         ac:8a:99:f4:eb:40:85:36:b8:55:ac:45:67:f6:98:57:92:9c:
         c1:8e:18:49:28:a5:e5:ac:e5:2a:90:b7:f4:47:70:7d:eb:8c:
         3b:7e:ad:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftdTH+/xNr9Xt047fyV5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj
M2RjMGIwHhcNMjYwNTEzMDUwMTEwWhcNMjYwNTE0MDUwMTEwWjAzMTEwLwYDVQQD
Eyg5MGJjNDM4N2U2NmQ1NWEzY2Y0OTQzOTllZWM3Yzk4Y2ExNzcwMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR0Vvd2xCPcJqOvxL0MSctLV48uc
D/1gs8VbEI/dZtBoUHvA1i6GNzhj6SaPqJPd86g6tH5yTtUXFMnQKvvLM62x2vMT
o3VoLpD8lxyF+8woNh9oMJBEOEvIbdYOJK7sFBtDUZoddfscMFf1gzSwKFrMlzV0
/u88kjA0GVDndT8qUh372Jm/j/B/v/F0lu6qJaXYRPSScQF6SOaZdVpIpLeuvZ2n
I4yPXvR7MYu9fAMaNqD4wyUmjyZsdI07GTZgmuwVmbP5zLTHpdsPOKnWRrgMu61/
COkivJ9VpusQ1KCIxamoDhfoTIQhhusiKKMrb+6TJN59tSa/aJ/39L174QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC8Q4fmbVWjz0lDme7HyYyhdwOGMB8GA1UdIwQY
MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt
M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1
LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDSMzA43
DbMIOmPFRaO+q+Tvizm3SR+Sk/u7SS/zP7guKEzrwnZEWiKyE3zKdRT2NzxfYgeb
JRYJsEGlBfT3vOStDJDMj2mqs3GelQMhZIezAdg97I2Aey1juI9rWF22su43lW41
EXZoDuWFtVV9ALcS8BhWTWrAnr1sOOZIFq/vW06lAv5Hfi6GkXvDVh0uzOE6xfmW
Ypi6AYbT+oAnN2svMP0klMPBW88H0h6tRoN3ND7qtwNjsJ9rPfdheQ+oa1Jdo0Hh
30ajGNCspt3X35sWJTpkEQSlrIqZ9OtAhTa4VaxFZ/aYV5KcwY4YSSil5azlKpC3
9EdwfeuMO36tWA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:21:21 2026 by rpki-client