Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          KptlU4r6jWnrKb27WlKQ3PJdZN1sTupeSaE20N1WJH8=
Subject key identifier:   A7:13:97:55:27:1E:D3:9E:60:A2:29:68:18:74:20:AD:27:4A:92:76
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       019D26CD30365BD7F69E2764F636687C80B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          0CBB
Signing time:             Wed 25 Mar 2026 21:01:14 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:14 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:14 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: DjprK3Wu3aVOuGkpU38mcEKZQ394rDGFY10NIP7Asks=)
                          2: TgSGiVpEk6VcVoLx1zlEJGOCAMI.roa (hash: QQzCSEznQp8ZFwcwq9xyZGdqpLg4dA0oXWhf8hriZug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:30:36:5b:d7:f6:9e:27:64:f6:36:68:7c:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Mar 25 21:01:14 2026 GMT
            Not After : Mar 26 21:01:14 2026 GMT
        Subject: CN=a7139755271ed39e60a22968187420ad274a9276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:58:1c:11:23:3c:19:5c:ea:57:30:77:5e:
                    18:c4:b3:cb:b5:64:55:c6:0c:fb:3c:9b:2b:8f:9f:
                    22:9c:de:f1:c9:3c:c0:9a:3a:02:33:4b:5c:c3:81:
                    ce:cc:17:28:54:1c:ea:ed:9f:05:26:d6:93:78:cf:
                    00:9b:c3:17:72:93:10:67:0c:ed:00:76:7f:b8:cf:
                    ae:ee:e1:25:f1:47:5c:a6:9f:99:69:53:18:aa:2b:
                    a0:87:1c:5c:af:0f:fe:02:67:10:4c:9b:74:3b:72:
                    6b:bf:8a:30:0f:00:dc:65:81:5e:96:e5:42:45:ea:
                    4c:d6:f2:7d:f8:b3:52:42:bf:a4:72:09:0e:90:8e:
                    02:21:e4:70:20:d7:c0:75:53:f4:6e:d1:d9:73:8e:
                    39:d9:36:ea:3c:4e:61:23:1c:45:a1:7f:eb:65:bb:
                    20:32:64:5a:56:40:30:58:33:e0:47:c6:8d:6f:15:
                    31:07:d3:84:45:53:8b:67:53:d6:d7:27:46:82:66:
                    2d:ab:d5:5d:a5:6f:be:54:af:54:bf:eb:92:2e:75:
                    b2:dd:75:14:32:a7:17:19:6d:0f:80:b7:c0:71:8b:
                    e2:3c:68:1f:e0:9e:82:a6:6e:77:5e:c3:9a:ca:65:
                    8d:9f:dc:8d:ee:77:e7:ac:9c:d1:72:d9:aa:b0:ff:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:13:97:55:27:1E:D3:9E:60:A2:29:68:18:74:20:AD:27:4A:92:76
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9d:78:5c:d2:89:90:c0:8a:bd:c6:30:6a:6d:ad:c6:7d:35:
         4b:bd:99:0c:83:21:a4:98:37:64:6a:b4:60:50:69:d7:c2:6c:
         1b:40:19:fd:40:96:71:ab:fc:ef:83:c8:be:d4:dc:4c:c5:32:
         16:44:4a:29:40:bc:e3:de:de:3c:4f:b8:29:9e:e4:a1:a9:ea:
         2b:f6:da:9e:4c:40:ce:f5:cd:9a:48:19:03:9f:10:48:34:db:
         d2:b4:0f:19:3f:68:62:b9:49:be:53:a9:9e:96:3b:91:0f:ee:
         f3:4b:ff:58:52:0e:c4:77:6e:f6:07:10:9a:bd:dd:67:8e:98:
         e4:f3:14:ce:72:dc:8e:20:1a:73:f1:16:df:e3:76:01:a3:55:
         85:11:34:13:ff:b5:ca:35:59:3b:3b:76:53:a8:85:5a:44:a9:
         72:af:0d:79:01:e9:67:ba:bd:56:3e:85:ee:dc:be:33:5b:0d:
         f2:89:97:c6:53:fc:ba:31:ed:ce:63:c3:94:c0:30:ef:d4:29:
         e5:af:23:ec:f6:38:96:7d:eb:1e:4f:95:c5:fd:c6:33:6c:5f:
         26:9a:13:d9:8f:2b:55:b5:de:54:48:e0:65:21:c9:df:4a:4d:
         79:84:3e:43:3c:06:6c:55:eb:d2:2f:5e:a8:9f:85:a8:43:e2:
         6d:d4:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:16 2026 by rpki-client