Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.mft
File:                     _eQvtVj8zMt4u48RY6PCX2o6X1U.mft (raw, json)
Hash identifier:          SOusSO79zAuBpY9JaJQlk/nMJyGYo3c5Sl+AVH5lTKQ=
Subject key identifier:   F6:77:49:8B:F7:53:43:74:3F:64:D8:07:2F:EC:E9:70:3A:48:26:00
Authority key identifier: FD:E4:2F:B5:58:FC:CC:CB:78:BB:8F:11:63:A3:C2:5F:6A:3A:5F:55
Certificate issuer:       /CN=fde42fb558fccccb78bb8f1163a3c25f6a3a5f55
Certificate serial:       019D333E66D8E9DC35E9F58E847D38402CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eQvtVj8zMt4u48RY6PCX2o6X1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.mft
Manifest number:          EC
Signing time:             Sat 28 Mar 2026 07:00:20 +0000
Manifest this update:     Sat 28 Mar 2026 07:00:20 +0000
Manifest next update:     Sun 29 Mar 2026 07:00:20 +0000
Files and hashes:         1: _eQvtVj8zMt4u48RY6PCX2o6X1U.crl (hash: SwJolxtVcsz0UBe8xDv2Dx8dH2i/iSyK8lAyqrZ5iX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eQvtVj8zMt4u48RY6PCX2o6X1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:3e:66:d8:e9:dc:35:e9:f5:8e:84:7d:38:40:2c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde42fb558fccccb78bb8f1163a3c25f6a3a5f55
        Validity
            Not Before: Mar 28 07:00:20 2026 GMT
            Not After : Mar 29 07:00:20 2026 GMT
        Subject: CN=f677498bf75343743f64d8072fece9703a482600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:a8:81:56:b3:14:76:d9:6b:7f:da:62:ec:
                    25:3f:db:90:5b:b3:1b:3b:dc:76:86:b3:c6:02:68:
                    8e:a3:36:ec:0e:2d:8a:ef:90:07:81:e3:54:d4:05:
                    fa:26:c7:35:8c:ba:64:48:41:d8:60:c0:80:35:e5:
                    e0:66:c9:b9:86:a6:ed:b0:a8:18:0c:4c:1b:a4:5a:
                    91:cc:66:be:20:29:be:6d:22:6f:df:1c:cc:b8:bb:
                    b0:90:58:25:34:ee:b7:98:21:d7:d4:7e:93:94:2a:
                    a3:f3:b5:a4:d9:cd:76:ed:d4:1a:6c:64:8b:e4:dd:
                    f5:ae:a0:f1:88:46:8b:cf:3f:44:93:e2:f5:f9:cc:
                    fa:69:df:89:a0:82:a9:f8:9d:9f:d3:8c:9c:50:39:
                    99:3a:5b:c7:f2:11:32:7d:23:40:61:b4:b1:8e:64:
                    ce:02:cf:12:08:19:b2:61:0e:92:b0:11:9d:54:e9:
                    3d:72:b6:82:82:b1:4c:bb:44:f7:3c:a0:5c:90:6b:
                    e4:a9:7f:08:ef:47:88:37:26:48:ea:6a:a3:9b:06:
                    ce:9b:9d:d7:44:62:02:4a:9e:bb:c2:2b:ca:d1:cc:
                    b5:bb:21:ce:86:3d:36:49:ea:2c:5c:a4:1b:8a:1b:
                    07:ff:18:9a:91:0d:f8:c6:4f:33:c7:c2:90:33:09:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:49:8B:F7:53:43:74:3F:64:D8:07:2F:EC:E9:70:3A:48:26:00
            X509v3 Authority Key Identifier:
                keyid:FD:E4:2F:B5:58:FC:CC:CB:78:BB:8F:11:63:A3:C2:5F:6A:3A:5F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eQvtVj8zMt4u48RY6PCX2o6X1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a5e9f0-36c8-48c7-a9b9-8b09e5811814/1/_eQvtVj8zMt4u48RY6PCX2o6X1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5f:28:72:16:70:cf:2e:03:33:4c:ce:70:f2:79:65:ec:33:
         5c:9f:ee:8f:3a:57:b4:57:c1:63:8c:63:53:f6:81:9d:35:c5:
         b5:87:0c:c6:7e:01:52:9f:b3:b0:5d:ad:26:42:62:42:f9:69:
         cd:27:06:69:10:59:66:98:a3:9d:28:df:40:85:72:21:a5:69:
         08:11:50:7c:0d:1e:cc:55:7f:1f:f3:ea:a1:53:a0:f5:cb:5e:
         e4:5f:02:33:7a:ff:36:e8:09:3c:24:ce:31:ef:bc:b8:ab:b1:
         3b:b0:62:a4:e4:93:f7:3c:3d:5b:97:9b:96:79:b9:4f:d6:b4:
         a2:6b:5a:76:e7:41:d0:12:4b:c1:b2:16:1f:34:02:3d:21:77:
         b9:ce:dd:b8:f2:e6:72:b8:e3:fd:31:9f:9e:65:09:a0:a3:8a:
         d6:7a:6d:d3:b8:08:f8:9d:e4:be:25:ca:90:03:14:fd:3c:f9:
         47:54:8b:4f:bf:20:ec:d2:91:a8:26:31:c4:26:03:7d:c1:07:
         42:7f:b7:72:91:9b:e2:e2:1f:ce:67:68:61:9e:80:1a:4e:f6:
         9f:a5:39:69:d8:0b:52:6b:86:af:49:a2:ba:c8:ad:03:b8:40:
         9c:8e:8d:5a:3b:fd:88:f9:ad:18:23:cb:b6:8b:48:a6:24:3f:
         41:a1:23:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPmbY6dw16fWOhH04QCzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTQyZmI1NThmY2NjY2I3OGJiOGYxMTYzYTNjMjVmNmEz
YTVmNTUwHhcNMjYwMzI4MDcwMDIwWhcNMjYwMzI5MDcwMDIwWjAzMTEwLwYDVQQD
EyhmNjc3NDk4YmY3NTM0Mzc0M2Y2NGQ4MDcyZmVjZTk3MDNhNDgyNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNGogVazFHbZa3/aYuwlP9uQW7Mb
O9x2hrPGAmiOozbsDi2K75AHgeNU1AX6Jsc1jLpkSEHYYMCANeXgZsm5hqbtsKgY
DEwbpFqRzGa+ICm+bSJv3xzMuLuwkFglNO63mCHX1H6TlCqj87Wk2c127dQabGSL
5N31rqDxiEaLzz9Ek+L1+cz6ad+JoIKp+J2f04ycUDmZOlvH8hEyfSNAYbSxjmTO
As8SCBmyYQ6SsBGdVOk9craCgrFMu0T3PKBckGvkqX8I70eINyZI6mqjmwbOm53X
RGICSp67wivK0cy1uyHOhj02SeosXKQbihsH/xiakQ34xk8zx8KQMwne8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ3SYv3U0N0P2TYBy/s6XA6SCYAMB8GA1UdIwQY
MBaAFP3kL7VY/MzLeLuPEWOjwl9qOl9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VRdnRWajh6TXQ0dTQ4Ulk2UENYMm82WDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hNWU5ZjAtMzZjOC00OGM3LWE5Yjkt
OGIwOWU1ODExODE0LzEvX2VRdnRWajh6TXQ0dTQ4Ulk2UENYMm82WDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hNWU5ZjAtMzZjOC00OGM3LWE5YjktOGIwOWU1ODExODE0
LzEvX2VRdnRWajh6TXQ0dTQ4Ulk2UENYMm82WDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF8ochZw
zy4DM0zOcPJ5ZewzXJ/ujzpXtFfBY4xjU/aBnTXFtYcMxn4BUp+zsF2tJkJiQvlp
zScGaRBZZpijnSjfQIVyIaVpCBFQfA0ezFV/H/PqoVOg9cte5F8CM3r/NugJPCTO
Me+8uKuxO7BipOST9zw9W5eblnm5T9a0omtadudB0BJLwbIWHzQCPSF3uc7duPLm
crjj/TGfnmUJoKOK1npt07gI+J3kviXKkAMU/Tz5R1SLT78g7NKRqCYxxCYDfcEH
Qn+3cpGb4uIfzmdoYZ6AGk72n6U5adgLUmuGr0miusitA7hAnI6NWjv9iPmtGCPL
totIpiQ/QaEjWA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:02 2026 by rpki-client