Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          x4biJnttDnpIrLgPgfTUGykRTZw9qF0KvXiQCTdFRk4=
Subject key identifier:   DA:F2:0D:84:E6:B0:A5:AE:0D:D8:9A:14:9D:51:D4:91:01:A3:B9:C0
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       019D29974D092B9913DF3F272D02E0C75790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          1544
Signing time:             Thu 26 Mar 2026 10:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:14 +0000
Files and hashes:         1: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: b1w+UpTPVAwDH8euGn83eO5nm81cc0KeVSIr22HzjB4=)
                          2: FVaF3betIOHg4wPft72ngyCZePE.roa (hash: AegadGCHV5CrBJ9fTUuKeMkqUQ9CrMdfpb5QnM9p2ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:4d:09:2b:99:13:df:3f:27:2d:02:e0:c7:57:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Mar 26 10:01:14 2026 GMT
            Not After : Mar 27 10:01:14 2026 GMT
        Subject: CN=daf20d84e6b0a5ae0dd89a149d51d49101a3b9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:34:f8:9e:2f:78:33:4d:a1:23:eb:d1:1e:
                    b2:a3:24:25:09:10:6f:1e:8e:a2:d7:5f:37:9d:aa:
                    ad:41:50:d3:7c:88:b8:24:1d:71:84:d3:1f:71:20:
                    5e:7b:36:3b:50:1c:9a:dc:3a:a8:db:42:09:8e:ee:
                    cd:42:25:e6:ee:ae:03:5a:91:ec:94:71:55:8a:59:
                    c3:53:4e:80:45:35:42:2e:2b:b5:e1:98:38:e8:6e:
                    d1:a7:ad:74:68:fc:23:d6:0f:be:cb:f2:48:8e:0f:
                    bf:90:80:a6:fd:f2:99:f3:64:2b:5a:66:c6:8c:7e:
                    7f:50:cb:ec:9e:45:d1:ee:aa:f1:12:fc:8a:1e:28:
                    c8:bf:52:38:89:e0:6e:9b:21:24:cb:07:f2:b0:7e:
                    d3:c9:96:c8:e2:c1:e3:70:2a:60:94:d6:3e:8a:8d:
                    f3:de:95:03:06:f7:b9:48:6d:0f:ed:38:28:56:cd:
                    34:f9:c1:01:3b:06:81:16:5d:4e:e6:c3:16:49:ea:
                    c6:57:af:4a:c1:17:9b:48:83:94:57:6e:3e:b7:42:
                    dc:3b:84:ca:9f:53:b2:71:0a:68:4f:60:8b:70:af:
                    a9:6e:3c:55:4c:33:a6:58:a2:32:52:43:97:f5:1c:
                    f1:26:5d:5c:45:a1:d0:d3:78:06:45:06:0b:44:01:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F2:0D:84:E6:B0:A5:AE:0D:D8:9A:14:9D:51:D4:91:01:A3:B9:C0
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:f1:92:ae:f9:ba:d4:04:1c:33:e0:5d:96:8a:3c:e0:c2:
         02:01:7a:5a:1c:14:19:75:f7:62:06:7f:10:4d:34:d7:23:72:
         0c:14:2b:80:ce:08:17:8e:71:a0:10:16:5c:b1:2b:20:0b:88:
         2f:f8:3a:e9:79:67:d8:5d:1c:1f:21:93:bd:fa:57:52:aa:b6:
         d8:28:cb:60:e5:16:ba:60:f4:97:1c:b8:3e:76:a3:bd:14:99:
         07:a5:1c:bd:85:e9:2c:7b:05:0f:c5:28:1d:ca:60:35:ab:cf:
         d0:66:0c:95:7b:ab:6b:16:a4:48:3d:2a:45:4f:45:47:40:08:
         7c:8e:cd:77:a8:6f:b3:86:a1:4f:f4:cf:17:5e:f0:a2:b7:5b:
         cf:ab:78:5e:32:70:3f:03:0e:65:70:2b:d8:14:98:44:2b:56:
         f0:51:96:7f:79:e1:f0:00:b7:33:8e:a6:30:88:a2:6b:87:ac:
         52:7f:63:0f:4d:93:30:a1:fe:cc:d6:85:3c:da:2a:fc:29:eb:
         a5:18:6d:9d:83:21:53:21:67:6d:86:b3:cb:23:1f:85:3e:cf:
         5c:7e:e3:d1:f0:cf:1b:a6:75:80:f4:4f:1f:2d:65:fd:27:30:
         64:7e:6d:bc:94:6b:17:49:5d:c7:12:fa:37:5b:31:dd:04:7f:
         99:6a:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:27 2026 by rpki-client