Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          A0TwydcdC6rMOVc68qUBzhrTqZNwmSA2k2HurJZh8c8=
Subject key identifier:   46:E3:00:09:4B:24:33:58:B5:3A:0A:38:6A:EE:6F:CE:A4:BF:21:69
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       019E1F10D4224619192C3896268EACB6D776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          146D
Signing time:             Wed 13 May 2026 02:00:56 +0000
Manifest this update:     Wed 13 May 2026 02:00:56 +0000
Manifest next update:     Thu 14 May 2026 02:00:56 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: yhKyn3eZzU7FooQi7RcR69NKLtkyMNzM8+VhJcWFQOU=)
                          2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:d4:22:46:19:19:2c:38:96:26:8e:ac:b6:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: May 13 02:00:56 2026 GMT
            Not After : May 14 02:00:56 2026 GMT
        Subject: CN=46e300094b243358b53a0a386aee6fcea4bf2169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:05:3e:bb:bf:1f:03:1c:de:bf:bc:fb:fe:
                    94:2f:0c:d9:31:cf:d3:55:25:43:c8:aa:66:98:05:
                    10:a4:09:fe:af:30:4d:24:06:ab:76:12:55:30:e2:
                    bd:36:35:a4:a3:9a:8f:b7:2f:64:d1:8a:f3:30:22:
                    c5:6e:59:65:f6:fa:a8:2b:12:13:a2:30:6c:1a:ca:
                    b1:9d:f5:1d:f8:fb:89:5d:8a:f2:5e:82:ef:db:ad:
                    3d:f8:bf:7b:95:a5:50:d7:ec:8f:86:14:a6:c6:45:
                    53:63:a2:b0:4a:02:5e:21:1f:95:99:38:f0:b2:36:
                    14:e5:1b:ce:cb:5e:04:ae:16:21:87:f1:e1:68:5c:
                    19:3b:f6:01:8d:93:af:54:36:08:4f:be:ee:ff:c2:
                    af:3d:e9:14:3f:a3:b7:0c:df:7e:e1:90:09:be:b7:
                    b2:d1:6f:4e:3f:e4:46:04:68:0e:a2:c3:ab:4d:12:
                    ff:1e:7d:7a:2a:49:b3:f9:77:87:23:92:64:92:c2:
                    30:b5:b8:7e:4e:d0:fe:f1:08:5a:8d:81:4b:5b:ea:
                    ed:23:ea:d1:5e:8c:0c:32:5d:64:3c:7c:0a:66:75:
                    3a:42:d7:03:12:1e:b2:70:b7:10:0a:6d:ea:18:7e:
                    38:30:dd:df:fa:c3:be:43:c6:9a:c5:b8:dc:98:6a:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:00:09:4B:24:33:58:B5:3A:0A:38:6A:EE:6F:CE:A4:BF:21:69
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:70:10:97:ac:a7:06:df:03:c1:de:51:df:c7:d9:65:7c:
         89:bd:c1:ad:88:1d:68:c7:ce:98:55:b2:a9:d4:35:fe:43:7b:
         c1:73:ec:f0:56:53:a3:da:f3:aa:e8:c3:dd:c4:cb:c8:b9:fd:
         db:f3:be:d4:71:70:16:f9:f5:49:c7:6f:81:0d:d3:6a:39:e8:
         fe:03:f5:ba:71:6b:48:08:92:ea:10:dc:a6:27:de:a6:21:f8:
         28:5e:5b:33:3c:21:79:83:ce:13:51:3f:b9:69:fe:93:da:e2:
         26:fe:91:ba:a1:1f:7d:43:d3:62:a9:6b:24:8d:7b:2f:fb:db:
         a1:27:a7:5b:b9:09:0a:6d:80:0c:f2:ba:27:b4:4b:5f:a4:c2:
         f4:9d:e5:61:52:6b:a9:9f:d6:2d:c6:3e:a2:59:17:6d:7a:71:
         1b:c1:82:15:0e:3e:66:d6:ca:5a:99:48:61:6b:cd:19:0f:e0:
         35:43:9b:cf:a1:78:06:e3:41:36:82:38:15:39:cb:8e:77:35:
         03:3c:70:85:26:2c:b3:86:b4:4c:27:96:0b:1b:93:5d:74:8e:
         26:32:b5:04:44:48:ac:7d:bf:18:88:5d:a6:9a:54:49:d6:53:
         ee:12:22:b1:08:76:79:30:2a:52:42:fb:4e:a7:07:43:b3:6e:
         0c:68:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:17 2026 by rpki-client