Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File:                     CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier:          7+WPRxyfkv/fdtkbvLa75PQz+0drV+vlrelNT8svHU4=
Subject key identifier:   08:58:66:B4:B5:74:38:43:BF:5A:33:23:F7:B4:98:96:63:46:FA:37
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer:       /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial:       019E30724BD05C9D085F2B5A82AB89975C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number:          15EB
Signing time:             Sat 16 May 2026 11:00:57 +0000
Manifest this update:     Sat 16 May 2026 11:00:57 +0000
Manifest next update:     Sun 17 May 2026 11:00:57 +0000
Files and hashes:         1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: EG+P2OaLXq560sShHHRSlEMo5aKRr7mNgDuyK7TD1mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:4b:d0:5c:9d:08:5f:2b:5a:82:ab:89:97:5c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
        Validity
            Not Before: May 16 11:00:57 2026 GMT
            Not After : May 17 11:00:57 2026 GMT
        Subject: CN=085866b4b5743843bf5a3323f7b498966346fa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:c8:74:ad:94:30:5e:9f:43:da:11:48:55:
                    ef:f8:02:2c:a6:21:e2:b0:4e:e0:a1:16:1d:1b:1a:
                    ed:26:9f:9c:9f:f7:59:26:4e:bb:d5:fb:ea:5a:79:
                    a5:d7:86:8d:de:90:93:94:de:fc:e5:c3:5a:6a:95:
                    9f:16:12:e7:68:38:4d:44:a1:8f:86:82:19:e1:a8:
                    e1:60:aa:c7:c7:75:86:46:68:30:00:98:9a:46:1b:
                    5a:60:9e:49:78:2a:2d:23:d7:bd:71:78:ab:f2:2c:
                    8a:bf:6e:89:a8:d4:d8:2d:71:dc:cf:0a:5c:ce:94:
                    06:e2:b0:b2:ea:84:f0:75:06:8f:68:0a:25:8d:38:
                    14:16:3d:d1:1b:05:30:eb:69:f2:30:37:ed:20:0d:
                    d9:16:c0:7d:93:ed:cd:8d:41:ea:21:4b:50:81:6b:
                    fb:77:63:b9:fd:bc:a7:5b:18:0d:08:e2:10:05:da:
                    91:46:14:cf:87:ec:45:b0:38:02:ab:52:0a:b8:22:
                    08:49:c1:c5:7a:72:7f:53:2e:72:10:a8:b7:37:ba:
                    10:41:50:28:f6:db:37:1a:f0:f2:94:5c:6f:79:35:
                    44:5b:46:c1:a3:62:b5:18:4f:3c:17:a1:b6:7b:ad:
                    43:2c:e5:29:f7:30:56:dd:28:57:5c:aa:42:6c:2e:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:66:B4:B5:74:38:43:BF:5A:33:23:F7:B4:98:96:63:46:FA:37
            X509v3 Authority Key Identifier:
                keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:94:eb:b7:58:11:18:e2:9f:e8:11:79:f4:06:eb:cd:43:3a:
         24:d9:70:c2:43:58:5a:d5:d9:58:bf:b9:ea:7b:32:18:11:b6:
         ff:64:a3:91:cb:6b:2c:6d:d7:b2:3e:2e:79:61:9a:d9:27:45:
         3b:d0:08:23:22:ec:f2:4a:a6:70:b2:bd:c4:27:7a:f7:ed:44:
         d3:74:33:6c:fa:b8:ed:5e:f9:92:07:1e:8a:31:82:fc:e9:2b:
         ca:c1:c6:b6:98:93:f6:54:93:91:a5:2c:37:12:fd:46:18:00:
         f3:9c:3d:d5:1c:4e:31:3a:66:18:bd:d0:07:26:1a:9a:ac:80:
         b9:b3:d0:59:c7:c6:67:21:16:71:6c:21:d2:4a:74:64:6e:c8:
         d1:d5:e3:d2:61:cc:7b:8a:0b:a8:cb:e8:bf:f8:66:83:4d:36:
         1f:ab:16:fe:28:2e:40:be:73:5f:b3:7f:fd:2a:b8:ea:f3:19:
         3e:c0:c3:eb:a7:6b:a0:69:08:32:30:ef:50:ad:f0:8f:2c:04:
         c5:57:29:a1:0c:2d:3b:19:57:8e:8d:d0:5f:3f:b0:f5:d0:93:
         a4:99:3f:e6:37:d8:dc:50:95:fc:10:68:e5:7a:3c:d8:68:b8:
         e0:2a:b0:9b:ed:90:ce:c1:b7:d9:c3:66:30:75:a5:f1:f7:78:
         46:1b:a5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:18 2026 by rpki-client