Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          8Eck0j7dnVZSU0jJJsJRtcOhksYXV9ThoJzD5JrKP7o=
Subject key identifier:   61:8D:91:B2:85:7D:E2:DA:90:94:5E:54:EC:F9:1B:DB:69:3C:A4:AB
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       019E3071FC5247E577015F3C8323E020084C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          0B4E
Signing time:             Sat 16 May 2026 11:00:36 +0000
Manifest this update:     Sat 16 May 2026 11:00:36 +0000
Manifest next update:     Sun 17 May 2026 11:00:36 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: sweFbquQ2Ck6Ry8czk3K9DYsLyaYWX1NlxL1xyL0+4g=)
                          2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:71:fc:52:47:e5:77:01:5f:3c:83:23:e0:20:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: May 16 11:00:36 2026 GMT
            Not After : May 17 11:00:36 2026 GMT
        Subject: CN=618d91b2857de2da90945e54ecf91bdb693ca4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:50:c4:b1:ed:b2:cd:73:fc:18:cf:81:89:
                    de:29:fc:5d:2f:cd:94:e9:a3:a9:4a:bd:98:77:72:
                    9d:0e:09:fa:32:d7:b8:0c:e0:36:bf:47:fe:d7:b1:
                    8f:4e:68:e2:d4:7f:48:2a:be:98:a9:83:fe:89:bb:
                    ba:2a:a1:8e:1a:d3:b4:38:28:7a:47:5c:21:4a:88:
                    57:59:64:14:b2:87:04:ff:c3:9f:27:73:33:86:ce:
                    0b:92:03:1f:67:cc:66:cc:e7:62:6a:89:8b:23:cb:
                    b1:7e:96:4a:fe:0f:bd:e1:4d:ae:46:92:8d:c9:10:
                    cb:40:a5:0c:3c:1d:73:f9:01:ba:34:84:7c:3a:75:
                    8b:13:92:1b:f7:69:8b:b7:dc:2c:a1:46:ed:a5:f8:
                    ab:6a:39:0e:d8:29:da:8d:21:65:92:0e:3c:26:eb:
                    f8:13:07:06:c2:c3:7e:46:d4:e3:5b:b1:23:e4:10:
                    ca:18:28:f4:21:85:85:69:3e:17:19:9e:83:ec:c4:
                    35:b0:56:7c:44:52:42:d6:34:71:88:2d:5b:80:f2:
                    4a:2d:45:ba:c4:09:da:2c:cd:ec:3f:08:db:df:0f:
                    28:05:b6:db:bf:b1:be:4a:5b:27:13:a7:3f:8c:45:
                    28:e5:bb:51:01:f6:43:69:80:7d:ff:a1:f6:fa:c7:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8D:91:B2:85:7D:E2:DA:90:94:5E:54:EC:F9:1B:DB:69:3C:A4:AB
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:f8:d9:9b:1a:c6:88:14:72:a5:87:31:2d:c8:cb:68:eb:
         a6:56:d9:b2:0b:1f:e0:99:b2:b5:4f:16:90:28:ff:16:5e:e2:
         e5:c1:39:cb:40:21:41:0b:af:44:d1:21:00:13:b3:97:0d:8e:
         55:58:fe:6c:11:0f:0a:44:29:ac:81:6c:fa:5a:dc:2b:5e:85:
         95:c2:bc:7e:33:4d:73:c3:b4:c9:41:37:6b:c8:e8:de:96:01:
         4a:46:8a:59:23:f3:16:3c:f3:85:26:3c:28:fa:6f:fc:5f:92:
         65:18:34:e2:14:79:f9:5d:86:ed:30:d0:ed:c3:b3:90:3e:a4:
         60:03:21:88:eb:9f:c4:e9:6f:c3:f5:4f:6c:d3:a7:a2:fb:f1:
         fb:59:c8:d9:97:c7:39:e8:a3:19:4b:57:03:98:6e:a1:57:59:
         34:d5:7f:52:74:41:cf:2f:32:4d:e4:f2:e8:18:15:f5:aa:7b:
         5f:e8:cb:1e:25:61:1a:1e:fe:0a:38:9c:7a:55:5a:19:e5:15:
         ad:d8:f5:d9:76:f0:bb:da:56:75:f4:71:41:6d:a8:e4:98:e2:
         33:ed:59:42:bd:62:91:8e:9b:e2:a7:ff:92:38:dc:93:6c:da:
         85:2b:35:68:36:5e:e2:db:62:da:71:80:5a:cb:78:fa:a6:55:
         53:74:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:29 2026 by rpki-client