Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          QfOU7SBR3KD7XPb3cSJIp6XabiJ+RwoVXmJLDunMFRk=
Subject key identifier:   7B:3B:94:80:B8:ED:E2:A5:03:89:2B:4D:64:45:50:F0:4F:89:87:E7
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019DCF75D0A370EB330A5C56C7848D88C89E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          18E1
Signing time:             Mon 27 Apr 2026 15:01:37 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:37 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:37 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: TPJfNt6qj76gV5nReZrMcqEJcocvrOTf4M3K5D/SsOw=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:d0:a3:70:eb:33:0a:5c:56:c7:84:8d:88:c8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Apr 27 15:01:37 2026 GMT
            Not After : Apr 28 15:01:37 2026 GMT
        Subject: CN=7b3b9480b8ede2a503892b4d644550f04f8987e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:a4:3e:d3:b2:46:50:35:f0:2f:e6:c5:1e:
                    d7:f8:db:8b:99:3c:31:cd:86:8b:8e:c7:af:9b:99:
                    07:0f:e9:cd:7b:94:3e:23:40:ea:6a:e1:05:84:ad:
                    ca:e1:55:61:36:57:d1:eb:dd:cf:ab:b4:27:b2:1f:
                    9a:b0:eb:cd:ab:81:30:a1:7a:b8:21:04:0c:46:70:
                    c9:62:94:3c:98:79:a9:45:fd:f5:4b:6c:1b:01:10:
                    39:5b:1d:c1:eb:10:3b:84:61:be:90:ea:9d:d6:7d:
                    7b:4b:81:b2:56:79:46:f2:c5:5b:d2:74:00:db:dd:
                    e0:66:14:fe:2d:ca:58:25:65:f4:f3:dd:98:a5:04:
                    f0:e2:24:cc:d4:ac:02:fe:6b:34:ac:96:b8:12:28:
                    35:4e:45:d1:32:b1:c9:ea:44:24:49:e9:6c:71:41:
                    af:5c:38:08:82:59:b0:86:43:2b:5c:d5:50:40:48:
                    af:48:42:7d:9c:20:af:95:e2:14:ea:88:fa:1d:b6:
                    86:2d:d7:07:e9:64:69:f3:6d:9e:12:3f:9f:33:df:
                    57:84:fd:87:cb:db:0b:cd:06:28:3b:62:32:62:9b:
                    28:e6:2b:a3:17:d1:ff:61:22:66:c8:bf:1b:cf:0c:
                    86:de:51:45:27:4a:15:3b:f4:21:4d:39:95:70:78:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3B:94:80:B8:ED:E2:A5:03:89:2B:4D:64:45:50:F0:4F:89:87:E7
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:c0:ad:e2:8a:5f:51:ae:f2:5e:dc:d9:42:8a:4e:45:ee:
         4c:88:12:8b:05:9b:62:65:55:38:0c:de:18:4c:e3:9c:30:c0:
         78:6d:26:cc:93:1c:e5:1d:09:c2:46:6b:24:33:c0:97:d6:56:
         90:5c:78:89:2a:f8:1d:dc:97:91:57:80:dd:8a:fa:54:12:35:
         43:b8:a7:25:0f:a9:73:ac:5f:7c:43:ea:74:c8:6f:75:04:4d:
         b9:c1:9d:54:75:f6:ad:fc:33:f2:5b:06:de:b1:bf:d2:11:ac:
         57:65:3f:41:f8:c0:c2:06:22:f5:9c:b7:71:6c:08:3a:3f:8a:
         15:9b:34:f7:a8:50:97:ea:75:aa:4f:ff:9f:e7:d9:4f:60:13:
         cb:e6:96:78:b6:bf:6c:44:f7:2b:66:91:47:4a:ee:f6:de:22:
         0e:fb:29:0b:ae:e2:e8:4d:fc:58:23:74:9f:d4:b7:39:b8:45:
         cd:b6:1c:04:5a:1f:86:af:76:a8:a0:c7:28:d1:40:34:ff:77:
         5e:22:3b:48:c2:29:7f:fb:e4:00:74:d3:60:f2:f8:19:15:8e:
         40:8c:17:17:37:bf:ec:6f:15:26:a4:61:64:47:11:62:2f:c2:
         60:d7:51:9f:2b:c1:a5:c7:7c:e4:64:58:84:99:b5:6e:14:3d:
         99:c2:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:27 2026 by rpki-client