Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          W1BEetXddvPKERa/mS4ZH29C4bFI101srie++gHf6xc=
Subject key identifier:   9F:66:8E:84:51:8B:01:8C:8E:7D:BF:49:77:9C:BD:44:D8:A8:4A:63
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019DCE2B7B1CEB0BBB6F7AAC30EEB7A0DEBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0830
Signing time:             Mon 27 Apr 2026 09:00:49 +0000
Manifest this update:     Mon 27 Apr 2026 09:00:49 +0000
Manifest next update:     Tue 28 Apr 2026 09:00:49 +0000
Files and hashes:         1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
                          2: BJM5es3DXe58CFwHLJnNyEOm41k.roa (hash: qmDRiMg0r2c3otaSCi82Y1SbeS/r0t75bxIOgj4aN4E=)
                          3: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: 5Hufl9oAXQrlq0yOIX8rL1hLjNuTa3zVIk/qN51IZYg=)
                          4: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          5: TZcEJaQXpDrAXuvGc3s_Zd_I3PI.roa (hash: bL4XenmCDJbff/MqTHfiWQNDePBNNE3fmDlYlrfuHMA=)
                          6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:7b:1c:eb:0b:bb:6f:7a:ac:30:ee:b7:a0:de:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Apr 27 09:00:49 2026 GMT
            Not After : Apr 28 09:00:49 2026 GMT
        Subject: CN=9f668e84518b018c8e7dbf49779cbd44d8a84a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:dd:82:ca:3d:cf:92:cf:ef:c2:08:9e:32:
                    8a:1b:c1:2c:76:e4:7b:88:e2:e6:03:8e:ec:6a:70:
                    e7:30:b5:c4:c3:7d:8f:89:5c:c4:67:3f:0e:d8:87:
                    53:12:b2:a3:6e:29:2e:be:53:c5:82:96:9a:4d:2a:
                    13:38:b5:2d:8b:05:2b:e0:a6:fd:c8:18:d7:19:ee:
                    14:e5:20:79:ce:62:71:7a:e3:08:ba:a1:89:97:9e:
                    1b:42:6e:b7:e9:57:ab:89:01:0e:12:b4:17:3d:a8:
                    87:17:6e:84:5f:4d:55:e3:b3:b3:4e:7b:82:5a:01:
                    c0:70:8f:64:94:38:3c:1b:26:2b:52:17:88:56:cf:
                    03:5b:5e:c7:5d:4b:01:0e:08:d7:16:4d:26:38:e6:
                    4d:16:20:a6:ae:46:08:76:17:b7:72:3c:db:c1:41:
                    7a:ac:a9:36:19:80:c4:a5:67:ab:be:28:53:29:88:
                    c8:35:fa:2a:a9:27:ab:35:4a:0d:94:8e:15:3e:13:
                    22:f3:55:99:57:05:e8:b5:e6:1c:61:16:e1:7b:37:
                    f1:9f:fd:16:cb:77:b2:88:73:8f:de:84:04:6e:29:
                    6e:00:1a:05:ac:32:95:13:34:0c:f5:f1:b5:df:a1:
                    a6:97:7b:0f:65:cd:e1:60:e9:76:37:d9:ed:b2:6e:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:8E:84:51:8B:01:8C:8E:7D:BF:49:77:9C:BD:44:D8:A8:4A:63
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:8e:6b:4a:4a:87:ae:8b:51:e7:b5:25:ae:08:e3:84:cb:
         ae:14:fa:05:13:0e:da:bb:c5:dd:87:fb:b5:67:83:6f:e4:71:
         ac:77:e1:09:56:cc:85:cc:42:06:79:bf:83:eb:7e:ca:8a:b6:
         a1:0b:43:0d:80:fd:a8:59:08:c1:62:ba:5f:61:01:ac:8b:d6:
         04:a6:0e:33:65:00:bd:57:a7:f8:40:90:7c:37:c8:7b:c1:6d:
         2c:45:75:0e:a7:01:04:5a:81:9f:7d:18:d1:87:dc:e1:7f:6b:
         24:1a:fd:08:14:e2:bd:87:54:c8:4a:30:04:d8:40:54:5a:ac:
         ab:06:08:fb:0e:a9:8e:3a:46:a5:89:a1:60:16:f1:d3:2c:8a:
         9b:80:db:70:b4:7f:bf:89:c0:fa:a1:ed:2c:24:fb:a6:aa:7c:
         33:ea:12:d2:6f:1b:7c:07:01:d4:e8:b5:fa:b7:56:22:be:18:
         00:f1:db:61:c1:24:6f:ad:bc:98:75:a9:4d:14:b4:24:e9:0b:
         8d:15:a1:2f:f0:97:dd:c4:b9:72:73:39:58:d3:ad:50:55:c5:
         46:0e:01:0c:9a:c8:f1:32:49:d7:bd:0e:e5:b9:6f:0b:92:6e:
         a2:da:d1:c3:7a:cd:fa:45:19:bc:24:4b:b1:44:0b:a8:35:39:
         22:8b:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:48 2026 by rpki-client