Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          SPArsVraXUuSzaulXwkOAuT+/3cOUtUy3YhdPmjtK7A=
Subject key identifier:   94:7D:53:9A:B7:44:65:C5:0B:FE:CA:EA:E1:56:FE:D3:97:59:8D:FE
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019DCC73BAF9AD5AC9E7AAF28F316A2FAD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0A19
Signing time:             Mon 27 Apr 2026 01:00:29 +0000
Manifest this update:     Mon 27 Apr 2026 01:00:29 +0000
Manifest next update:     Tue 28 Apr 2026 01:00:29 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: pFEWvHuKZ4pwXROLqfpMsAACKdZB/hqXz3D7vIwg+mc=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:73:ba:f9:ad:5a:c9:e7:aa:f2:8f:31:6a:2f:ad:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Apr 27 01:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=947d539ab74465c50bfecaeae156fed397598dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:6d:8b:9b:c5:8f:84:9b:95:1a:37:f1:14:
                    10:16:5d:d4:a6:8c:5f:5c:48:a4:61:bc:f8:73:f8:
                    d3:af:79:94:2f:e8:e3:90:02:8f:ec:17:73:87:42:
                    34:73:90:98:72:cb:c4:23:3a:24:b8:d8:db:dc:2d:
                    2d:0f:0d:5d:bd:fc:17:76:ae:cf:3d:5a:ea:44:bc:
                    bf:e2:ee:a6:56:aa:53:52:1a:32:d2:f7:21:f5:5a:
                    5d:43:7f:15:b9:3a:53:56:84:18:32:59:ef:8e:c5:
                    cc:cf:92:cf:8f:e3:69:1c:0d:ef:55:0b:bf:e4:8a:
                    6c:4a:5f:d2:69:4e:49:8d:3c:2d:c3:07:83:21:04:
                    cc:19:ed:0d:ba:30:0a:c4:0a:32:95:c9:cc:80:1a:
                    bb:f7:1a:0e:8a:7f:3f:47:45:ab:b0:59:ab:51:5a:
                    98:39:ea:11:aa:e8:cc:48:9c:d7:4f:3d:67:4b:11:
                    98:b5:c3:dc:24:cf:c7:b2:41:c9:9d:75:79:a2:73:
                    6d:30:d5:9b:c5:ea:81:e6:8e:d8:0a:01:a5:d1:a7:
                    c4:bf:e8:3f:0f:aa:08:56:e3:a6:42:58:ef:ad:bf:
                    ad:f4:74:a2:7c:c8:8f:09:4c:ee:05:50:73:af:06:
                    e4:b0:ed:3a:9e:18:44:64:1c:d1:e4:63:56:24:ff:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:53:9A:B7:44:65:C5:0B:FE:CA:EA:E1:56:FE:D3:97:59:8D:FE
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:35:dd:3e:c4:4e:03:e1:e1:a1:3e:07:fd:72:7d:52:6e:
         eb:8d:dd:0e:df:dc:31:44:0a:d1:86:cd:ad:0a:2c:93:db:6c:
         ea:23:26:72:4f:f2:56:93:db:e6:98:42:ab:7d:48:92:20:d7:
         c5:dc:41:17:30:90:0c:7a:f8:d3:a9:f7:91:2a:d9:73:18:06:
         02:c7:7d:59:76:8d:9d:4d:bf:3c:a0:e7:ec:4d:9f:f9:38:56:
         d5:0a:ab:24:74:a6:7a:a1:6e:fd:18:60:f2:0f:1d:c0:90:0e:
         be:f6:82:82:fd:65:bd:01:d0:ef:a3:66:a8:ef:d2:c3:56:ed:
         35:8e:f9:a8:21:d1:2f:20:06:c9:3b:cc:0a:24:4c:22:1c:67:
         ed:e9:a1:c5:66:63:37:ab:da:64:31:cf:94:52:d5:11:cb:cb:
         4f:e5:be:73:cc:54:36:07:bd:c2:95:a9:27:0f:a7:48:f3:d6:
         4a:e0:74:a4:01:9f:a2:45:bd:32:7f:8c:32:ac:c4:a2:25:b0:
         65:ed:6f:8a:4f:5a:9f:8e:34:22:cc:47:2f:42:70:52:26:a2:
         31:2f:80:ff:a6:06:4b:80:5b:8b:df:d6:8c:01:9d:ef:6d:5e:
         69:ee:16:c2:62:5f:6e:e8:e0:89:02:32:c6:1a:a0:c8:4a:21:
         ef:b7:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 06:49:39 2026 by rpki-client