Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
File:                     euirxe_YoA4Rx7LA2OH3b4IUYks.mft (raw, json)
Hash identifier:          q+sR3d9HgYoGojwmKwT4e7djV429nahPzMIiczv5AAs=
Subject key identifier:   70:BF:D5:65:6A:9E:B9:B1:62:3D:B7:40:4A:5D:AD:6C:75:BC:18:A7
Authority key identifier: 7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B
Certificate issuer:       /CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
Certificate serial:       019D39AEA2D1C630DF8F379B481AA13D4B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
Manifest number:          0C8A
Signing time:             Sun 29 Mar 2026 13:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:39 +0000
Files and hashes:         1: euirxe_YoA4Rx7LA2OH3b4IUYks.crl (hash: Pcq9VQeML3MAnkiaSZ3iYQI/Q4USvj/Deui6VX2KrFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:a2:d1:c6:30:df:8f:37:9b:48:1a:a1:3d:4b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
        Validity
            Not Before: Mar 29 13:00:39 2026 GMT
            Not After : Mar 30 13:00:39 2026 GMT
        Subject: CN=70bfd5656a9eb9b1623db7404a5dad6c75bc18a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:1f:8e:4d:0e:30:37:c5:4e:65:67:f7:91:
                    50:ff:f9:c8:bb:bf:fb:ba:a3:1a:07:c2:92:96:1a:
                    24:a2:42:c8:80:ad:87:17:e6:8e:2c:b5:2d:be:44:
                    1c:4d:f2:5f:6a:b7:ae:bb:4c:d3:a1:28:5e:12:20:
                    16:4e:63:47:7c:be:25:5b:cd:d5:fe:17:1e:f1:c9:
                    3f:54:12:54:e8:ff:b1:89:18:3c:43:0e:25:8c:9f:
                    1e:19:16:74:1b:aa:c5:e9:c9:9a:c3:8e:2e:5e:c1:
                    ac:c7:cf:a1:9a:73:94:9b:28:18:47:4f:fd:9b:a7:
                    26:c8:6b:bd:6c:91:98:18:d9:46:1b:5b:a5:7e:ea:
                    0a:91:82:94:bf:a7:4f:1d:0b:95:42:16:d5:96:1d:
                    fd:ef:9e:3c:9d:4e:95:84:e9:b2:18:5d:89:5c:ad:
                    f3:d2:b7:13:cd:e7:50:e5:98:b5:8d:ed:08:e0:7b:
                    04:13:9c:cf:2f:df:63:d7:bf:64:34:e3:58:db:3d:
                    a5:8c:db:81:12:f0:80:f2:c3:fc:a8:0a:d4:17:13:
                    a3:3e:6e:5f:54:de:ba:34:65:a4:76:f7:6b:a0:3b:
                    a0:ff:a1:69:77:60:64:11:00:69:0c:3d:18:0c:c2:
                    aa:d1:0d:8d:be:c8:d8:25:c5:58:b7:14:d7:42:09:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:D5:65:6A:9E:B9:B1:62:3D:B7:40:4A:5D:AD:6C:75:BC:18:A7
            X509v3 Authority Key Identifier:
                keyid:7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:3d:9c:a1:db:d5:4a:a6:3d:9e:12:04:df:1b:5c:b4:22:
         52:14:7d:cf:88:ee:bd:f3:eb:73:a1:ac:6d:89:61:7a:f4:34:
         81:04:bc:94:1c:85:8f:0c:94:51:a5:7a:6d:50:4b:c8:c2:23:
         ed:84:78:f4:4d:c9:7b:8a:51:4c:a6:c5:59:a7:d9:30:3e:68:
         e8:4e:af:ef:d7:74:69:70:39:82:14:66:ec:eb:3a:0c:f4:3f:
         f1:8c:37:53:b7:74:e2:36:51:64:a2:a0:7f:dd:6e:a5:60:9f:
         ba:f9:83:9e:01:94:3e:d6:b0:d0:32:bd:14:c4:95:57:98:8e:
         30:c0:4d:13:5a:ed:cd:43:08:2b:26:fe:ae:b6:ba:e3:20:f3:
         11:f8:34:b7:b8:11:a1:ff:fc:3d:79:75:16:64:cb:83:b3:c5:
         ab:72:dc:d5:d7:39:25:ed:7f:66:15:1e:49:68:de:98:02:f6:
         a4:76:2d:3a:cc:be:5e:dd:2c:79:75:e2:6c:3d:5f:8b:00:1f:
         d0:0e:5f:53:cc:cd:c1:19:cb:06:99:cb:8b:5a:e1:38:5e:93:
         3f:f3:1a:ec:6b:a1:cd:cc:44:5b:23:f1:3a:58:c3:7f:72:9c:
         23:e9:6e:e4:61:9d:d3:49:75:c8:f1:3f:10:a4:f8:de:f2:22:
         19:aa:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:40 2026 by rpki-client