Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          D1KbPHn6jnlI+szmmL9yIq0Au5+3kJyznN0wSfFX87Y=
Subject key identifier:   71:E5:14:72:2A:19:8D:F4:B3:F0:A7:E0:75:D5:F0:CF:F6:0D:1B:A6
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       019D3789A4F425F0BA6B76C9942EA7266FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          0478
Signing time:             Sun 29 Mar 2026 03:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 03:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 03:01:00 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: qRaa6+M2LBZF8ltNlgay+ANjzDSPrwfdpFHYFx6tPMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:a4:f4:25:f0:ba:6b:76:c9:94:2e:a7:26:6f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Mar 29 03:01:00 2026 GMT
            Not After : Mar 30 03:01:00 2026 GMT
        Subject: CN=71e514722a198df4b3f0a7e075d5f0cff60d1ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:e1:16:4a:5d:a9:1e:57:b5:60:c9:33:5b:
                    2c:5d:d1:61:a2:3b:72:ee:43:af:f9:19:50:6a:1a:
                    95:13:4e:6b:80:53:b4:bb:ea:18:bc:af:fb:c8:36:
                    72:d3:b3:69:55:8a:33:35:1f:cc:c9:8e:76:11:65:
                    78:e0:20:fd:82:01:18:2c:5a:01:66:ef:2b:42:9e:
                    de:41:1f:96:cc:1f:57:1a:2c:48:5d:35:59:01:e9:
                    19:59:02:2c:03:a7:ad:23:03:9f:a5:94:fa:f6:24:
                    7a:5f:ea:61:30:d4:58:34:ee:67:bf:49:4d:fc:e7:
                    7e:59:c7:41:1a:92:59:b4:a0:de:fa:7e:3d:ea:24:
                    a8:8d:5f:fe:38:1a:c1:3f:a6:91:d7:13:36:ca:e2:
                    7a:49:23:ae:07:94:e4:53:2d:bf:31:87:65:d9:15:
                    34:9b:11:af:af:2e:49:4d:a1:bd:b9:99:c7:ea:15:
                    85:8c:50:db:d8:a7:b7:aa:b3:6b:7b:7f:23:4f:84:
                    dc:e8:de:65:ee:00:31:c5:38:cd:6a:b2:70:45:b2:
                    10:25:f8:65:3f:ec:9d:8e:f6:f5:6f:e7:48:7f:c3:
                    69:ef:f2:a6:1e:45:b8:d3:e7:75:10:8c:cd:0d:3e:
                    f2:03:17:cf:b8:1b:bb:b5:e7:82:b3:f6:12:2e:e4:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:14:72:2A:19:8D:F4:B3:F0:A7:E0:75:D5:F0:CF:F6:0D:1B:A6
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:d7:0e:2a:2c:bb:57:8d:d6:c0:ef:c2:ac:11:eb:03:ab:
         a7:62:8f:05:d0:db:da:bf:56:83:dc:f3:61:a3:a3:74:09:49:
         03:5f:3f:7a:fd:3e:1a:8f:00:a6:41:23:4a:9b:3a:ea:33:91:
         bf:59:b5:75:9b:a7:dd:bf:1a:d7:49:8f:cc:b3:30:3e:14:ee:
         f6:e5:36:f5:dc:27:bd:50:50:9d:33:ea:b0:6c:9d:1b:bc:2b:
         b7:bc:35:52:89:9f:03:8f:1f:57:fb:81:ca:2b:38:e4:57:ee:
         c9:15:9b:c6:f4:75:89:4a:b9:9a:25:ea:37:77:49:e2:19:80:
         b2:45:c2:44:14:d8:1a:ef:2f:7e:01:73:ac:21:91:ca:8e:46:
         dc:21:49:e4:54:fc:16:2f:61:70:94:8b:b2:d0:cc:b7:8f:a1:
         4c:11:e5:9d:5b:65:f0:c6:af:25:a2:77:b5:1c:08:bc:28:8f:
         fc:fa:18:d6:20:ca:09:9b:cf:25:63:1d:84:11:b7:10:36:90:
         3a:b6:50:c2:55:f0:81:94:57:1f:e0:b7:38:d0:fc:ab:f5:7b:
         99:b4:35:44:01:be:cd:f6:1b:99:d8:7f:d8:dd:e8:22:3e:a7:
         70:01:62:c1:94:7e:02:41:b6:ce:90:b1:0d:81:5c:44:f5:4b:
         30:cf:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:42 2026 by rpki-client