Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          mEm5dpI0FwmjsrgioJm3ZbpcOyGwyIso1zMX71RP5eo=
Subject key identifier:   A5:2D:2D:BB:0E:F4:68:19:0D:E3:4E:D5:C3:60:E3:3F:13:3B:92:1D
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       019D389BF2BEB6AA4EA1D79ED15ABBBB778E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 08:00:37 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:37 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:37 +0000
Files and hashes:         1: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: liaWBWsOpe0Szk06hBPrMnOnEkW3EfUgLIYWQVt3lus=)
                          2: axUwYQFpI_H0PGZ-1hLTsPluQlw.roa (hash: jYCTtZ3yrS3nW17v+JIWdi31GQ0OQwoHbk+cXhltHjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:f2:be:b6:aa:4e:a1:d7:9e:d1:5a:bb:bb:77:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: Mar 29 08:00:37 2026 GMT
            Not After : Mar 30 08:00:37 2026 GMT
        Subject: CN=a52d2dbb0ef468190de34ed5c360e33f133b921d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:24:61:1c:f6:00:85:18:77:ee:25:15:e3:
                    34:06:f3:d0:00:2f:5e:83:70:92:2d:35:5d:12:2f:
                    54:cb:b7:f7:3e:25:cf:ce:ea:6e:86:b1:da:7b:45:
                    f1:d0:6c:ec:dd:6c:41:e7:c6:30:2c:e5:51:15:0e:
                    16:2d:c0:cf:ae:f8:38:e3:97:52:c0:8f:58:13:5c:
                    4f:df:33:15:4b:e6:13:0d:fe:2e:43:0f:6f:9b:e5:
                    01:04:0d:ff:c3:25:7c:7e:7a:39:72:59:3b:1e:9f:
                    11:4b:c2:0a:47:2b:0d:21:84:81:be:89:8a:35:79:
                    75:27:f9:dc:fa:bb:5a:60:2f:4a:c4:74:d2:26:c4:
                    f0:d1:e9:1a:17:d0:fc:f2:23:5e:8e:2e:5e:a1:42:
                    bf:ec:92:c7:fe:d2:28:cf:9d:69:e0:c1:97:3a:4b:
                    b1:68:c1:2e:04:8e:60:21:50:fb:8e:e1:98:31:2f:
                    4b:a6:09:c9:99:ee:dc:96:4d:ce:ac:33:49:87:2a:
                    84:8f:2c:22:85:6f:d9:b9:84:60:c1:ad:d3:d5:f3:
                    29:2a:b3:53:16:29:80:cc:b3:3d:5d:73:65:1a:99:
                    d2:9b:94:35:3c:5a:b6:63:3c:59:05:1d:43:62:74:
                    12:83:28:86:e9:7b:ea:40:c6:e6:ef:c9:28:8a:14:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:2D:BB:0E:F4:68:19:0D:E3:4E:D5:C3:60:E3:3F:13:3B:92:1D
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:15:07:26:d6:c4:03:2a:28:c5:1d:57:80:a0:71:e1:f4:
         b4:1b:c8:71:58:81:ad:bb:3d:2c:f5:98:8d:df:e0:02:3f:a2:
         c4:bb:49:81:9e:b3:f1:c6:c6:58:df:03:70:96:7e:35:23:cb:
         d6:a4:13:1f:01:71:5a:55:db:65:4d:7f:8a:70:38:da:ff:60:
         27:a5:60:7b:d9:b5:fc:e4:f7:9c:e6:e4:c8:e5:e5:15:0f:8e:
         23:3a:60:f4:db:63:3f:74:c9:71:7b:67:fe:1f:83:cc:19:16:
         5c:a1:34:c7:7a:79:76:0b:5f:14:4e:6e:bf:38:93:7a:4a:d6:
         81:41:5b:94:15:d0:6a:b2:1f:03:91:af:5e:a0:8a:27:c2:ad:
         de:20:a5:2d:69:4c:5f:32:a1:74:68:d8:e0:19:5a:69:15:a1:
         5f:b3:78:b7:81:31:82:85:e8:7e:42:32:24:af:eb:81:eb:8e:
         8c:95:d9:96:e0:fa:1f:fb:88:c1:5b:c0:f6:81:4a:d3:72:ca:
         d4:81:01:ba:f6:20:d8:b9:f6:1b:aa:fb:d4:a3:d7:fe:a0:31:
         3c:75:0c:36:f5:8e:a2:db:4a:0e:48:56:0e:00:7d:5b:06:4a:
         06:36:4a:63:7c:a5:00:4e:fd:33:c9:52:91:d9:7b:82:80:c7:
         19:d0:51:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client