Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File:                     EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier:          SQVpAxu0FVWp/LLwgtXZD0r29EwBovQ8F+10V0ml6qM=
Subject key identifier:   1C:00:06:59:55:C7:21:21:7D:7A:04:B0:C4:69:FE:2F:C2:50:C0:EC
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer:       /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial:       019E318562D6645971349BDD1B3C2B4E834C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number:          161B
Signing time:             Sat 16 May 2026 16:01:25 +0000
Manifest this update:     Sat 16 May 2026 16:01:25 +0000
Manifest next update:     Sun 17 May 2026 16:01:25 +0000
Files and hashes:         1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: XAOxJDWtn/00iIEnFl+HeMzqDIafAiYUy97fpvCWVYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:62:d6:64:59:71:34:9b:dd:1b:3c:2b:4e:83:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
        Validity
            Not Before: May 16 16:01:25 2026 GMT
            Not After : May 17 16:01:25 2026 GMT
        Subject: CN=1c00065955c721217d7a04b0c469fe2fc250c0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:00:5f:27:d3:e0:83:1a:50:66:85:23:de:
                    ad:79:24:04:52:d1:92:24:bf:43:d5:33:45:fa:9f:
                    00:2a:9f:cb:ae:2c:1a:6e:a6:b8:a3:91:26:3d:cf:
                    f9:78:33:a2:4f:b9:80:9b:81:e0:1e:d4:10:8a:22:
                    3b:56:89:bb:60:ab:29:09:dc:44:b2:50:ba:6b:5b:
                    91:1d:2d:76:b4:cf:1f:01:3b:ae:bb:a5:a6:7e:d2:
                    92:a1:00:c9:86:af:05:ef:86:f6:32:33:c1:f0:51:
                    44:f2:40:ab:10:1d:03:54:d1:ce:e2:8f:9e:20:99:
                    cb:91:18:e5:e1:a4:8b:f3:72:02:94:38:47:b0:95:
                    88:70:e5:72:0e:f0:80:15:57:aa:f3:17:88:d7:6a:
                    5b:66:e4:46:b0:d5:c2:cc:b3:58:40:a0:03:10:02:
                    10:02:a4:de:74:7d:f1:1e:7a:e8:26:74:af:d8:f6:
                    f0:79:c3:e3:50:c1:4e:37:9f:6d:68:24:ad:43:74:
                    fe:23:43:ca:53:4f:fb:b7:e8:35:8d:db:a1:74:80:
                    da:c8:6c:cf:44:e8:66:78:b8:cb:8e:eb:bd:86:3d:
                    5a:b1:a5:64:d8:8b:25:29:6d:87:fe:ca:17:c9:fb:
                    e8:d6:47:b7:1e:2b:e8:aa:25:4d:93:d3:ab:72:33:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:06:59:55:C7:21:21:7D:7A:04:B0:C4:69:FE:2F:C2:50:C0:EC
            X509v3 Authority Key Identifier:
                keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:6a:20:c6:bb:49:f5:e2:cb:f5:41:60:cd:c7:f3:4c:a2:
         a9:a2:78:96:57:ac:ca:06:e1:a0:b3:bb:36:21:0e:6e:8e:fb:
         e8:ea:67:6d:c1:ac:40:37:3a:1e:d6:e7:7d:d2:44:d7:5b:69:
         47:a9:13:80:c2:e3:d8:de:2b:d0:6e:04:e0:8e:5a:2e:61:04:
         1d:8b:d8:d1:24:f9:a3:4d:b8:b9:b2:ae:30:3f:e7:e7:72:b4:
         e0:da:13:ad:8c:99:5c:1b:6c:d1:78:88:7b:3b:66:92:da:e2:
         ec:c9:d0:31:19:1a:8e:76:d0:77:f4:c8:3c:49:19:5a:8b:4e:
         9a:83:a8:0e:23:3d:56:19:7b:07:ea:34:95:8d:c6:6f:5e:6f:
         a5:4d:12:d4:12:21:4f:cb:3e:e8:e0:22:35:90:30:18:37:93:
         45:9f:33:d0:41:fe:94:cf:f2:03:79:66:ab:69:a3:ed:3a:7f:
         35:03:20:d9:16:78:ad:ea:54:29:4e:d9:10:e3:5e:aa:60:02:
         98:eb:b8:d5:a9:71:f4:c4:45:24:58:10:5b:e5:15:c2:46:52:
         f3:17:88:d3:fe:eb:23:38:e6:0d:81:64:55:2e:4a:ef:ab:37:
         28:2a:60:ca:09:b0:62:30:9f:e3:51:e2:2f:04:36:39:24:96:
         b0:c8:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:55 2026 by rpki-client