Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          Ohg7m9hkLuhojeUlrd4OYmrMfsdk1bUzssKafeJ1/bc=
Subject key identifier:   6C:EF:F5:78:EB:DE:82:14:9F:F4:1F:A2:13:94:F0:58:6A:B6:E9:E3
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       019DCE9992153403E6AD3C7E794B6B85865C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          0179
Signing time:             Mon 27 Apr 2026 11:01:04 +0000
Manifest this update:     Mon 27 Apr 2026 11:01:04 +0000
Manifest next update:     Tue 28 Apr 2026 11:01:04 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: RfsKBtAjq635UVzoKfrHuEO1UoClti8fv41QBh9aIgI=)
                          2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:92:15:34:03:e6:ad:3c:7e:79:4b:6b:85:86:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Apr 27 11:01:04 2026 GMT
            Not After : Apr 28 11:01:04 2026 GMT
        Subject: CN=6ceff578ebde82149ff41fa21394f0586ab6e9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:b9:c8:8a:54:88:c9:30:28:e0:3b:17:20:
                    b3:5a:23:8a:82:a6:77:ee:c2:9e:ff:9f:f0:ee:28:
                    61:ef:26:ff:13:f4:b7:17:05:60:55:e6:f8:da:82:
                    9b:8b:ea:92:b1:96:a7:ab:8c:3e:3b:af:33:0f:70:
                    f3:49:44:06:dc:ef:2a:9a:2a:87:be:31:44:7f:ad:
                    b9:16:54:e3:e5:91:d4:46:37:37:a9:dd:6f:70:23:
                    55:22:3a:58:69:ae:7e:fd:1d:66:11:14:d0:7c:a5:
                    17:2d:a9:62:a1:07:b3:fa:08:86:19:ae:53:c5:1e:
                    ed:93:84:55:16:e3:f0:02:39:0e:bf:8d:c6:db:a0:
                    db:b5:60:4f:5d:1c:96:06:a9:f7:38:ee:22:2e:fd:
                    ca:63:e1:ba:60:e7:9f:ee:5c:9f:df:4e:3f:4c:54:
                    09:78:82:52:48:91:a7:4a:01:dd:39:b4:22:89:71:
                    1f:fa:c5:e1:1f:10:40:62:e6:8d:86:7c:8a:f7:d6:
                    c8:8f:51:53:d5:76:33:54:18:1c:c2:fe:76:40:19:
                    4d:ee:6b:ad:c9:4e:44:11:a7:f8:97:de:b8:69:d4:
                    0a:fb:38:80:6f:c7:33:fc:de:45:54:2d:0f:40:8d:
                    d5:e1:4f:1a:58:8e:6d:0d:07:10:db:aa:84:0d:67:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EF:F5:78:EB:DE:82:14:9F:F4:1F:A2:13:94:F0:58:6A:B6:E9:E3
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:41:84:a1:da:cb:3c:47:51:b7:a5:de:7c:50:e7:d9:cc:c2:
         cf:9d:2e:cb:d5:3a:d7:ca:37:b6:9d:62:b9:67:a3:33:fb:d7:
         5d:2f:9d:f1:f5:ac:36:62:15:34:0f:58:39:73:f0:3f:bd:61:
         42:c7:da:6e:a7:ce:c6:9f:d0:39:26:81:36:b4:95:9f:b6:6f:
         92:45:66:32:45:0c:58:84:14:4f:e9:90:4e:67:ac:21:7a:24:
         34:e4:28:c5:e9:d5:3b:69:85:8c:17:b3:e6:58:e9:77:45:49:
         4e:89:65:4e:09:28:5d:15:38:4c:f2:4f:20:e9:d7:a4:e8:bf:
         a0:9b:29:95:8e:f8:a4:5e:ef:4b:1e:05:75:c7:6f:de:4b:9d:
         b1:b0:b8:07:ee:55:36:7d:89:25:88:2d:40:39:0d:90:3d:f1:
         8f:69:f3:ed:93:fd:97:83:ec:1d:d0:30:a6:9d:2e:18:50:d4:
         7d:8c:f0:bb:9d:62:73:a5:87:92:a4:b3:db:37:14:74:11:6b:
         7a:31:55:23:16:10:f6:03:3e:ca:f3:78:86:49:fe:43:14:98:
         5c:50:10:59:06:a1:ca:c5:d0:a9:70:f6:86:0e:03:a9:81:84:
         b4:88:eb:64:fe:b7:8b:7a:20:0d:be:ab:b2:d9:5d:37:50:36:
         71:3b:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:01 2026 by rpki-client