Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          SW5iYpSBgDBr0cUmM9qjA2GbcwlFBLGptXaRqvxHXXU=
Subject key identifier:   FB:47:FD:4E:95:76:62:BB:6A:34:6F:E9:80:2F:23:84:64:2A:7C:2C
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       019CE4ECA4BD1AF1CF42F7E8A49DDA765FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          0100
Signing time:             Fri 13 Mar 2026 02:00:39 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:39 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:39 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: Ea4s/2fhQNu4mP5vAgr/hqN1KzURB4vcYDZOTjk2WcY=)
                          2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:a4:bd:1a:f1:cf:42:f7:e8:a4:9d:da:76:5f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Mar 13 02:00:39 2026 GMT
            Not After : Mar 14 02:00:39 2026 GMT
        Subject: CN=fb47fd4e957662bb6a346fe9802f2384642a7c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:8f:fe:04:c9:88:1b:c8:e0:ee:78:c4:ab:
                    86:46:3c:85:6e:2a:de:c1:24:f7:52:a6:b2:2e:88:
                    56:70:ee:cf:72:9c:9f:5d:1d:09:89:42:7a:5c:bd:
                    5f:33:73:2a:64:4a:bc:11:48:86:78:87:31:b5:b4:
                    eb:cb:65:c4:88:4d:77:48:be:df:f5:0d:64:85:66:
                    18:b5:7f:8f:93:fe:00:9c:87:97:88:90:9e:7f:98:
                    1f:c9:2c:10:00:f4:9a:60:e1:38:35:84:41:3b:56:
                    f9:3a:74:8d:74:52:7e:ca:02:77:c7:9a:db:d1:00:
                    92:73:4a:46:cb:ec:25:94:f1:f5:73:d2:86:07:46:
                    13:57:ca:3e:b4:52:54:8f:7e:a3:81:59:cb:aa:b1:
                    28:b7:74:21:5c:06:d7:1b:74:22:22:44:21:d5:05:
                    e1:f0:f8:bb:ee:b1:06:2a:ab:42:c8:14:44:65:8f:
                    ee:ed:00:fa:9e:f7:2b:9d:15:0d:13:49:da:2b:72:
                    18:75:70:c9:e8:f3:7d:75:e6:2e:4a:35:92:85:c2:
                    48:85:b1:c9:9c:da:02:3e:e6:b1:80:67:fb:a6:7a:
                    91:1b:d9:cf:bc:ca:e7:ce:3b:c2:7a:fc:45:b2:ed:
                    2e:fb:4c:bb:4a:9d:ef:60:62:1d:b7:54:fc:87:38:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:47:FD:4E:95:76:62:BB:6A:34:6F:E9:80:2F:23:84:64:2A:7C:2C
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:54:4d:7c:3c:7d:1f:62:86:80:25:6a:f9:e7:ac:e7:54:
         99:26:6b:a8:18:42:c0:fa:49:80:30:87:94:91:95:da:6a:e9:
         fe:4b:7d:09:c0:2d:b9:50:26:09:5a:5a:f6:4e:e4:0b:15:73:
         ce:7b:04:f6:6e:14:b1:03:e6:fc:09:97:33:7b:1d:2a:d2:59:
         84:c7:73:cf:23:e1:21:6f:bf:82:df:06:a0:bc:28:6c:de:64:
         99:10:5e:18:ce:c7:d0:6f:35:7d:98:31:de:71:b3:55:df:16:
         39:df:7b:e8:77:05:ec:88:21:da:4e:8c:08:8d:ce:45:f8:4e:
         b5:39:a0:49:16:17:ff:1e:0e:e2:0d:0a:9a:75:d0:5e:50:f2:
         ef:47:7b:92:22:fa:7e:85:d2:2c:30:02:75:db:7b:1f:6d:bf:
         e7:8d:d1:af:e3:03:b8:b3:2d:ae:09:cd:e0:90:95:13:02:09:
         26:32:51:95:b0:9b:2e:21:00:aa:b5:5f:8b:be:6b:21:07:63:
         70:10:26:0d:29:ca:0e:d2:d7:df:41:e5:53:b7:98:f4:84:c6:
         dc:ad:2e:29:09:25:74:0a:0d:7f:f2:6f:80:c7:e1:a3:e4:f9:
         e0:39:87:94:81:ca:09:97:0a:1d:7f:de:c0:6f:0b:9f:8a:0e:
         0b:3b:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:17:43 2026 by rpki-client