Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File:                     eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier:          uL2MuqawVFyxQ/KGVLLqQXNpb0pk619LR+HDGeWIgxY=
Subject key identifier:   DC:0B:48:DF:AB:28:CB:BE:53:F9:B6:2A:66:67:7F:20:01:14:AB:E1
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer:       /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial:       019D3940E0AA13D282742038BC0246AECEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 11:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:46 +0000
Files and hashes:         1: Ym1MgRv-50h_8HgOmRXao0XyVRI.roa (hash: QCOXuZU6xfCdgok7iSaeanqJZnLc1XTx+TNhtGwPM/g=)
                          2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: L8jkLMVVIjINa4lF6LLwYFIjRbOMm4WZzMsDyhnqRhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:e0:aa:13:d2:82:74:20:38:bc:02:46:ae:ce:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
        Validity
            Not Before: Mar 29 11:00:46 2026 GMT
            Not After : Mar 30 11:00:46 2026 GMT
        Subject: CN=dc0b48dfab28cbbe53f9b62a66677f200114abe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:78:aa:3d:a9:f6:46:ef:9d:ce:53:2c:a1:
                    4f:15:ec:2d:f9:88:4d:ba:eb:50:eb:f5:48:b9:d6:
                    20:dd:70:fb:25:f8:42:f1:17:0e:7a:d8:79:8c:a0:
                    3a:f0:15:07:d0:16:43:0b:b4:09:d8:54:c2:d8:f8:
                    2d:f0:58:40:5e:6b:fb:41:9c:4d:60:3c:b7:95:ff:
                    2c:2a:23:4a:08:4a:12:02:fa:ed:76:95:cc:91:38:
                    08:e2:dd:35:39:b6:a5:7f:8b:4d:42:66:13:38:af:
                    a2:d6:8d:32:ad:43:8a:f4:88:8b:39:25:a7:56:4e:
                    c1:83:6a:53:a1:4a:46:84:20:5d:be:ab:69:49:c9:
                    36:26:b5:b6:ea:cd:1f:dc:ee:d4:bf:9b:0b:56:d3:
                    c9:43:b0:8d:40:5e:77:68:c7:b0:66:47:c9:b2:58:
                    4d:ef:39:1d:6b:d0:3f:ed:30:e4:eb:3a:64:22:da:
                    09:bf:6d:87:7d:7c:0e:9a:a0:ed:ad:06:8e:37:95:
                    5a:33:95:b7:d8:05:5f:e2:99:ec:91:e9:d3:2c:b2:
                    20:5c:7a:87:6c:7d:3f:8f:d4:2c:fc:59:a3:99:23:
                    20:6c:fe:0a:44:ef:84:30:4a:d3:a7:48:6e:64:d1:
                    8e:30:5c:14:3d:58:bc:31:3d:8a:8d:d0:d3:42:b3:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:48:DF:AB:28:CB:BE:53:F9:B6:2A:66:67:7F:20:01:14:AB:E1
            X509v3 Authority Key Identifier:
                keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e9:b1:dc:20:18:23:80:f3:96:5b:61:fd:33:c0:56:88:a4:
         0e:bd:18:e6:98:6b:e3:54:4c:8a:7b:1f:36:7d:12:7f:43:3c:
         07:99:eb:52:df:20:58:e5:92:ed:c9:18:50:69:92:63:55:ec:
         38:c1:64:03:c1:9a:7a:14:88:42:63:bc:27:5a:5f:83:57:37:
         b0:e0:22:78:e1:ad:e6:3e:3a:2c:89:9e:f4:ec:88:ad:9b:e2:
         18:57:10:42:69:5b:9f:48:06:55:ef:04:2f:3f:c9:05:f0:33:
         bb:d9:33:e0:b7:a3:cb:98:de:4f:76:5c:73:51:d2:4c:9a:d2:
         80:29:df:25:42:4a:ca:87:bb:62:b7:77:a2:2d:97:a6:de:0e:
         d3:72:1f:eb:79:88:b3:05:69:15:dc:b2:fd:8e:56:e2:e1:6f:
         21:eb:01:a6:23:c4:57:85:99:05:06:82:cd:bc:42:70:7b:a0:
         42:54:ad:48:bd:7e:8a:dd:4e:fe:1b:c0:6a:64:bf:32:4c:33:
         c7:b2:d1:36:7f:78:ab:01:2a:df:bb:0c:30:15:db:99:b3:d8:
         8c:e3:6f:74:1d:c0:d9:90:89:b1:5c:eb:fc:a0:b8:4b:c2:3d:
         70:16:7e:7d:8c:c5:3a:64:bc:ef:08:98:15:36:b3:cc:92:4c:
         4a:3e:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:06 2026 by rpki-client