Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          fW1yGAdewcS3rNudd2dajlC9nvooaDUGs0LWz75n9yU=
Subject key identifier:   80:7E:DD:91:5E:76:D3:19:34:7C:40:B9:05:81:88:B2:61:DB:BD:4B
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       019DD0F62B9C0680FD72EFDE2576951EB099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          12E5
Signing time:             Mon 27 Apr 2026 22:01:27 +0000
Manifest this update:     Mon 27 Apr 2026 22:01:27 +0000
Manifest next update:     Tue 28 Apr 2026 22:01:27 +0000
Files and hashes:         1: 1-5irUW2h7Wp7EQ54nX7slyi3BNc.roa (hash: XVMImneJ+lt7Bh7aCUyU0VyaVfMOa36wyhi799Wx0XU=)
                          2: BwmCQS6rN4At5ff2VmaD4STv4Jc.roa (hash: Rrzqqm/u8oeldAyFqyBciHWz0IVXTmCxkQZ3y1YdadI=)
                          3: CCfgr4eEdWWKXSmYk8750hTSQJY.roa (hash: 28b5oMKVu7iwHMF/tBQt5wwDbO4pBQ9dtOPJ+Gi5j1E=)
                          4: STPdIX6CrYyfr1vohrww-wRb0C0.roa (hash: 0wlU1vJs00Ncb+MXC6wTTIKtW/iGTwibj2nEn68ZdBM=)
                          5: WCwVS32yfEcbN2t7Mkn04jWo3yw.roa (hash: tUEpiayS06Kl5jVQDSn5LTrN0f1T2b7gMrtuhq3r7OA=)
                          6: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: k8dXkj6gOyo/UA2I69jilIie2DD8zYw6+w+Bqar9RGc=)
                          7: pHThvhBuIAH7CfCjGAtgiWcsLx8.roa (hash: B3DgLG5spA8IxXzWz1dcTgpsIhyQkmRrSy9ObmSouY4=)
                          8: ugU8Y9FG84b1BugV6DQZOEYlSC4.roa (hash: yfTItoNu5W38zOpZyo+VODcCsGUnE/HhxvLYKSZ4EU8=)
                          9: yTs6YqC9fER5Y_s7b4sZKV4fxNM.roa (hash: K9GMU5+gUx1MkYLqtMzQhxnG0+5DQyeWPgJU54TbrTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:f6:2b:9c:06:80:fd:72:ef:de:25:76:95:1e:b0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Apr 27 22:01:27 2026 GMT
            Not After : Apr 28 22:01:27 2026 GMT
        Subject: CN=807edd915e76d319347c40b9058188b261dbbd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:b6:39:21:4f:3b:24:1f:81:85:9f:da:93:
                    34:1a:ab:be:eb:7c:43:9b:21:3d:19:33:b9:e5:d2:
                    cd:f0:ed:c0:1f:a6:c9:09:3b:dc:46:06:2c:55:52:
                    0e:a4:10:91:19:99:f9:83:37:71:e6:4d:4f:30:b0:
                    bf:da:34:2d:de:19:42:df:61:ba:cd:0b:89:37:c7:
                    4d:fb:7f:cb:c7:33:90:ca:97:c3:71:59:32:26:82:
                    1e:f8:3c:1f:a9:61:7f:c5:f4:40:13:9a:8e:40:eb:
                    df:4c:8a:36:06:7d:53:a6:04:eb:6f:6a:02:1f:b4:
                    57:4a:69:d6:54:7c:c1:52:fe:53:ee:2f:30:b9:84:
                    fe:38:b3:33:fa:08:f6:19:db:87:4d:56:8e:0f:cf:
                    8f:2b:f5:14:ca:b1:2e:c2:a5:e5:68:02:5f:bc:66:
                    b5:3e:b2:cd:8f:f8:b0:f7:f8:57:1e:fb:a2:7c:93:
                    df:af:47:73:59:d1:18:41:8a:b5:f1:e4:89:ef:83:
                    02:c6:9a:96:98:5f:6a:7d:9d:92:52:51:48:9a:ff:
                    89:31:1a:da:1e:ca:d6:12:d5:5b:c7:ef:1b:34:22:
                    82:7e:1b:b5:90:e0:c1:69:36:f7:85:62:08:38:0c:
                    28:6a:0c:02:1f:ef:d7:8b:11:ac:bf:f8:1b:b9:aa:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7E:DD:91:5E:76:D3:19:34:7C:40:B9:05:81:88:B2:61:DB:BD:4B
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:66:56:90:8b:12:df:89:68:a2:be:c0:30:4e:db:7a:55:0f:
         89:ec:b9:a9:40:5b:67:74:16:6a:84:18:a7:0b:01:70:29:e5:
         27:a1:52:1f:3e:03:5d:fb:bf:a4:e6:f3:c3:ba:a2:7a:08:78:
         4d:f6:fc:75:17:0b:9f:eb:4e:04:3c:0d:84:4f:93:70:1d:89:
         14:4e:f6:b0:3d:78:85:66:1b:ef:e6:d0:20:83:a0:8b:bd:45:
         64:3d:a2:01:dd:7f:e2:4f:b3:d6:12:3a:2e:9e:3f:59:e2:48:
         9d:64:14:67:b2:f9:d2:19:b1:b4:66:b3:54:09:0a:54:b5:2d:
         8d:9b:d0:b1:c0:7f:94:b8:4a:c9:42:66:25:b1:9e:55:1e:d8:
         71:1f:fa:6b:25:42:fc:5d:77:01:d8:60:e4:dd:24:8e:5a:01:
         6a:92:10:cb:9d:2b:cb:cb:37:f0:43:a9:b2:89:d9:61:17:f2:
         f2:cd:b3:f9:d4:3d:6e:a8:0e:00:c6:1b:f2:4e:40:67:d2:1a:
         b3:62:54:5a:1b:a3:6e:e9:b0:32:73:45:f4:55:bf:b8:6f:ec:
         28:a9:e5:de:e2:5c:a6:2b:b7:49:8b:5e:d9:28:0d:83:56:73:
         f0:46:45:2c:7c:3c:d3:bf:ad:a1:a6:e7:0f:08:01:8b:e3:95:
         3d:0f:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:12:10 2026 by rpki-client