Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File:                     ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier:          esFBjVVE5L+P3KjY3u9f1gemSgRX++NbLMttg3QjdLk=
Subject key identifier:   84:C7:BA:4C:EB:D7:08:B7:8D:AD:BD:B8:F1:7A:77:4E:F8:D0:20:B2
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer:       /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial:       019D39AF3B6D24874370C412F53DA05D9633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 13:01:18 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:18 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:18 +0000
Files and hashes:         1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: eomJdbz5YJwF38SgIDO9Mbjzv8v4yWzhWbJkPkY6ia0=)
                          2: s6W8XaPi6fAwOIAgY3aMpDeIa6g.roa (hash: Nlq5/Q8dZX4aJdFT62wfCPIirNtyzobB0dAY9K3L3No=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:3b:6d:24:87:43:70:c4:12:f5:3d:a0:5d:96:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
        Validity
            Not Before: Mar 29 13:01:18 2026 GMT
            Not After : Mar 30 13:01:18 2026 GMT
        Subject: CN=84c7ba4cebd708b78dadbdb8f17a774ef8d020b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:cd:eb:3d:85:f8:ba:42:05:04:10:c4:c7:
                    fb:66:c2:68:a7:94:4e:d4:fa:d5:17:18:1d:9f:6a:
                    ae:98:45:1b:92:4d:cd:e7:ca:e6:15:81:4d:aa:6b:
                    08:d8:21:cd:40:34:00:46:0b:96:a5:61:61:82:af:
                    28:43:62:8c:a0:1e:93:7b:90:63:b7:31:94:b4:51:
                    5a:12:c1:d5:03:ae:b5:aa:e8:d1:e1:31:d5:2f:bc:
                    c7:5f:9e:1f:18:fa:65:79:b5:ff:ba:b2:98:62:79:
                    2f:36:ff:0c:9f:8d:c3:81:bf:af:66:36:81:ef:20:
                    f6:ba:dd:18:59:fc:82:26:b2:44:c8:4e:39:84:b1:
                    f3:16:26:9e:28:9d:91:a7:8e:bd:78:40:9b:50:e9:
                    0c:00:27:e5:de:18:8e:b2:78:0d:26:b7:b4:ce:f3:
                    1b:4f:be:31:62:d6:17:50:75:60:bf:12:49:9a:24:
                    a1:22:2d:4f:ca:dc:b8:86:d0:9d:f7:5c:16:f3:db:
                    2b:77:20:63:9e:19:42:90:4d:53:9b:4e:eb:ff:fa:
                    52:0d:d6:55:ca:44:86:df:cd:5e:8e:e5:6b:4e:a5:
                    45:f3:91:1a:fe:51:60:b0:9f:e6:d1:03:8c:05:b1:
                    c0:14:27:cb:5c:23:66:7d:2b:75:c1:a0:6d:a8:33:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C7:BA:4C:EB:D7:08:B7:8D:AD:BD:B8:F1:7A:77:4E:F8:D0:20:B2
            X509v3 Authority Key Identifier:
                keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:bc:b6:a9:43:d0:e4:b1:15:57:d8:1a:d6:8d:fa:37:1d:13:
         69:3f:62:4f:39:c7:69:3d:7f:ab:56:ca:94:59:bd:61:f0:a0:
         ad:94:4d:f3:3e:3b:72:1e:87:0b:2d:a5:bc:48:3f:0e:a9:b3:
         f0:48:2f:b8:c7:bc:90:44:0d:c0:e6:99:a9:d1:cd:94:a3:5f:
         32:b2:e7:2a:d7:54:38:d6:95:35:73:8c:d7:6b:38:f3:8c:41:
         6a:89:d9:e5:c0:9e:1b:7b:a9:8d:5b:fe:fe:43:d5:e9:cc:2f:
         d6:2a:20:37:a8:fd:6f:6f:51:27:5a:65:db:34:ba:84:3a:06:
         fe:74:1c:d4:c1:65:32:9a:41:9a:ba:bf:6a:70:14:34:f6:83:
         88:ef:22:53:3f:6f:2d:f2:c8:b6:ea:03:70:92:db:a5:62:97:
         27:43:af:f1:88:ff:f0:c1:9e:4b:d9:fc:ee:39:1e:04:6a:bb:
         9d:fa:a6:30:2f:3f:a1:db:d5:12:6f:03:38:1f:d4:80:77:ef:
         96:47:32:a8:d6:06:ec:73:95:da:f1:a1:53:6b:c7:da:78:11:
         6b:cc:69:c8:3c:b3:88:29:29:73:61:c4:a3:28:d8:15:80:7f:
         21:2e:83:2a:e3:c3:75:ce:0a:b9:0f:bf:d1:26:cc:f4:2e:54:
         7c:04:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:53 2026 by rpki-client