Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          he7FYXR5T8fkU9MrzxxO/cEx0D1OBIMs5r84r+tJxD0=
Subject key identifier:   50:BB:15:6D:C7:F3:B7:A3:81:32:AF:BF:44:B4:79:A2:3D:6B:39:35
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       019E2FCD4F79CE26A4B127760B4821BA6B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 08:00:44 +0000
Manifest this update:     Sat 16 May 2026 08:00:44 +0000
Manifest next update:     Sun 17 May 2026 08:00:44 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: pPRF3IPyFJvQyErDNrDoyxUWuB3D+bauMtD1Z0xI9kA=)
                          2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:4f:79:ce:26:a4:b1:27:76:0b:48:21:ba:6b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: May 16 08:00:44 2026 GMT
            Not After : May 17 08:00:44 2026 GMT
        Subject: CN=50bb156dc7f3b7a38132afbf44b479a23d6b3935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ab:89:00:03:b2:62:a4:d6:ca:3e:88:9c:bb:
                    9a:88:97:7a:70:37:a0:e9:ed:d8:48:bc:ea:1e:50:
                    37:4e:45:8b:05:91:ad:25:b6:c5:05:a8:90:70:54:
                    46:b7:33:c4:44:07:58:47:bb:2c:df:db:02:92:5b:
                    0c:5d:40:24:f3:58:39:66:74:b5:11:a9:a7:59:d2:
                    29:b1:b3:3b:3b:1c:d1:a3:2d:4d:20:02:d2:5c:65:
                    70:a5:18:3c:1a:fc:5e:76:cd:fa:2c:19:84:62:c0:
                    42:d9:dc:ce:40:63:2e:11:c3:59:70:79:6a:30:f9:
                    ca:c9:37:be:a2:19:45:98:c4:0d:31:51:ee:9f:9b:
                    28:6b:d6:d6:ed:83:c9:bf:e7:f1:d2:03:e7:c2:36:
                    b3:a7:ef:01:dd:4d:62:44:93:d6:36:8c:13:a8:fd:
                    2f:83:84:cd:3c:03:68:38:94:1c:c4:b6:80:12:4f:
                    8d:f8:fc:51:41:13:82:af:f9:ae:3e:38:1a:74:3b:
                    d4:aa:1b:dd:6e:80:54:7c:cf:02:8f:cb:d6:20:37:
                    42:25:e7:02:20:2f:bb:79:62:a0:04:39:34:ec:6d:
                    b1:e2:82:6b:68:b0:4b:79:17:3a:bf:27:a4:c7:68:
                    6e:65:6b:d2:97:4d:7f:38:75:e5:51:3b:f0:fc:88:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:15:6D:C7:F3:B7:A3:81:32:AF:BF:44:B4:79:A2:3D:6B:39:35
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:69:a3:cc:9e:e9:8f:65:1f:e2:8f:ec:94:47:cd:46:7c:
         a3:14:31:88:4a:43:c0:29:3b:41:72:a0:1b:f0:cb:01:01:e5:
         b0:f2:b6:be:ba:f1:88:71:4c:3f:b2:bc:db:cb:73:2a:20:54:
         69:62:e9:a7:54:86:c1:29:f5:4f:c7:55:07:fb:8c:40:fb:e4:
         bd:09:2e:5f:d4:5c:60:cd:59:f9:21:d1:15:30:21:15:aa:ca:
         6b:55:dd:36:23:5d:aa:7e:5d:6e:00:2a:02:79:97:fc:35:ba:
         66:c1:a7:1b:9b:1e:bd:14:df:8f:df:40:2b:4c:49:81:92:6c:
         1c:b9:62:ea:f0:da:0d:4e:d5:2c:39:1a:db:d6:8d:6f:8e:c8:
         58:4c:a6:99:70:8a:6f:b2:64:9e:59:4c:4a:d7:05:39:5d:c8:
         fe:ba:fe:ba:ff:28:87:b5:e5:3a:f1:e1:14:73:9b:00:55:95:
         98:fb:77:39:80:4a:56:ad:c4:2c:d6:f5:95:cc:c1:24:06:54:
         1e:c8:05:b5:15:bd:6a:21:19:ba:9e:07:1c:0e:2f:7d:f0:a0:
         4f:13:f6:0d:f7:bd:52:32:bf:88:f8:a6:57:1e:5f:ec:66:25:
         91:26:66:38:5c:60:1f:e4:f3:8c:7a:35:71:37:9e:27:ac:46:
         01:b2:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:30 2026 by rpki-client