Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          8TLwfNiVbIH37fHmcBVWYSsJqO7Qj5Di+cWqeCCoeuY=
Subject key identifier:   16:F5:5A:2A:57:9C:BC:D9:87:00:A2:90:51:61:88:F2:A9:3B:E5:DF
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       019EBF5AF73B673E5B8F700291DD3EA592C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 05:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:10 +0000
Files and hashes:         1: 9i5swc1J4tp7c1o23nouETORP2E.roa (hash: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg=)
                          2: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: XTn1E770MA6fyxLt23PMkk8rXXX3gCRY2+DQUVJLR94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:f7:3b:67:3e:5b:8f:70:02:91:dd:3e:a5:92:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Jun 13 05:01:10 2026 GMT
            Not After : Jun 14 05:01:10 2026 GMT
        Subject: CN=16f55a2a579cbcd98700a290516188f2a93be5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:a2:40:97:be:af:09:5b:30:a8:4d:f0:d2:
                    77:a1:e2:e2:b9:e9:f2:4d:b3:f9:e8:a9:b3:35:0d:
                    d2:27:aa:fe:75:f6:ef:d0:da:2b:85:7f:db:9f:c7:
                    aa:5b:e7:e5:57:ef:9f:27:f9:ec:3e:d2:aa:36:ad:
                    e9:78:dd:ed:eb:ee:06:fc:2d:01:6c:9b:5c:0f:2c:
                    39:bc:58:1c:f1:10:61:c7:4c:37:3f:e0:f0:a7:5c:
                    d0:27:71:0f:cc:6e:68:a5:e0:c0:65:11:41:08:6d:
                    c9:87:96:1c:76:2a:09:76:36:fb:50:bc:0f:75:4e:
                    26:b1:82:c2:4f:ae:fc:83:51:3a:39:1b:35:14:4c:
                    80:45:80:e3:7e:f1:c5:5c:20:f1:e2:cf:34:de:e5:
                    f0:fb:7b:63:74:83:49:83:68:4f:69:2f:fa:8e:d3:
                    dd:39:4b:d0:a9:07:ad:bc:f5:b6:51:e7:db:40:4d:
                    e6:e8:90:c4:db:fc:1d:ae:eb:c1:c4:1a:a2:96:54:
                    b0:ee:e7:63:f7:88:d5:de:c2:06:2f:62:52:0f:df:
                    ce:52:03:1f:8b:e8:c4:eb:ff:dc:8d:73:bb:72:db:
                    bb:50:c0:e0:1a:98:41:59:df:71:22:ab:7c:e6:a5:
                    0a:a9:28:33:8f:a2:31:e1:e4:fe:de:54:ef:f2:ea:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:5A:2A:57:9C:BC:D9:87:00:A2:90:51:61:88:F2:A9:3B:E5:DF
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:fe:0f:5f:34:30:ab:d3:7c:bd:2a:0e:46:70:7e:66:2a:
         41:11:74:fa:40:5c:91:67:95:ea:61:60:ee:49:7b:ef:1c:6a:
         61:cf:e2:c3:1f:8b:96:bc:f1:25:33:72:fe:17:1b:a7:47:c2:
         29:7b:f1:d9:0b:b9:e3:df:7d:a7:98:e5:8d:f3:e8:82:01:38:
         bf:58:e4:6c:34:d3:6b:ad:2e:1d:78:28:46:33:03:20:e2:9f:
         08:79:94:b1:6f:00:d6:92:57:27:ac:59:6f:d8:93:59:83:88:
         88:18:5f:2f:6c:0b:69:e2:bd:f5:7a:1b:60:9d:ac:78:04:fe:
         fb:25:ea:32:59:95:dc:be:59:fa:36:c2:57:d0:6c:4f:51:42:
         c1:8f:23:1c:24:03:b3:b5:4e:fd:e9:97:77:26:c9:e8:78:ec:
         60:e2:de:0c:ec:e5:2a:7e:b0:19:0d:3d:42:a5:70:3d:1c:7e:
         24:2e:eb:de:39:fd:e0:3e:77:5d:bc:e9:0e:63:ed:c4:7d:d6:
         ae:6c:81:21:a6:9c:81:a5:a4:0a:e0:3e:dd:cd:6e:e7:8d:25:
         ca:04:6b:8a:11:03:d7:48:a2:72:7e:4a:7c:39:37:6a:3d:9b:
         69:c7:21:c2:ed:4d:44:94:25:08:0d:fd:38:6b:4d:13:7b:a8:
         df:2b:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:21 2026 by rpki-client