Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          Cc9aZ7ysq/tWgRRtkOGXx5La/iRDdCKugiumCNRTRY0=
Subject key identifier:   2A:9D:4C:22:D3:C6:3B:D7:0D:CF:BF:06:9A:9F:39:AF:1E:DD:F3:10
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019EC25BAB81FCE3D9C1FA980E2E85557EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 19:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:47 +0000
Files and hashes:         1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
                          2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: 2I9DRB42C71TSnOjr2dSIjx6PYpzIDVFF24Dg2FwxPA=)
                          3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
                          4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
                          5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:ab:81:fc:e3:d9:c1:fa:98:0e:2e:85:55:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Jun 13 19:00:47 2026 GMT
            Not After : Jun 14 19:00:47 2026 GMT
        Subject: CN=2a9d4c22d3c63bd70dcfbf069a9f39af1eddf310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:61:5e:1f:cb:67:41:60:e4:66:0b:35:af:
                    59:a4:44:c6:b7:c7:73:a0:12:29:df:da:cf:d3:e0:
                    bc:64:c3:f1:fe:5b:89:54:e3:ad:ef:f3:d8:29:e1:
                    c0:19:d8:0d:9a:a3:89:8a:d7:c6:6c:ba:20:b8:b1:
                    b0:7d:d0:68:ea:8f:74:c8:5b:ad:b7:be:17:f0:a5:
                    8d:b2:37:03:12:ca:48:80:75:7f:65:be:b3:17:6d:
                    21:b4:9f:82:ab:56:20:04:b5:d6:ba:cf:70:cd:89:
                    a4:a7:2b:e8:9a:8e:6f:74:db:45:d6:9f:92:e1:0e:
                    de:f2:65:a2:63:d4:6f:7b:aa:9c:da:c9:04:2a:cc:
                    40:1f:cf:f9:66:6d:4b:87:47:3c:c9:79:4a:83:b2:
                    ad:18:e4:92:01:58:cf:09:2c:65:c3:55:14:9e:77:
                    5a:41:bd:17:66:c1:f3:25:c8:60:79:48:42:67:00:
                    b7:3e:35:36:bd:93:97:2b:c4:05:71:6e:d2:03:c9:
                    b9:e5:69:e2:ad:f6:90:d1:ad:f0:e8:75:ee:be:6b:
                    57:87:9f:8f:61:74:b6:a9:ba:49:b2:2b:9f:f2:a2:
                    77:e3:70:a5:1f:20:b7:d0:72:6c:0d:bd:71:d9:07:
                    da:f7:e0:cb:da:8f:f0:db:c9:c9:6d:ae:f6:f0:28:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9D:4C:22:D3:C6:3B:D7:0D:CF:BF:06:9A:9F:39:AF:1E:DD:F3:10
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:05:02:52:72:e5:c6:e3:cb:f0:1e:a4:e5:55:18:f8:d7:
         1f:84:42:66:90:3f:b7:77:a3:0a:02:a2:d0:25:1b:c3:f5:5c:
         43:ac:b0:e5:75:3d:f2:31:25:66:31:23:22:a3:01:1f:f8:af:
         7a:b3:a5:ae:52:6a:0f:fb:e0:65:9f:1f:c2:a8:29:30:11:3a:
         e0:4a:20:3e:39:f7:94:d2:2c:f4:dc:9b:57:5b:89:9c:a4:90:
         0f:26:40:be:d4:18:be:ce:21:ce:93:8d:01:f7:c7:4e:37:51:
         7d:0e:bc:90:27:c9:d8:93:0d:84:ef:b2:dc:f3:3c:c8:b5:d8:
         82:f5:34:dd:1f:ed:09:10:ee:0a:c5:a7:e7:50:20:a2:5f:ff:
         64:cb:b6:9e:41:81:2a:b7:6d:dd:55:5a:e5:ff:b8:45:e6:99:
         ee:5a:02:fc:ba:71:b7:8b:10:51:97:d9:47:59:77:3a:00:13:
         50:40:c2:aa:1a:3e:f5:73:5b:d1:e0:5b:17:89:9a:a1:cb:65:
         fd:3f:08:8a:35:30:1b:85:29:f9:d7:18:e5:f4:1b:ab:c4:2a:
         e7:32:9b:48:39:db:06:8a:40:45:db:25:dd:a3:a5:ad:34:81:
         9d:34:a2:16:b5:84:c5:ab:fe:1e:64:0f:f8:e6:20:7a:04:b4:
         74:f5:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:19:48 2026 by rpki-client