Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File:                     EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier:          cKEuoZW3Om/f+joHWb8EG6JVv83nyvD+mdgI5UUNvr8=
Subject key identifier:   16:8C:7F:F3:87:37:38:D0:F3:17:2B:0A:63:A2:0A:79:B1:A9:05:35
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer:       /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial:       019D9BBEAA34F41AFAE790A00F44C3D3FDCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number:          05DE
Signing time:             Fri 17 Apr 2026 14:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:57 +0000
Files and hashes:         1: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (hash: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno=)
                          2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: yFHZn/ZCdZFYD5Zc0xxvuqMeFqWXG70XeeTJiosozVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:aa:34:f4:1a:fa:e7:90:a0:0f:44:c3:d3:fd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
        Validity
            Not Before: Apr 17 14:00:57 2026 GMT
            Not After : Apr 18 14:00:57 2026 GMT
        Subject: CN=168c7ff3873738d0f3172b0a63a20a79b1a90535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:40:97:88:b2:4c:82:23:3a:0d:ce:27:40:
                    b9:29:da:c0:7f:f6:9f:6a:47:d6:5c:e1:b6:2d:05:
                    7e:21:2a:9a:44:f0:7b:68:6f:83:d0:b5:aa:9a:67:
                    4a:cb:4c:1f:c3:f6:56:a2:27:53:db:72:ec:f7:bc:
                    93:da:b3:63:6d:1b:5e:32:d7:29:37:fb:b6:e5:b4:
                    6c:ed:a1:d2:ce:35:a2:4e:8b:f9:5a:2c:e2:f4:00:
                    d9:6f:33:90:39:91:d6:9e:34:c3:94:0c:22:d5:83:
                    77:2e:d2:f2:7b:43:1f:84:2c:3c:98:ac:5c:ed:4f:
                    c0:60:a1:03:d7:b2:83:94:84:c3:93:63:21:b4:63:
                    d8:cf:43:c7:d0:51:6a:1b:31:f2:54:7d:cf:51:1f:
                    ef:60:ad:b3:bd:1d:e7:5a:81:9f:2b:6c:4f:18:45:
                    19:4a:5f:0f:a3:30:87:08:03:85:61:56:a2:f3:a3:
                    f7:fc:35:fe:e7:91:a3:06:9a:eb:68:f5:f3:6a:37:
                    6d:89:29:e7:30:49:4a:15:26:da:00:13:be:6c:2a:
                    f4:64:a7:43:c3:14:dc:91:e2:f9:b3:9f:b7:12:19:
                    a3:13:72:be:70:e3:c8:5d:aa:ab:16:1c:29:f7:45:
                    a0:e7:d4:c9:47:e4:de:59:97:ab:fb:aa:25:79:b3:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:7F:F3:87:37:38:D0:F3:17:2B:0A:63:A2:0A:79:B1:A9:05:35
            X509v3 Authority Key Identifier:
                keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:63:1d:62:3b:99:a3:4f:52:c6:54:53:e0:77:25:2b:f8:
         ce:57:32:45:a8:a3:e2:51:d5:9f:44:b4:b3:86:c2:f0:58:00:
         14:fa:a8:66:0e:67:57:a0:1c:32:1a:1a:91:db:64:da:2f:df:
         d2:14:0b:91:98:68:94:7b:d4:3b:12:cd:af:45:dc:8f:ff:cf:
         bb:9c:38:64:c0:cf:2f:cf:79:07:2b:d9:26:10:ea:44:1d:9b:
         8e:80:54:34:80:81:8f:da:e9:af:74:39:b5:c2:81:22:5b:f2:
         26:43:3c:da:78:ff:80:0b:e7:87:b6:5e:c3:d4:06:ab:e7:63:
         f3:7c:eb:46:43:ea:34:10:70:e3:6f:1a:f6:25:2f:4c:da:a7:
         d3:5b:4c:e2:9e:93:a4:18:71:22:1b:2e:fd:52:3c:aa:19:d5:
         d8:65:c2:0c:63:e6:82:39:f8:db:8c:5b:76:ab:4b:20:1a:97:
         55:95:e1:25:9f:fc:06:77:ee:4b:14:45:34:0e:90:06:ae:2f:
         0f:1e:44:22:d0:6d:30:8e:e2:60:3e:c5:0a:b0:ec:1d:06:f8:
         b6:46:64:df:dc:86:3c:6c:61:d7:d3:2a:4c:71:ac:c0:24:eb:
         f4:b9:b2:bb:1c:08:25:4b:50:43:64:bc:1c:26:cc:78:c8:70:
         0e:64:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:00 2026 by rpki-client