Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
File:                     ET70dCewN2HrwTgIYtCGlQg1Mak.mft (raw, json)
Hash identifier:          b8Fpxc3CAX7gafv3INwRrW7/rwrVN48Lp4F+hnSJSyM=
Subject key identifier:   AA:CE:D5:ED:2B:A8:69:9E:64:F8:98:6A:CC:0C:E7:E1:BF:3C:74:05
Authority key identifier: 11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9
Certificate issuer:       /CN=113ef47427b03761ebc1380862d08695083531a9
Certificate serial:       019EBEEC6646B25B0E1A027F7E6F2B414167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
Manifest number:          08
Signing time:             Sat 13 Jun 2026 03:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:24 +0000
Files and hashes:         1: 2TSFyxMXK4Q3HPoC0vwNNzTuiRU.roa (hash: go5QJk7M8VyLFJ9jDXX4X6U9kMJqLf3Q5kfqrQ3kpDA=)
                          2: ET70dCewN2HrwTgIYtCGlQg1Mak.crl (hash: CC7Lz7NbEzLwy040aJrEVvH3kdvvIzISOE5SUG/R+e8=)
                          3: oZs7HrbOmzBdrE0fhWtWm0eGiIw.asa (hash: dCbhnqDGa30G9Bjg9VsAM0H8YxTTVOQeaeX30kUtF/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:66:46:b2:5b:0e:1a:02:7f:7e:6f:2b:41:41:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113ef47427b03761ebc1380862d08695083531a9
        Validity
            Not Before: Jun 13 03:00:24 2026 GMT
            Not After : Jun 14 03:00:24 2026 GMT
        Subject: CN=aaced5ed2ba8699e64f8986acc0ce7e1bf3c7405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:69:fb:98:be:60:57:0c:9f:11:84:e5:65:
                    a9:57:c7:bc:e9:1a:6d:c3:a2:b9:08:de:e3:c2:2a:
                    59:82:67:db:fe:67:9c:7f:f5:1c:bc:26:28:73:b7:
                    68:d6:99:13:3c:30:9e:de:8a:08:8a:18:43:80:80:
                    a3:03:9d:97:7f:31:0b:0a:af:6b:3b:35:e2:33:77:
                    f5:45:24:0a:cf:cc:0e:0c:8f:3a:b5:fe:62:f9:93:
                    f6:33:b1:cc:56:ac:8b:a9:d7:60:ea:1a:97:62:47:
                    ba:69:5b:54:22:14:ec:41:28:da:d2:82:79:50:94:
                    b7:d9:3d:35:c1:93:12:88:cb:ec:83:e8:8d:1a:b4:
                    fe:fa:a0:4e:3e:42:d8:6c:6f:05:ec:6b:56:a4:f4:
                    37:52:47:f5:35:fd:03:7a:a3:6a:cc:9e:4c:15:de:
                    5c:84:08:50:88:17:22:ac:c7:63:ac:0e:44:cc:f3:
                    a0:d1:ee:96:d8:26:93:0b:b9:5e:32:2d:d6:10:43:
                    8f:db:5d:97:33:89:89:e7:ab:28:39:e1:1b:8a:17:
                    8d:d1:88:56:f7:31:14:cc:ef:96:82:bb:63:d5:c8:
                    99:ec:59:c3:5d:29:40:11:27:08:a3:2c:69:ef:9a:
                    ec:f4:e4:dd:b3:04:65:0e:b7:a9:1b:e5:ab:d7:93:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:D5:ED:2B:A8:69:9E:64:F8:98:6A:CC:0C:E7:E1:BF:3C:74:05
            X509v3 Authority Key Identifier:
                keyid:11:3E:F4:74:27:B0:37:61:EB:C1:38:08:62:D0:86:95:08:35:31:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET70dCewN2HrwTgIYtCGlQg1Mak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/69ecce-3f20-4b7e-9a3f-4095d44319c0/1/ET70dCewN2HrwTgIYtCGlQg1Mak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:3d:92:56:ef:e3:2e:33:04:c3:66:15:ca:25:0d:41:49:
         07:5f:b1:a6:2f:b6:53:6e:54:ce:3d:00:dc:90:79:eb:68:be:
         1e:93:f3:41:ff:99:7b:65:cd:55:a6:e3:e7:49:68:8c:19:3b:
         d6:e2:92:a4:fd:ed:93:e5:45:35:31:f4:2f:61:ca:b6:06:5b:
         28:9c:a1:70:f2:70:b1:40:1f:f1:57:5d:b1:bf:82:e9:94:e3:
         92:aa:93:5c:1a:fc:be:1c:84:dd:17:c4:fc:e8:35:b9:1c:7c:
         2a:d4:63:54:99:b6:af:88:2f:e5:40:4c:a1:56:cf:b2:b6:81:
         08:24:b8:78:36:6f:84:01:e3:a6:07:59:79:59:aa:95:ec:ce:
         bb:17:3d:e1:ae:24:21:81:b5:ee:09:f3:53:d7:71:a3:7f:27:
         08:62:8d:63:0a:e4:e1:ba:ba:5f:27:85:71:a2:b3:c9:c9:9a:
         c6:62:a0:c1:23:4a:f9:0a:83:e5:11:85:60:2a:a5:19:d6:fb:
         5c:a2:79:fd:d3:b2:05:e9:f6:8b:9d:c4:c9:5c:56:a5:69:43:
         85:10:a7:ad:5e:f0:c9:ac:1e:cf:38:18:b7:e4:1a:bc:af:4e:
         0f:99:00:c3:96:a2:9e:f3:ce:09:b3:e2:25:35:7b:28:1f:54:
         2e:81:59:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7GZGslsOGgJ/fm8rQUFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VmNDc0MjdiMDM3NjFlYmMxMzgwODYyZDA4Njk1MDgz
NTMxYTkwHhcNMjYwNjEzMDMwMDI0WhcNMjYwNjE0MDMwMDI0WjAzMTEwLwYDVQQD
EyhhYWNlZDVlZDJiYTg2OTllNjRmODk4NmFjYzBjZTdlMWJmM2M3NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRFp+5i+YFcMnxGE5WWpV8e86Rpt
w6K5CN7jwipZgmfb/mecf/UcvCYoc7do1pkTPDCe3ooIihhDgICjA52XfzELCq9r
OzXiM3f1RSQKz8wODI86tf5i+ZP2M7HMVqyLqddg6hqXYke6aVtUIhTsQSja0oJ5
UJS32T01wZMSiMvsg+iNGrT++qBOPkLYbG8F7GtWpPQ3Ukf1Nf0DeqNqzJ5MFd5c
hAhQiBcirMdjrA5EzPOg0e6W2CaTC7leMi3WEEOP212XM4mJ56soOeEbiheN0YhW
9zEUzO+Wgrtj1ciZ7FnDXSlAEScIoyxp75rs9OTdswRlDrepG+Wr15ONTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrO1e0rqGmeZPiYaswM5+G/PHQFMB8GA1UdIwQY
MBaAFBE+9HQnsDdh68E4CGLQhpUINTGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2Yt
NDA5NWQ0NDMxOWMwLzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82OWVjY2UtM2YyMC00YjdlLTlhM2YtNDA5NWQ0NDMxOWMw
LzEvRVQ3MGRDZXdOMkhyd1RnSVl0Q0dsUWcxTWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm89klbv
4y4zBMNmFcolDUFJB1+xpi+2U25Uzj0A3JB562i+HpPzQf+Ze2XNVabj50lojBk7
1uKSpP3tk+VFNTH0L2HKtgZbKJyhcPJwsUAf8Vddsb+C6ZTjkqqTXBr8vhyE3RfE
/Og1uRx8KtRjVJm2r4gv5UBMoVbPsraBCCS4eDZvhAHjpgdZeVmqlezOuxc94a4k
IYG17gnzU9dxo38nCGKNYwrk4bq6XyeFcaKzycmaxmKgwSNK+QqD5RGFYCqlGdb7
XKJ5/dOyBen2i53EyVxWpWlDhRCnrV7wyawezzgYt+QavK9OD5kAw5ainvPOCbPi
JTV7KB9ULoFZew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:25 2026 by rpki-client