Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          0EcymmcvWrz8EMt0EyX5ygD3D3OK8VKQQFRFq9dPPjg=
Subject key identifier:   59:2E:72:14:CB:FD:71:DC:F7:2F:3C:56:A0:45:55:68:DB:CA:57:62
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       019EBE7ED41270DDAE51AD38CB4D4E221756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0F0F
Signing time:             Sat 13 Jun 2026 01:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:43 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: 7vzk/b6Sv75EvVt1G7ziDFv4Yi47BR3zvtj8oUMu7vk=)
                          2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:d4:12:70:dd:ae:51:ad:38:cb:4d:4e:22:17:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Jun 13 01:00:43 2026 GMT
            Not After : Jun 14 01:00:43 2026 GMT
        Subject: CN=592e7214cbfd71dcf72f3c56a0455568dbca5762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:ec:91:47:e7:f7:84:9c:8d:97:cb:f3:10:
                    38:de:7c:d4:3a:14:f2:74:2d:47:ba:a8:c0:f3:8f:
                    20:90:a0:b4:cf:a2:1c:15:0c:e2:96:e2:5c:17:47:
                    8b:54:24:e9:4a:19:58:6a:f9:10:21:cf:00:bc:59:
                    c9:1a:0b:b6:3d:96:15:41:e8:b8:96:43:2a:c1:0e:
                    3a:b9:b6:cf:e6:25:a9:0b:86:10:5c:ef:de:00:1a:
                    af:47:20:42:a7:f5:02:a8:d5:a8:0c:e6:c2:e0:06:
                    4c:bb:00:1b:49:a9:39:46:ff:6c:36:d8:ad:3d:e1:
                    68:8d:b7:92:88:59:33:46:12:08:5b:1c:84:62:9c:
                    aa:66:7d:13:9e:1b:93:dd:02:9b:33:a5:af:92:e1:
                    25:91:f4:3b:46:f2:ad:cd:73:c2:f6:25:ba:ed:9a:
                    53:76:67:61:3b:13:94:61:19:8e:00:c5:01:eb:45:
                    49:03:0f:6b:fa:d7:a6:14:55:1f:4c:58:5e:6b:93:
                    6e:65:61:14:b9:cc:92:ac:fa:31:33:52:94:54:75:
                    07:0b:d8:40:7e:36:60:40:f7:6a:3d:b6:e8:0f:a8:
                    0e:da:51:aa:6d:3c:e6:79:52:00:81:c8:33:f1:d0:
                    c5:cf:2a:45:9f:89:d6:dd:ad:47:3a:b5:d5:b0:77:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2E:72:14:CB:FD:71:DC:F7:2F:3C:56:A0:45:55:68:DB:CA:57:62
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:49:64:d1:ff:f1:06:81:5d:33:03:46:89:d9:7e:2f:50:
         52:49:37:d8:29:1f:7c:18:a9:94:e9:39:17:c7:73:a5:ea:1e:
         9e:f2:e3:59:8a:e9:c1:c0:94:50:36:f8:19:56:57:32:32:95:
         57:c9:ac:f6:93:cb:3c:f9:fc:55:1d:77:b1:e3:30:b4:25:0d:
         b7:17:56:89:ce:40:d5:34:b1:29:12:68:b5:a9:35:dc:d8:43:
         df:0b:95:c4:05:83:75:2a:ea:19:21:3a:b2:68:a0:d3:ba:b5:
         e7:fd:e8:0e:04:4d:a3:a9:c1:58:c0:28:8a:89:ec:cb:ba:b4:
         78:0f:2d:41:f6:34:32:91:78:a0:56:9e:b1:b9:b3:14:8a:4d:
         76:e2:91:6d:0c:ff:b8:84:ca:d5:9c:b0:32:79:fa:e8:a3:17:
         7f:cf:ba:7f:43:de:a1:cf:e4:5e:7b:8a:6a:80:3a:db:50:aa:
         da:d6:f8:93:5f:9e:29:c0:d5:e7:3d:05:95:09:54:42:3c:fb:
         58:3c:7d:ed:07:22:b6:45:d2:da:1e:a9:57:68:8f:5b:cc:28:
         e2:88:6e:f6:07:4d:97:85:20:a0:75:17:ae:e7:76:39:48:bd:
         34:7c:7b:3c:34:83:aa:9c:ad:b8:2e:72:10:5a:21:f0:94:42:
         98:3b:5f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ftQScN2uUa04y01OIhdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3
N2YzOTMwHhcNMjYwNjEzMDEwMDQzWhcNMjYwNjE0MDEwMDQzWjAzMTEwLwYDVQQD
Eyg1OTJlNzIxNGNiZmQ3MWRjZjcyZjNjNTZhMDQ1NTU2OGRiY2E1NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtePskUfn94ScjZfL8xA43nzUOhTy
dC1HuqjA848gkKC0z6IcFQziluJcF0eLVCTpShlYavkQIc8AvFnJGgu2PZYVQei4
lkMqwQ46ubbP5iWpC4YQXO/eABqvRyBCp/UCqNWoDObC4AZMuwAbSak5Rv9sNtit
PeFojbeSiFkzRhIIWxyEYpyqZn0TnhuT3QKbM6WvkuElkfQ7RvKtzXPC9iW67ZpT
dmdhOxOUYRmOAMUB60VJAw9r+temFFUfTFhea5NuZWEUucySrPoxM1KUVHUHC9hA
fjZgQPdqPbboD6gO2lGqbTzmeVIAgcgz8dDFzypFn4nW3a1HOrXVsHdGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkuchTL/XHc9y88VqBFVWjbyldiMB8GA1UdIwQY
MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt
MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl
LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKpJZNH/
8QaBXTMDRonZfi9QUkk32CkffBiplOk5F8dzpeoenvLjWYrpwcCUUDb4GVZXMjKV
V8ms9pPLPPn8VR13seMwtCUNtxdWic5A1TSxKRJotak13NhD3wuVxAWDdSrqGSE6
smig07q15/3oDgRNo6nBWMAoionsy7q0eA8tQfY0MpF4oFaesbmzFIpNduKRbQz/
uITK1ZywMnn66KMXf8+6f0Peoc/kXnuKaoA621Cq2tb4k1+eKcDV5z0FlQlUQjz7
WDx97QcitkXS2h6pV2iPW8wo4ohu9gdNl4UgoHUXrud2OUi9NHx7PDSDqpytuC5y
EFoh8JRCmDtfaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:22 2026 by rpki-client