Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          1S358g5K6ZZopbioPMyt8bf8PT55ZfZGE4x9NnMLQXI=
Subject key identifier:   12:CD:1A:B8:73:A2:47:B4:70:5F:C9:44:9D:4D:D5:E4:DF:1B:C9:EC
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       019EBF5A6D35FF82781FCC53434A6EFED213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          0EF9
Signing time:             Sat 13 Jun 2026 05:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:34 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: iG1EhAQR+kZksjpr2k20qH91xVntaSqFuPSBnQljyI0=)
                          2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:6d:35:ff:82:78:1f:cc:53:43:4a:6e:fe:d2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jun 13 05:00:34 2026 GMT
            Not After : Jun 14 05:00:34 2026 GMT
        Subject: CN=12cd1ab873a247b4705fc9449d4dd5e4df1bc9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:fe:60:de:c7:92:31:9a:c8:05:25:5c:f1:
                    71:9f:68:a6:08:30:cb:f8:62:8e:7f:7b:60:41:8f:
                    13:25:4e:86:4d:0a:db:b9:1d:96:2a:f3:61:94:b9:
                    e1:50:9b:43:fb:d5:cb:60:2f:a7:e0:fd:c4:dc:9d:
                    8e:33:0f:e5:02:74:23:08:de:10:23:01:d5:12:db:
                    7b:0a:4e:f5:29:4f:b2:78:15:fb:29:c7:74:e8:da:
                    dd:15:c0:d4:09:a5:6e:ee:55:40:fd:d7:65:a8:26:
                    69:b6:2d:2a:73:41:78:8f:fc:de:d9:5a:4e:6a:69:
                    4d:2a:92:24:3f:74:a8:c1:c0:c8:7b:e1:6d:75:09:
                    7f:e0:78:5e:a9:ff:1c:d1:bb:a5:52:0d:ed:a5:a6:
                    4f:76:51:00:4d:7e:a9:99:47:7b:c1:4d:6b:8e:1d:
                    2f:cf:3f:7a:ad:0d:6f:a0:6f:ab:5d:0a:d0:54:38:
                    eb:3a:0b:68:bf:d4:43:04:54:24:87:4d:b6:a6:13:
                    2a:50:c3:27:85:43:25:72:7b:b0:59:84:5d:67:3f:
                    aa:5d:86:fc:27:a8:50:4c:86:b4:4a:4f:f6:6e:4b:
                    45:5f:b0:0c:60:36:31:5c:32:c9:a3:88:5d:2f:48:
                    89:6b:c1:82:50:28:9c:4b:15:fc:92:d5:7d:ad:ed:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:1A:B8:73:A2:47:B4:70:5F:C9:44:9D:4D:D5:E4:DF:1B:C9:EC
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:4b:20:7d:ea:32:b4:64:d0:eb:57:9d:19:26:45:80:bb:
         b6:00:84:ce:c7:88:4a:d7:c5:7c:b5:99:9b:fe:ea:69:6c:e0:
         7f:2d:74:24:d4:fb:8f:1a:6b:7d:75:56:70:f6:07:53:09:4e:
         ba:da:be:8e:71:9b:62:2b:67:a1:e4:00:cb:ea:be:84:87:e3:
         b3:e3:ae:8d:77:b0:4b:1f:6d:97:c2:ad:57:02:67:bc:97:20:
         df:17:7a:55:e4:02:41:82:73:06:ae:4a:2c:9a:f0:2e:09:10:
         61:46:ce:b9:07:ab:9c:1a:17:4a:1d:d0:1d:89:51:95:bb:00:
         15:b2:fa:f5:54:be:64:99:76:f8:02:94:aa:69:67:c1:57:c8:
         6b:1e:68:aa:cd:55:b5:0e:26:17:88:c9:1d:85:dc:60:79:28:
         af:fb:a2:2e:a0:e0:6b:6c:2c:9c:32:6f:f1:2a:dc:25:26:db:
         48:77:45:80:d6:15:af:a7:e0:17:57:df:69:4b:31:9d:e9:47:
         c8:1e:68:7d:55:94:dc:6e:47:78:f8:50:cc:1e:48:20:f0:9a:
         55:86:ff:cb:93:9b:eb:ab:1f:28:de:90:df:1d:81:56:6f:dc:
         1f:32:60:e8:1a:2d:e8:94:44:f3:d3:df:96:7f:86:d2:15:46:
         8d:d9:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:45 2026 by rpki-client