Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          SyFYzfYbu92L5Gl/X0Xv+jGJT3q4Ft8yWX7Q+Ga5QKM=
Subject key identifier:   0A:13:D3:47:A9:91:CE:37:CD:49:CA:20:56:73:67:46:79:C1:5B:82
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019EC1B6F40A13E8D25CB1F54351050036C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          197B
Signing time:             Sat 13 Jun 2026 16:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:53 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: 8HpF1c67M0kVqy6y4lw8U+2AFe/Iscf3ch/jEweCUbI=)
                          3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
                          4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:f4:0a:13:e8:d2:5c:b1:f5:43:51:05:00:36:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jun 13 16:00:53 2026 GMT
            Not After : Jun 14 16:00:53 2026 GMT
        Subject: CN=0a13d347a991ce37cd49ca205673674679c15b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:96:17:d1:75:ea:6f:26:4a:3e:59:53:01:
                    1f:d2:79:20:64:43:22:0d:61:db:5c:c3:de:f5:3b:
                    01:64:03:bc:20:9f:65:26:e0:80:22:13:4e:81:8e:
                    d1:6d:57:d7:49:a0:e4:1f:9c:ff:0a:34:d9:0d:77:
                    a0:0e:67:f5:0f:04:0a:81:60:34:aa:7c:5a:65:c1:
                    0a:e1:02:3a:31:66:d9:65:b6:ba:95:af:a3:07:c2:
                    bd:46:ab:93:73:d0:75:a6:c5:a0:19:fb:c0:db:d2:
                    7a:d0:70:0c:ae:19:02:59:c3:51:33:cf:e5:38:5b:
                    63:ed:08:8c:c1:2b:bf:99:3b:8e:57:d4:92:65:0c:
                    20:dd:4e:c9:7d:74:cc:7f:76:ba:02:a9:9a:72:ff:
                    d3:f3:a1:eb:b8:36:10:77:04:47:a9:42:29:ae:2d:
                    4a:61:88:4e:99:1f:5c:b5:e3:3c:e4:4f:61:50:0e:
                    1c:4a:5a:bc:31:a6:f4:75:a1:b8:68:31:fb:61:52:
                    56:6d:1c:53:fa:36:10:ae:ca:57:44:17:52:e1:a9:
                    e8:33:8b:9c:ec:42:8e:51:c7:9c:ac:6d:09:d5:1c:
                    be:ef:04:52:97:4f:59:7b:07:81:44:69:8c:26:e2:
                    8a:46:0f:17:2a:ea:55:52:f5:54:72:fc:dc:08:0b:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:D3:47:A9:91:CE:37:CD:49:CA:20:56:73:67:46:79:C1:5B:82
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:25:94:46:10:e7:ca:f3:ae:f1:d3:c2:2c:6e:87:44:e2:
         a2:89:c2:5e:1f:93:31:61:6b:ed:f9:20:a6:88:9a:18:45:23:
         92:0e:0f:d9:9f:f1:cf:0b:c3:28:e3:a9:3a:97:e0:c7:8d:eb:
         23:84:51:a8:bf:2d:6c:43:1a:c2:dc:fd:b3:34:78:84:66:b4:
         fc:c6:a5:85:0a:5a:e0:e2:99:4e:65:52:fa:a5:73:db:6b:39:
         d5:08:16:bb:39:f0:53:8a:87:b8:e4:45:87:d6:63:82:9f:ac:
         f5:b5:86:90:7f:78:28:15:bb:b4:f1:87:c7:3b:3a:92:4a:0d:
         5b:17:61:0c:bf:4b:4c:35:fb:c9:c1:e3:d8:ed:49:b9:a2:fa:
         64:f0:ce:50:50:6b:5f:e4:6a:3a:c6:3c:a7:d3:bb:fe:4a:b4:
         d1:17:57:b0:94:f6:1f:1f:ed:96:f6:ea:7e:21:1f:96:c5:4c:
         fd:d4:88:80:b7:75:c5:c8:ae:10:7c:e1:75:4c:fc:6e:58:cd:
         0a:5c:bf:90:c2:71:31:26:48:bf:9f:c3:86:df:7a:bb:c4:b6:
         0b:a3:19:98:1c:d0:f7:09:3f:29:ec:4b:44:23:8b:bc:f3:9e:
         93:0b:2e:66:56:2d:36:ce:e2:08:c1:15:49:91:39:55:bb:3f:
         74:a3:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:39 2026 by rpki-client