Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          3b+opyA9cvNRiVMU8XCVnTJrXn6WBhGNxtK+mjuAPmg=
Subject key identifier:   9E:E7:7F:8B:89:EE:2D:FB:BD:BE:13:3F:4F:E9:1B:09:6F:E0:FF:65
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       019EC06D8882C00B2AEF4600783C6DC621C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 10:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:04 +0000
Files and hashes:         1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
                          2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: MWASy9UnSPiGlIJi3Q8DLvLYgzMi1LHYgxSEwhl+/3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:88:82:c0:0b:2a:ef:46:00:78:3c:6d:c6:21:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Jun 13 10:01:04 2026 GMT
            Not After : Jun 14 10:01:04 2026 GMT
        Subject: CN=9ee77f8b89ee2dfbbdbe133f4fe91b096fe0ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:eb:97:63:71:12:1e:34:13:6e:7c:8d:68:
                    21:1e:d0:c9:b9:ee:be:ce:ea:34:d7:00:c6:12:13:
                    db:b8:ba:19:53:52:fd:a9:3b:ce:50:93:e4:98:d6:
                    07:d9:e8:65:cc:81:02:24:8b:a2:c6:71:07:30:62:
                    21:13:00:e8:56:d4:15:8f:5c:57:2e:c7:13:9d:18:
                    10:b4:9e:5f:25:33:32:ec:fd:04:6e:f7:29:11:90:
                    64:0f:04:0b:5e:59:62:a4:2b:1b:1b:90:f1:d2:74:
                    58:23:c3:46:21:9d:96:68:de:19:f1:58:d3:52:94:
                    9b:c7:2e:c6:4e:fb:b6:83:58:cc:f1:80:12:d4:eb:
                    ff:9a:ef:a4:99:5e:82:dc:1d:d0:c8:ab:eb:dc:f6:
                    a3:46:a8:db:fb:ef:37:a3:37:ba:52:90:69:68:55:
                    a2:64:f3:16:6d:f9:a0:25:84:de:c2:ab:1a:8a:0e:
                    7b:3f:e1:d1:6a:b2:00:3d:71:0c:8b:9e:47:ba:dd:
                    3e:2b:c1:cd:f3:07:d9:2d:48:cf:be:0d:00:ed:07:
                    64:76:39:f3:58:0f:db:0e:ba:65:54:7d:ef:7b:48:
                    78:fc:1e:5b:8c:f7:c8:5a:48:6e:9c:62:56:61:bc:
                    82:14:70:69:1b:de:7b:0a:bb:7e:33:a3:07:97:5d:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:7F:8B:89:EE:2D:FB:BD:BE:13:3F:4F:E9:1B:09:6F:E0:FF:65
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:09:08:36:f3:c0:b1:b0:4a:c6:9c:c5:e7:38:63:c0:4a:b5:
         14:07:ca:74:e9:28:91:5d:4c:b9:bc:b7:ac:35:bb:d1:c7:e3:
         18:55:da:05:e6:65:fc:bb:90:4e:b9:29:c4:1e:25:7c:e0:09:
         0e:9f:c5:47:d6:e7:34:13:84:df:bd:f9:a8:9d:8f:84:ad:db:
         97:8d:08:a4:88:0d:0a:45:d1:53:8e:11:c1:d8:5a:f1:2a:8a:
         76:85:51:47:70:0d:79:f2:96:c4:b0:bb:5b:09:c5:67:82:cb:
         e4:2c:6f:2b:65:8d:7a:11:c5:db:6e:c8:ce:06:be:36:49:8a:
         c4:09:25:62:21:54:3f:36:b1:49:a8:e6:68:fe:88:0f:5c:06:
         2d:cc:06:81:11:63:cd:a1:5a:98:a3:43:16:51:81:a2:0f:c2:
         54:15:9f:93:79:77:63:2f:fa:0b:c5:53:c6:cf:fd:7a:7e:c0:
         5c:92:30:6a:fc:e7:68:2e:39:ec:77:49:09:1e:a3:a9:1f:e6:
         ef:ba:77:8a:f1:d2:fc:bb:c9:25:b6:e9:af:4d:58:d4:66:00:
         d0:1e:e8:bd:0b:6c:0f:7a:00:c6:8f:7c:da:40:7b:bc:ed:2f:
         02:f8:f3:c2:da:62:76:10:ec:4b:bc:94:b7:fe:84:30:82:99:
         ed:30:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:56 2026 by rpki-client