Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          19oDqKdq+smKcBKrTOdOrC5V61Y6iOTEz+0EekoWaDQ=
Subject key identifier:   4F:74:31:3D:A4:F5:90:C6:A6:A1:C9:D1:54:21:72:E8:9D:F4:23:CF
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019EC06DB6A25CA06CE8D13EA46223CE57AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          11CE
Signing time:             Sat 13 Jun 2026 10:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:15 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: CvblzjJXStNTPUK9t9PhoIYScxrMyYkqo93nXuSypUM=)
                          2: eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (hash: fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:b6:a2:5c:a0:6c:e8:d1:3e:a4:62:23:ce:57:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Jun 13 10:01:15 2026 GMT
            Not After : Jun 14 10:01:15 2026 GMT
        Subject: CN=4f74313da4f590c6a6a1c9d1542172e89df423cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:5a:4a:aa:ef:7d:b7:22:04:e7:27:0a:ce:
                    8f:4a:d5:b2:d5:9e:e2:0c:7d:a4:fb:fa:17:01:60:
                    d7:ac:f6:89:84:bb:e0:8a:f6:09:0b:eb:52:4d:6a:
                    45:21:05:17:53:d2:0c:71:60:d5:ed:3b:46:4f:c4:
                    e0:3e:42:47:a7:43:a2:2a:80:fe:13:1e:1e:f4:de:
                    a4:04:56:5d:71:cd:c4:1c:a4:ce:ed:37:fe:36:32:
                    97:97:25:6c:82:c7:de:74:02:1e:ca:d7:66:2e:63:
                    91:45:32:c5:bd:26:80:13:3d:6e:3d:37:2c:b2:00:
                    07:0c:5e:2b:00:72:02:06:f1:d0:be:d1:46:55:f0:
                    6f:76:90:5a:ad:0f:0a:a0:95:06:1f:11:43:02:6f:
                    fb:66:a7:2c:4b:b2:7c:2c:33:53:89:22:0d:1a:d9:
                    34:7d:1b:5c:d1:bb:f1:3d:83:f1:da:7c:77:54:9b:
                    da:f5:06:01:dd:52:86:98:c3:ea:fe:0d:3f:f9:58:
                    af:ac:4e:5c:be:04:35:49:97:c5:48:cc:a3:6f:e6:
                    94:42:25:e3:ee:76:53:c7:6b:13:5b:2b:d5:c0:e3:
                    ab:e2:54:97:a2:2f:a7:ba:8f:8f:96:ec:c7:e4:ad:
                    fe:85:fb:64:e3:58:98:d0:55:3f:6e:6b:a3:7d:66:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:74:31:3D:A4:F5:90:C6:A6:A1:C9:D1:54:21:72:E8:9D:F4:23:CF
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:d7:26:f0:67:b9:2d:12:ba:ae:19:a8:87:f0:69:57:b8:
         2b:c7:ac:4b:77:fb:d0:0a:c8:52:20:6f:b6:bc:6a:d3:7e:1f:
         a4:17:11:62:75:e1:9a:fe:63:f6:70:20:a3:9b:6c:ae:6e:26:
         06:8d:99:bb:b2:6f:52:5c:bb:a2:2b:ac:41:eb:1f:da:5b:24:
         24:4a:ff:77:27:e1:01:78:f7:08:5f:5a:57:e7:10:39:c4:54:
         d1:e4:13:85:06:96:11:da:9c:37:4a:09:e8:93:cc:bd:6c:10:
         9a:90:f2:4d:57:8c:75:47:d0:08:92:7a:c2:e7:16:8e:d8:56:
         24:ab:d0:0d:00:c0:e1:6b:33:d0:27:20:d2:dc:a3:e4:bf:db:
         a5:ff:f0:22:2d:48:2f:b5:83:7c:ab:c8:4e:30:ce:23:be:a6:
         ca:2e:8c:a2:e2:16:f8:7e:4d:ee:00:12:db:13:ea:aa:ad:65:
         83:5b:47:65:35:37:2f:bf:0d:30:90:fa:be:0c:9d:6d:86:7b:
         22:ac:7d:01:29:51:4c:01:a0:fc:60:01:9d:47:24:7b:7c:bd:
         6b:17:58:8c:28:cb:ee:d4:af:ee:da:8b:a5:6e:4e:e0:69:ef:
         d1:74:7e:c6:d7:91:da:a9:b9:02:74:81:06:e5:da:75:26:62:
         9d:06:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:29 2026 by rpki-client