Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
File:                     ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json)
Hash identifier:          hdi6YUOgWy+pRkJg0CZcz/ZRoUr7mOyDR19x47abCqU=
Subject key identifier:   5F:12:83:21:A4:12:33:81:04:98:7E:AF:B9:42:23:3F:F2:51:E4:4A
Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41
Certificate issuer:       /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
Certificate serial:       019EC1B6BBFB872A2551ECE83D5E3EA44D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
Manifest number:          03D9
Signing time:             Sat 13 Jun 2026 16:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:38 +0000
Files and hashes:         1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=)
                          2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: 2ZXvnskX2nmhp+MyRf+rCPORU0+g8TqzPAmWdv5x7xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:bb:fb:87:2a:25:51:ec:e8:3d:5e:3e:a4:4d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441
        Validity
            Not Before: Jun 13 16:00:38 2026 GMT
            Not After : Jun 14 16:00:38 2026 GMT
        Subject: CN=5f128321a412338104987eafb942233ff251e44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:7b:12:eb:43:bc:f8:df:3b:ea:79:92:b9:
                    7e:80:33:cd:24:e0:bf:cd:64:61:c5:a8:bb:94:56:
                    07:42:85:24:42:e9:eb:f7:bf:d4:80:74:bf:34:b2:
                    08:1c:4d:31:f1:92:2a:14:ff:c6:71:19:b8:02:8a:
                    bc:64:5b:66:e3:f5:f8:8d:fe:10:f5:14:dd:5a:bd:
                    a8:3c:06:62:be:35:ea:27:49:e2:97:5d:7c:1d:e2:
                    8d:0a:c8:94:4a:5d:01:4b:c0:65:cb:5e:cc:dd:fd:
                    7a:e6:6e:56:71:34:eb:bf:2b:81:31:3e:3c:3a:d9:
                    4b:60:7d:32:22:77:95:8b:e8:7c:de:e6:1a:c1:a1:
                    7c:2a:bf:85:ae:8c:bf:24:b1:e3:10:e3:34:5a:6d:
                    ce:e6:12:66:b5:d5:e3:f7:2b:92:c8:47:87:8e:11:
                    0c:84:5f:4a:7c:6b:8c:6a:08:37:04:7d:3f:e8:52:
                    dc:28:47:ef:07:5c:a6:4d:45:b7:d8:e0:6b:47:a5:
                    33:c2:71:17:06:9f:d6:1f:f2:f0:78:33:f9:00:f4:
                    cb:78:ab:dc:d5:0b:1d:39:89:e9:88:6f:dc:7e:99:
                    b5:05:b4:ab:e1:32:bd:98:3b:ae:b1:c6:a8:6c:40:
                    98:74:23:59:d9:2c:ef:ba:af:75:19:53:8e:e0:49:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:12:83:21:A4:12:33:81:04:98:7E:AF:B9:42:23:3F:F2:51:E4:4A
            X509v3 Authority Key Identifier:
                keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:5d:92:b9:f9:f5:14:57:78:fd:d4:71:5b:89:8b:ff:f7:
         7b:9a:98:53:f6:ce:75:fc:13:9e:1b:4f:c7:eb:0b:9b:d2:a8:
         c1:2c:7e:61:14:d4:89:5a:14:a4:9c:bb:a1:5c:44:f8:8c:e7:
         03:f4:83:b1:9b:06:a5:d2:8d:8b:37:8d:a2:01:aa:b6:06:aa:
         b8:e1:a4:db:a4:de:90:d4:91:af:59:20:d5:16:a2:b8:a0:25:
         3d:63:23:65:b0:b7:bc:b6:63:31:21:b3:c0:e3:3a:3b:d3:cc:
         c4:48:bb:8c:4a:96:9b:0d:02:19:64:66:f9:66:a6:1a:90:03:
         54:65:ed:94:13:f3:58:b0:92:e6:4b:58:fb:57:c3:1e:92:de:
         af:0f:3b:8e:7e:12:2b:14:1a:fc:56:ad:65:46:ec:43:30:67:
         bb:a0:07:fe:ea:5b:f4:00:07:c3:07:b9:bd:20:98:ce:0a:0d:
         8d:f1:63:94:42:b8:91:a8:1e:a7:4f:8b:f8:a2:9c:eb:dc:63:
         c3:c2:6a:e0:27:97:ab:22:9d:55:51:74:6f:49:0f:73:93:13:
         ab:4b:b0:6a:68:70:8d:2a:8a:09:70:c7:e9:9c:66:05:14:a4:
         87:64:8e:36:c4:bc:91:c1:f8:47:fc:df:1e:d4:80:bb:95:8a:
         da:49:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:13:34 2026 by rpki-client