Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          YDcXvCEs6wQIHOjktqNGKr17NsLpaEzrexiBKBwfB+E=
Subject key identifier:   44:6E:C3:79:00:E5:98:70:0A:30:AF:B0:1C:2C:A2:33:11:B8:49:03
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       019EBEECBB3F9747DD04608B2AC6E06A61EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          033A
Signing time:             Sat 13 Jun 2026 03:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:45 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: G/JSZkWrn7aUB5Egklst2aeqAc+Uvr1IpQrjmcwCIc8=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
                          6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:bb:3f:97:47:dd:04:60:8b:2a:c6:e0:6a:61:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Jun 13 03:00:45 2026 GMT
            Not After : Jun 14 03:00:45 2026 GMT
        Subject: CN=446ec37900e598700a30afb01c2ca23311b84903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:ca:02:de:9d:c1:78:93:97:5c:1c:fa:8a:
                    6e:12:aa:13:27:dc:c6:6c:ce:38:8f:b2:68:77:65:
                    7f:51:2d:35:d3:26:32:5c:d9:35:2f:98:f2:d7:3a:
                    80:3b:a0:d0:0f:f6:ee:3b:74:cf:34:5d:8d:c0:bd:
                    bb:7c:2d:76:77:fa:9f:c3:86:0c:16:16:2b:ce:a1:
                    94:7c:2b:b3:cd:f4:ba:c1:b4:91:f2:39:bd:b6:d4:
                    e4:43:39:4b:ef:c1:ae:7f:f2:94:fc:0c:e6:0d:ba:
                    be:29:e5:c6:36:04:40:57:4b:5e:fc:7e:2c:67:ea:
                    85:44:df:fb:a0:1f:62:47:1f:79:9a:64:72:c9:19:
                    44:76:fe:55:09:46:75:f6:d0:fe:25:d3:15:3f:ca:
                    2c:e5:f2:46:58:50:35:16:e1:a0:62:9e:bf:ec:c2:
                    5c:19:d5:9b:33:4a:2b:1c:36:0b:4f:e3:33:c4:67:
                    69:70:99:e4:3b:c9:a4:58:d6:d8:62:c6:89:58:5b:
                    57:a7:b8:d3:c6:ca:e3:2c:b5:6c:e2:76:31:c2:37:
                    7f:1a:55:be:aa:f9:4d:99:85:a2:ec:01:00:2c:ad:
                    05:fb:78:57:71:05:5c:c3:bf:71:9b:40:f4:6d:b0:
                    12:47:29:11:ac:19:98:6f:ed:c8:77:65:ab:2d:b2:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:C3:79:00:E5:98:70:0A:30:AF:B0:1C:2C:A2:33:11:B8:49:03
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:00:2b:36:dd:4b:e6:52:aa:f7:8e:44:4a:82:f3:de:18:61:
         a4:d9:3b:61:c9:91:23:0f:3f:0e:c2:6b:e9:7f:e8:6b:38:b0:
         78:65:90:5e:4c:96:61:d7:e2:72:1f:57:ae:55:ee:18:93:df:
         4e:8a:d6:7a:38:93:13:9c:c3:fd:f4:e6:8c:63:99:d7:69:f3:
         75:6e:7c:e6:01:17:07:81:dd:3e:73:04:d0:b3:06:30:64:05:
         58:29:d3:1a:fa:da:02:3b:fd:82:be:07:bb:b8:e6:ea:be:86:
         95:dd:ca:71:ba:59:51:5b:9d:b3:5c:70:72:ab:c9:13:03:83:
         e6:10:9e:f0:2e:50:af:96:eb:d0:d4:27:42:70:f7:0d:e5:c3:
         4f:aa:ac:32:de:b9:ac:9a:fc:02:eb:6e:a0:e7:5a:43:1d:49:
         c1:ae:cb:96:5e:ca:98:a0:07:f5:e0:dd:cd:33:e0:f3:2e:0a:
         3d:fc:96:93:f0:32:9d:4a:be:54:b3:6c:58:eb:04:b2:61:25:
         0f:2c:35:ce:7e:0d:2f:ac:af:6a:b8:09:f1:05:17:1d:bc:1e:
         59:44:2a:76:26:52:73:8c:19:87:28:0d:00:ab:90:ad:6b:ad:
         aa:3e:93:3a:c5:2e:c9:13:ab:43:d8:44:d0:77:4c:3e:d2:7b:
         67:2b:58:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7Ls/l0fdBGCLKsbgamHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw
ODUzYTEwHhcNMjYwNjEzMDMwMDQ1WhcNMjYwNjE0MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg0NDZlYzM3OTAwZTU5ODcwMGEzMGFmYjAxYzJjYTIzMzExYjg0OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdfKAt6dwXiTl1wc+opuEqoTJ9zG
bM44j7Jod2V/US010yYyXNk1L5jy1zqAO6DQD/buO3TPNF2NwL27fC12d/qfw4YM
FhYrzqGUfCuzzfS6wbSR8jm9ttTkQzlL78Guf/KU/AzmDbq+KeXGNgRAV0te/H4s
Z+qFRN/7oB9iRx95mmRyyRlEdv5VCUZ19tD+JdMVP8os5fJGWFA1FuGgYp6/7MJc
GdWbM0orHDYLT+MzxGdpcJnkO8mkWNbYYsaJWFtXp7jTxsrjLLVs4nYxwjd/GlW+
qvlNmYWi7AEALK0F+3hXcQVcw79xm0D0bbASRykRrBmYb+3Id2WrLbJUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERuw3kA5ZhwCjCvsBwsojMRuEkDMB8GA1UdIwQY
MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt
YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj
LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAArNt1L
5lKq945ESoLz3hhhpNk7YcmRIw8/DsJr6X/oaziweGWQXkyWYdfich9XrlXuGJPf
TorWejiTE5zD/fTmjGOZ12nzdW585gEXB4HdPnME0LMGMGQFWCnTGvraAjv9gr4H
u7jm6r6Gld3KcbpZUVuds1xwcqvJEwOD5hCe8C5Qr5br0NQnQnD3DeXDT6qsMt65
rJr8AutuoOdaQx1Jwa7Lll7KmKAH9eDdzTPg8y4KPfyWk/AynUq+VLNsWOsEsmEl
Dyw1zn4NL6yvargJ8QUXHbweWUQqdiZSc4wZhygNAKuQrWutqj6TOsUuyROrQ9hE
0HdMPtJ7ZytYaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:29 2026 by rpki-client