Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          Utaj33R5f3dO3/ckaaIKEu1zVidnOG+cRyfeDPbS2Uk=
Subject key identifier:   AE:20:FD:9B:5B:A7:C6:C0:1D:4B:23:0A:0D:4C:0F:87:66:F3:37:5E
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       019EBE7F7907F7E271F9A1739188669887FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          0133
Signing time:             Sat 13 Jun 2026 01:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:25 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: 1B9nKUDyZNUTL0ukgb8ICHY+GpEvm1si+g/Dovat/BQ=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:79:07:f7:e2:71:f9:a1:73:91:88:66:98:87:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Jun 13 01:01:25 2026 GMT
            Not After : Jun 14 01:01:25 2026 GMT
        Subject: CN=ae20fd9b5ba7c6c01d4b230a0d4c0f8766f3375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:04:d3:4e:25:17:4c:33:59:dd:cc:b8:99:
                    e9:84:79:b5:2f:ac:8f:ad:e7:f2:3f:63:60:72:70:
                    f1:57:5f:a2:26:10:c2:60:39:33:48:c1:f3:8d:4f:
                    b3:a1:ea:5f:2e:a7:bd:6e:02:52:de:d5:3f:a3:82:
                    03:32:fd:2b:d1:2d:7e:71:4a:d7:03:2c:67:d7:8e:
                    af:8e:60:30:1a:1b:71:26:bc:31:17:45:67:11:f2:
                    d2:1e:aa:6d:96:fe:a9:73:16:2e:cf:55:8c:36:5e:
                    6b:34:04:8a:11:e0:3c:9e:a7:66:b2:3f:7f:89:63:
                    53:2c:a0:6f:c8:22:67:a2:fc:9e:67:19:5f:02:a4:
                    05:73:0b:92:cf:3c:46:29:7c:87:2f:0c:32:33:64:
                    ed:c9:4a:1b:12:ed:a7:96:f9:80:f3:a8:6f:a7:0c:
                    6a:db:ba:50:2a:d5:ec:b9:20:58:09:83:91:d2:78:
                    d2:40:2a:57:49:0f:a2:eb:09:57:5f:31:07:ba:80:
                    e7:a6:69:67:f0:ef:80:84:94:4f:fd:32:97:82:09:
                    b2:dd:36:70:f9:f6:e1:79:07:00:92:b4:1f:d8:42:
                    f0:4e:b2:77:80:ae:0d:c3:ab:34:61:9c:32:b2:27:
                    b4:43:41:18:aa:8e:c7:2c:e2:7f:3c:4a:84:81:d0:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:FD:9B:5B:A7:C6:C0:1D:4B:23:0A:0D:4C:0F:87:66:F3:37:5E
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:08:51:da:c3:dc:5f:e8:d9:d0:47:ac:8f:d9:cb:77:3d:ef:
         4d:69:c7:e8:a6:68:5c:c0:b5:fb:1b:c5:ec:f5:e1:f9:eb:cc:
         ac:fa:03:57:ac:87:ee:61:11:a4:9e:47:e5:72:6e:1f:e1:f9:
         60:53:14:90:ef:23:d1:b4:42:27:4f:8b:58:2f:84:6d:a0:40:
         54:00:af:a0:35:95:07:ad:7f:4c:ad:4b:64:28:f6:a8:90:28:
         a0:e2:0e:21:ae:79:89:60:c9:33:55:0d:3c:f4:a8:c7:33:bd:
         8e:76:73:46:00:ef:85:36:cd:69:93:3e:bc:7f:79:8a:b8:c2:
         ad:64:98:d3:de:f4:19:1b:8d:a4:37:eb:4f:96:8b:31:49:13:
         ba:b5:66:5f:aa:35:b9:29:15:6d:0e:03:e1:2d:bb:47:fe:02:
         bf:87:5d:93:f5:43:71:bb:a8:f6:da:32:9c:e2:d5:b7:74:e5:
         81:28:a7:e8:5b:0e:b3:2b:dc:58:3f:f5:64:73:98:e6:43:69:
         1b:af:0e:5a:0e:ec:6a:0f:0d:8b:fe:13:6f:d9:09:da:78:b2:
         ac:38:b0:4b:da:c9:33:21:7a:1e:4b:06:3d:23:fa:44:92:4c:
         42:df:c5:07:13:6b:ec:8c:ad:fe:fd:f9:da:a6:ae:a7:f9:aa:
         bd:0f:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:10 2026 by rpki-client