Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          fXEU8y2WwP51ZRzG7rD90KVhNzAKvNPP5krUPV4Qkn0=
Subject key identifier:   1F:36:B7:89:4A:7E:BA:C6:91:23:72:94:AA:E9:57:B8:57:C8:A8:58
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019EC33730F111854167CF7A1DBACDEEF38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          145A
Signing time:             Sat 13 Jun 2026 23:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:34 +0000
Files and hashes:         1: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (hash: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: eFsQWov/S6Ph1leqFVZTNPwamV0VAK+dhpbfsaq/WBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:30:f1:11:85:41:67:cf:7a:1d:ba:cd:ee:f3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Jun 13 23:00:34 2026 GMT
            Not After : Jun 14 23:00:34 2026 GMT
        Subject: CN=1f36b7894a7ebac691237294aae957b857c8a858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:28:07:12:6b:9b:d3:b9:7e:38:c1:c0:37:
                    a5:bc:43:73:c0:41:05:ab:2d:83:33:41:83:92:f5:
                    5d:6f:a6:a4:b7:da:df:66:b8:a4:37:e6:91:72:90:
                    4b:f4:a3:35:b0:61:20:56:7c:58:9f:29:8f:42:4a:
                    24:8d:27:70:e4:3e:e6:9d:e2:e2:d1:1d:bb:4d:cb:
                    92:e7:3e:0c:57:a1:61:4a:0c:14:f9:91:2a:cc:9e:
                    17:a0:7c:ce:b9:d3:fa:9e:ed:1b:c7:68:f6:69:1f:
                    c7:da:20:04:6d:9d:75:e8:65:ee:c5:d5:e5:49:a2:
                    7e:75:ae:a7:44:72:cc:eb:96:43:6b:b0:60:1e:53:
                    93:61:20:d6:c6:32:9c:12:1e:dd:09:74:e0:df:26:
                    bb:a5:a4:82:34:47:80:3a:a4:06:ab:dd:0a:77:3d:
                    26:47:06:97:3a:3b:2c:62:eb:56:33:09:21:ba:cf:
                    ee:3f:8e:9f:56:7c:28:c1:39:98:c8:3e:65:92:85:
                    6b:9c:0d:2f:2a:1c:48:d2:e4:56:89:82:12:51:13:
                    60:45:f0:81:ed:20:6f:29:61:be:69:2a:e2:6f:cc:
                    8a:f8:eb:0b:36:84:a4:0b:ec:18:16:2f:a5:f9:37:
                    45:18:9c:c1:76:a3:fc:c8:ac:98:53:15:10:68:a9:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:B7:89:4A:7E:BA:C6:91:23:72:94:AA:E9:57:B8:57:C8:A8:58
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:c6:88:8d:c7:9b:ec:78:1d:c9:87:98:d8:81:c6:2c:8c:
         12:a1:c3:d6:e7:4f:8f:c6:a8:a2:e5:f2:1c:68:f0:3f:b0:75:
         07:93:8e:d4:fd:6c:7f:ec:41:e6:df:4d:95:3f:f5:66:6a:45:
         c8:5f:03:ba:52:cc:c0:f3:21:ae:b6:00:9b:aa:bf:cf:73:c0:
         db:c8:2d:47:6d:81:c3:6f:88:00:85:a7:93:96:75:2f:2f:62:
         2b:3b:b6:40:ea:f4:8e:3e:41:3f:7e:00:47:6c:fa:33:72:68:
         42:de:03:ae:42:05:35:8e:e1:0a:f4:5f:c8:d6:a2:0d:98:3d:
         f2:ad:9e:5f:a1:2c:fe:15:58:05:b7:51:ad:1f:92:36:63:f4:
         03:32:af:d7:b3:94:e7:4f:fb:61:ac:b1:1d:33:45:05:be:0b:
         c2:73:f3:29:b6:71:e3:89:d0:3a:90:14:ea:1d:47:86:52:3a:
         8f:86:17:d3:8e:e2:b1:f5:60:33:1f:06:50:6f:83:a0:d2:50:
         78:14:3e:5d:2c:5c:15:e6:94:ef:d9:a8:52:cd:fb:6e:3a:b6:
         d1:be:b6:9e:77:61:3a:9d:11:e1:d8:d5:16:2c:e1:c8:93:1c:
         00:64:a7:e6:ae:77:c4:71:bc:e0:dd:b7:4f:74:a5:d6:7e:04:
         90:9f:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:48 2026 by rpki-client