Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          iit9SsFetiZf8KcXtMnfolV0stPweFzbcJOz3k0cQUU=
Subject key identifier:   77:A1:91:FF:43:6C:97:39:78:47:77:B2:F0:3D:C6:0D:80:93:48:49
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       019EC0DB0E7F2AA30698477124107A6CFA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          0893
Signing time:             Sat 13 Jun 2026 12:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:41 +0000
Files and hashes:         1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: OmUJoQxcH09WS9y7cBMGAryQtyQwHfRFXKamGAVJeZY=)
                          2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:0e:7f:2a:a3:06:98:47:71:24:10:7a:6c:fa:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Jun 13 12:00:41 2026 GMT
            Not After : Jun 14 12:00:41 2026 GMT
        Subject: CN=77a191ff436c9739784777b2f03dc60d80934849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:65:36:07:4f:cf:33:af:81:56:19:42:a0:
                    08:90:ba:10:bc:84:ee:26:66:be:ff:7b:95:1a:a7:
                    4a:0e:0b:9c:48:2e:f8:71:52:6d:c5:a8:6a:9b:6b:
                    4e:c9:8e:fa:aa:3e:d7:50:88:9e:59:53:ae:42:32:
                    98:b7:9d:ed:7a:af:ec:6b:dc:16:73:0a:db:18:93:
                    18:3a:fc:d8:3f:0a:84:de:bf:fc:7e:df:5f:c4:c3:
                    ec:fd:85:8b:44:46:a6:0f:4a:bc:f1:10:45:f7:26:
                    c8:9f:f5:d8:51:fd:bc:f8:fb:80:d1:5e:3f:e4:14:
                    0e:fc:0e:c0:27:00:a2:69:85:04:9e:64:2f:c6:ff:
                    49:d1:2a:14:b6:6f:bf:b3:16:b8:45:92:a5:d9:f4:
                    c6:94:cb:8d:38:1d:87:b5:6b:e6:a7:00:48:f4:56:
                    cc:72:77:a8:a8:ea:76:20:19:7f:07:59:1f:3f:94:
                    ad:29:70:a8:77:49:84:91:ff:9a:36:2f:e0:f1:af:
                    15:46:13:41:f8:a3:83:71:62:c5:1e:04:ec:97:11:
                    ec:54:2c:fe:5b:66:be:5d:a8:63:9e:c5:cb:2c:34:
                    87:ff:8e:89:e6:2a:cd:16:c4:46:21:c5:75:b5:7d:
                    80:8c:59:e6:21:8d:3c:83:e4:21:d2:88:b0:c2:d2:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A1:91:FF:43:6C:97:39:78:47:77:B2:F0:3D:C6:0D:80:93:48:49
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:b5:28:3b:a8:ac:d2:ec:62:98:2d:35:6b:24:d4:a5:c3:
         e6:51:f8:7f:db:c5:87:ac:14:b1:13:94:30:eb:10:22:83:ac:
         78:9e:48:c5:ec:29:80:92:31:bf:3d:06:61:ff:54:39:58:6e:
         63:0e:6d:87:af:5a:c2:5d:54:bf:f4:92:98:16:56:f8:cb:24:
         47:fd:4b:38:43:ea:16:3f:85:b2:29:02:1b:db:47:96:f8:fb:
         3f:55:99:5f:95:32:9b:9d:da:f2:ec:90:69:ce:93:ad:d7:8a:
         9e:89:1c:83:1d:07:05:b9:89:09:d4:5a:9c:02:7e:1f:af:74:
         3e:71:fe:7f:75:1d:e7:3f:f1:f9:06:e9:b7:d2:6e:56:6c:47:
         96:a0:d2:50:ac:1e:cd:7b:38:6f:fa:cc:b9:05:57:8e:18:0b:
         bb:88:d4:92:1c:3e:33:83:f5:79:76:af:b8:82:5d:3a:16:40:
         dd:d9:bb:54:b7:97:da:fd:e6:a5:8c:a9:72:4d:62:a2:47:a6:
         5a:45:39:40:e4:f9:5b:49:c5:ad:71:1f:7e:3d:92:a5:28:82:
         de:72:4f:45:c2:d3:9d:da:2d:3a:5d:d1:97:f3:0d:75:11:7f:
         03:a5:f2:8c:5b:a9:89:ff:e4:e5:6f:de:35:e5:87:0a:7b:6a:
         38:27:17:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:40 2026 by rpki-client