Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          ts2l2s3UBCd4OwhoTD2Zi3VaPtjs6FhuQRM8PEXhtjE=
Subject key identifier:   74:79:50:91:78:46:44:CF:78:09:73:0B:9B:10:AD:AA:2B:C1:8F:62
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       019EC036AAE37F00C8EAB936B07709AB1D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          0E4B
Signing time:             Sat 13 Jun 2026 09:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:08 +0000
Files and hashes:         1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: 9V8QSdlB9+sAh8lojI0HgRwld/eBKKe2eOCVclxcIw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:aa:e3:7f:00:c8:ea:b9:36:b0:77:09:ab:1d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: Jun 13 09:01:08 2026 GMT
            Not After : Jun 14 09:01:08 2026 GMT
        Subject: CN=74795091784644cf7809730b9b10adaa2bc18f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:2a:d6:0e:c4:31:c5:30:65:00:01:5a:20:
                    f1:76:15:31:2d:12:50:4d:98:64:d5:62:4f:b2:42:
                    1a:8a:30:7e:22:a7:25:ab:32:23:46:0e:76:0b:36:
                    48:8a:a3:71:e6:9e:07:49:0e:ed:74:89:6d:4d:93:
                    0d:40:dd:45:21:7f:fa:bd:df:10:92:42:5e:6d:8f:
                    36:a4:1e:a7:78:53:7b:fe:bc:aa:98:be:4c:62:67:
                    a1:04:e4:72:e0:2e:f5:7e:5d:a4:89:86:f5:fc:f6:
                    36:74:df:ec:aa:b2:cc:d9:a1:7d:a6:5b:93:77:b8:
                    bc:bd:25:18:15:d8:4b:b3:d6:f0:b8:d5:56:c3:ca:
                    f4:c2:24:b0:5a:2d:63:bc:c6:59:fe:c4:b9:a6:97:
                    28:9d:bb:40:c8:0a:ee:fa:12:af:f0:a9:43:fb:0b:
                    c4:2d:45:20:c5:ef:b4:83:91:20:79:1a:67:85:f2:
                    e6:f3:60:90:86:b6:51:47:04:7c:5f:d9:32:08:df:
                    00:65:54:f3:1c:7b:7a:e2:ea:29:a1:3c:d8:b7:7e:
                    88:dd:10:fb:96:17:c1:9c:6e:bd:2e:86:1c:fc:bc:
                    24:a1:5f:6c:2b:32:87:b8:59:07:83:4c:8f:07:14:
                    5e:94:09:e3:70:1c:8d:28:89:31:4f:87:1f:ab:39:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:50:91:78:46:44:CF:78:09:73:0B:9B:10:AD:AA:2B:C1:8F:62
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:27:8a:d5:94:19:ae:8c:83:8d:f2:45:f8:ca:f2:07:ad:61:
         aa:50:6d:8e:c6:bd:d7:5b:85:b9:c7:f7:9e:a9:31:5b:e8:e1:
         47:05:18:2a:00:ec:e1:93:12:95:27:e3:65:ce:9b:f1:fb:4d:
         1a:f7:ec:fc:39:c8:2b:2b:4d:a4:b2:e0:8e:2a:97:33:a0:63:
         25:8a:0e:ce:98:86:d4:e8:72:9d:04:dc:c5:d2:7f:3f:a6:34:
         c2:73:00:9f:3f:50:ff:35:8f:82:d4:d4:4c:03:89:5f:77:a7:
         f0:89:e0:eb:27:2f:3e:7b:67:75:8f:7a:35:6f:1f:4e:1a:0e:
         79:a7:8d:48:0b:e2:56:f1:3d:77:e8:64:ca:b1:a0:ca:9e:02:
         99:a2:3f:8a:c0:8d:af:cc:83:35:15:52:31:2f:2f:cf:0b:6f:
         00:72:5e:7c:bc:9a:78:d9:91:df:e3:f0:70:47:13:d2:53:6c:
         c2:b3:c1:c5:45:68:a6:b1:4f:fd:42:17:a7:94:b6:ea:e0:07:
         21:c1:8c:ff:13:e0:6f:11:f9:17:5d:d2:95:ea:7c:c4:6d:73:
         fa:fb:3b:4c:0a:61:45:99:a3:9f:ee:12:e5:33:0a:0d:cc:3d:
         04:cc:15:16:18:14:ca:a2:c4:7d:ec:52:ef:98:d5:7f:03:16:
         cf:cc:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:43 2026 by rpki-client