Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          TwMLBqRubctlgdnaDgrR4KYAS0CVWAtyplDZKw91dQE=
Subject key identifier:   92:C3:A4:52:C7:16:8F:B5:72:44:FE:F6:94:86:9D:86:5F:AE:B0:45
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       019EC1EDF458C719F6D3548D26555B745470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          0C03
Signing time:             Sat 13 Jun 2026 17:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:57 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: P98cAb+siF55D9yOsJYguhczL26gNjghgY4qFotrvYc=)
                          2: EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa (hash: aArOh7D2m0R/tR8bRjsgJKmh1qSOBK7Sx7lK9wOrfn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f4:58:c7:19:f6:d3:54:8d:26:55:5b:74:54:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Jun 13 17:00:57 2026 GMT
            Not After : Jun 14 17:00:57 2026 GMT
        Subject: CN=92c3a452c7168fb57244fef694869d865faeb045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:57:bd:5e:2e:77:d5:bb:fd:f0:1a:0b:2d:
                    d3:2a:f3:59:c3:98:c4:dd:81:f3:f5:88:03:23:34:
                    c0:97:9e:cf:f7:6c:c9:df:66:f0:46:a3:78:ac:a4:
                    69:10:1b:d7:d7:d5:d9:a5:92:a1:01:83:57:b4:6e:
                    54:ef:c6:05:bc:8f:cc:0a:05:10:51:8f:bc:aa:08:
                    08:eb:13:06:2a:57:16:74:46:32:40:d7:04:d7:48:
                    61:b4:82:bd:41:35:50:96:c8:b3:ba:0f:e8:34:ae:
                    be:c5:eb:06:4e:44:bb:32:05:7c:07:e2:04:c1:9a:
                    dd:b2:95:90:82:c9:cb:bb:9b:ef:29:10:08:36:04:
                    6a:0b:1e:3c:7c:3c:cb:ac:24:5b:df:b2:0e:81:ab:
                    d2:2f:d8:f6:5d:f2:dc:71:9f:97:c1:57:7a:c9:d3:
                    55:02:b0:70:bf:ba:37:0f:cf:82:8a:42:ae:97:4c:
                    ff:f9:12:d9:0c:7b:08:9a:d5:02:c9:c8:d7:3b:f4:
                    5c:a7:9f:4a:01:11:63:07:a7:f2:8d:36:e1:10:e3:
                    4d:ee:4d:7b:f3:d8:5d:ce:51:56:ed:4d:9f:e9:03:
                    ae:73:65:c4:8d:4a:c1:24:40:38:2b:01:5b:ea:c3:
                    93:71:ad:60:42:9c:74:f9:a5:d2:77:ad:b2:7d:da:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:A4:52:C7:16:8F:B5:72:44:FE:F6:94:86:9D:86:5F:AE:B0:45
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:3e:a5:7b:b7:8c:35:f8:9d:68:ff:71:03:83:ba:66:4d:
         47:e0:ca:07:0c:10:f3:19:96:23:3c:88:bb:45:0f:cb:44:b4:
         d9:3d:f2:bc:80:30:8b:1b:5d:ee:37:af:7d:2f:3e:26:55:b2:
         90:ec:4d:0b:d4:4a:9f:a0:d4:78:fc:11:e5:b9:7f:dd:71:50:
         b9:10:69:41:61:11:a9:e6:fd:e1:62:fb:a5:31:0a:ae:01:23:
         01:c9:0b:48:1a:97:18:47:36:b2:a0:1a:80:cb:82:5d:93:37:
         f4:27:d4:ae:8c:f7:64:4e:b8:b5:18:2d:03:08:b0:84:f8:87:
         32:43:b8:52:5e:f7:98:74:da:29:0d:bf:a7:23:64:0c:85:57:
         ec:22:d4:e5:9c:13:f9:7c:41:18:14:10:fb:7c:9f:e7:d3:ce:
         8c:6d:ad:fc:10:de:3f:94:ff:23:5e:19:a9:49:0f:8e:5e:36:
         fb:94:12:ac:bc:d3:b9:a7:0e:04:6d:d3:18:34:17:8a:0c:71:
         59:ba:53:6b:3f:82:93:81:08:e1:55:3f:80:31:c1:6b:df:a3:
         f8:bd:c4:1c:3d:28:91:cc:d5:7e:ef:2f:84:2a:ba:a9:b3:fa:
         ad:6a:ae:b0:dc:86:95:5c:ea:3c:69:87:a4:9b:bb:57:6c:fe:
         06:64:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:04 2026 by rpki-client