Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          uJG5ZlygW3dyTfzEUhaybPlfrU6+UT0uNfNRDUV97UQ=
Subject key identifier:   65:7C:35:4F:EF:AD:37:6E:3A:FD:1F:DD:38:13:D7:C8:6B:4D:45:D9
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       019D992B28B97D7DACA15A8F917764A89CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0C20
Signing time:             Fri 17 Apr 2026 02:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:35 +0000
Files and hashes:         1: C_swQ1amU9xoTLneSqK5rEPwSHY.roa (hash: kd5UBDyTUyD8YdrwighS1kP5DDkufkXNg0jZY2oswQA=)
                          2: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: qqWaMDkOw0U/uKxxy4dKTZDWsrfSJDwW6beHayfLsv4=)
                          3: FrHMIqU1nyql5fH458yK8iNimJU.roa (hash: HPL1MkQufVuqDT5rCNUypCZgqKjP0W6MbJyxk8JQnmg=)
                          4: winuxMCIMGCWTsiZdugMqwv5WZg.roa (hash: TKNpHnOSd+fkBMQkgcz+gS3AAX2dTYjFIei9VWwZPxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:28:b9:7d:7d:ac:a1:5a:8f:91:77:64:a8:9c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Apr 17 02:00:35 2026 GMT
            Not After : Apr 18 02:00:35 2026 GMT
        Subject: CN=657c354fefad376e3afd1fdd3813d7c86b4d45d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:4f:9c:30:19:53:3c:cd:9e:4f:32:67:d4:
                    11:2b:b0:6e:f1:4e:56:42:f7:33:61:9a:7f:f5:8e:
                    75:76:8d:6a:31:5d:a5:81:5c:1f:52:89:60:17:4d:
                    83:18:1f:e8:35:a4:f6:f4:80:b0:4c:90:2a:8c:82:
                    42:20:ff:92:d2:55:14:c7:48:32:5a:b4:64:76:c3:
                    0e:50:63:61:fe:11:44:a3:38:fd:03:f8:d7:66:eb:
                    3f:c9:de:ec:25:37:3a:ae:2b:b3:53:2d:e8:5f:d9:
                    97:81:96:d3:5e:9f:f5:bc:f7:c2:89:85:1c:97:2b:
                    f2:1c:52:01:53:cf:36:15:6b:bc:4b:d8:f3:05:00:
                    ba:bc:ba:07:a3:ad:1e:01:1c:2a:19:7c:82:7e:19:
                    f4:4e:99:79:ef:86:92:a1:de:42:d4:02:ad:af:0f:
                    61:fa:de:f9:d3:a4:e0:ba:9a:31:c3:ab:21:c7:4d:
                    7a:a5:b3:c8:55:7d:9d:c5:28:ab:1b:6d:ce:32:12:
                    e8:fd:60:3c:84:37:8b:ea:42:bb:f4:fa:f5:3b:00:
                    6a:dc:9d:cc:73:15:24:d2:dc:af:49:8f:ea:20:9d:
                    7d:fd:f6:f7:4c:dc:22:6d:03:84:c1:a2:9b:7c:f4:
                    93:82:e3:0b:c3:01:c1:56:c8:aa:2d:80:8e:8e:57:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:35:4F:EF:AD:37:6E:3A:FD:1F:DD:38:13:D7:C8:6B:4D:45:D9
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:25:0f:b2:fd:1b:3d:47:6b:13:77:2e:69:dc:d0:c0:0c:25:
         04:4a:b9:3e:e9:bb:8a:07:27:24:08:d6:26:74:84:f4:52:7b:
         84:93:2e:ed:23:bd:6e:ed:f3:1a:ed:54:ec:b7:29:75:f1:06:
         30:46:61:20:fb:83:8d:32:ae:cf:c4:38:4b:96:4a:bd:7c:d8:
         50:b2:c8:26:47:9c:56:e0:5f:1e:28:db:1d:74:ea:a1:8b:75:
         23:f8:88:7a:2a:56:96:e8:ae:63:d5:f9:1e:2d:42:3f:08:58:
         2e:72:33:6d:66:e2:ee:e4:3c:4a:f3:76:7d:43:c7:d9:54:c0:
         97:72:46:36:6b:ba:23:a0:56:d6:e0:28:66:e6:c2:b9:1d:fa:
         dc:86:ac:74:1d:e6:a2:e9:bf:63:fb:66:01:23:e9:2a:8b:93:
         85:ca:63:ac:24:f5:20:2e:26:10:4c:a4:af:7b:56:5c:9b:7e:
         e4:13:ba:92:d4:58:3c:c2:b1:88:fc:af:c5:68:96:46:a8:ca:
         b2:1a:c5:0e:8f:d0:e5:a3:b6:ae:41:42:86:9a:9d:f8:ba:a5:
         88:bf:70:06:10:3b:c7:57:f9:5d:2e:57:4a:d1:93:2e:62:a9:
         47:2a:62:88:a2:ec:56:66:81:6a:76:27:55:7b:40:80:83:a4:
         ec:9a:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:51 2026 by rpki-client