Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          Th9pcuimUwc3Y1D+a+jj/4W4tV0AeQqo642CauBHt4k=
Subject key identifier:   58:6D:E3:67:3A:25:C1:08:80:96:83:38:8E:7F:97:FA:30:1F:60:C7
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019EBFFF7EC786F2BD03CDBCC7ABD8256EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0993
Signing time:             Sat 13 Jun 2026 08:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:52 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: TAYogzKa/IkMKS8kfxdtBnC+Si9XIm7TjXiGcoNAr10=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:7e:c7:86:f2:bd:03:cd:bc:c7:ab:d8:25:6e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Jun 13 08:00:52 2026 GMT
            Not After : Jun 14 08:00:52 2026 GMT
        Subject: CN=586de3673a25c108809683388e7f97fa301f60c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:a4:01:ca:02:0c:1c:a4:09:89:94:40:8b:
                    3a:f8:26:9d:b1:42:a1:16:1e:64:ef:c3:68:02:68:
                    4a:b5:a0:1a:d3:79:9d:f2:3f:39:66:cf:2c:58:38:
                    f1:0b:d4:25:bc:20:96:79:5d:a2:78:42:47:a1:09:
                    5f:51:83:ff:ac:25:1e:22:fb:a8:cb:cc:ae:1f:be:
                    14:ba:dc:a0:62:13:52:2b:51:9e:e9:70:c7:8b:38:
                    c6:34:35:86:92:3f:50:85:10:fc:df:ea:50:cd:f5:
                    6b:87:8a:dc:36:d2:b0:92:06:21:98:af:95:1f:10:
                    24:ed:a2:88:0f:4d:29:33:64:b5:19:5c:8c:fa:ca:
                    f4:f2:be:81:cf:ca:0c:32:d4:16:1e:d9:10:cf:79:
                    bb:88:31:b8:7e:0c:80:69:72:26:cc:22:57:ef:3f:
                    b8:40:f6:09:03:66:98:7d:91:44:ee:2a:1d:d8:66:
                    de:2a:49:32:ca:e5:09:cb:16:fa:e5:ea:01:fa:ac:
                    d1:0f:c9:77:53:9f:ff:7f:ff:61:ac:a4:c6:39:11:
                    ee:f7:ae:53:fe:44:c2:d4:67:f2:fa:5b:80:4d:42:
                    c2:79:c6:5d:ec:58:ea:94:43:18:3a:dd:3a:82:1e:
                    b2:d0:3f:61:88:42:fc:ce:b2:db:72:6d:bf:87:0d:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:E3:67:3A:25:C1:08:80:96:83:38:8E:7F:97:FA:30:1F:60:C7
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:ad:97:94:00:0d:ef:b0:99:05:e1:1f:d6:5b:de:e7:da:
         1a:a6:31:60:37:0b:89:b2:b5:36:dc:78:fd:ad:06:3d:18:fc:
         19:fb:78:cd:8e:48:f2:49:d4:9f:dd:fe:88:56:c6:85:dd:15:
         f9:b0:01:6c:cd:3b:b9:e1:cd:70:89:20:dc:f8:47:52:2f:22:
         9e:a9:fe:b7:dc:0c:c7:c5:38:54:17:9d:74:db:77:59:b2:2f:
         06:6c:51:23:30:11:bb:79:c9:c1:c6:1e:1f:3a:cd:8e:a5:50:
         1e:3b:92:72:36:15:80:19:90:69:be:0d:bf:2f:0e:2d:08:9b:
         a5:93:33:8e:39:16:23:e2:ac:79:a3:40:e8:95:8e:b0:5f:74:
         9e:e9:34:7e:8c:3f:66:8d:5c:55:08:7a:43:9b:15:1c:9b:43:
         5c:b4:e4:ee:fa:de:96:69:51:31:e5:fc:9e:97:6c:3b:1b:0c:
         f8:96:3b:41:7e:29:f9:d6:5f:f6:9a:a6:f1:b8:32:3a:22:5f:
         cd:08:51:c4:16:19:f7:da:bc:91:e1:7e:d4:73:49:0f:32:be:
         7d:35:18:b0:dd:a0:1e:be:12:40:fc:d4:3d:d2:02:21:84:8a:
         11:67:a0:8a:5f:18:31:ca:e9:00:ca:28:6a:a8:11:5d:4d:23:
         58:db:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:56 2026 by rpki-client