Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          OOq7b5YCAHLJ7dWxmBHHATqy9KT+TI9REUmycapigRs=
Subject key identifier:   E4:CE:4A:AE:12:22:91:A5:FA:F2:CF:D2:79:41:90:76:47:45:2F:E9
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       019EBEB5D66F7BD68CF1F2C7B08F52DFFBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 02:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:48 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: FZZiTDdC77eXCbbp5OF94N4rOegoguhalCfcBXppYtY=)
                          2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:d6:6f:7b:d6:8c:f1:f2:c7:b0:8f:52:df:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Jun 13 02:00:48 2026 GMT
            Not After : Jun 14 02:00:48 2026 GMT
        Subject: CN=e4ce4aae122291a5faf2cfd27941907647452fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:57:eb:c0:e7:c2:09:90:9a:53:90:44:b9:
                    b9:4c:3f:cc:f4:fb:c3:45:3a:b6:f7:b5:33:c6:1d:
                    c1:ac:de:ec:92:27:28:a0:aa:ac:6f:65:76:65:f2:
                    32:93:6c:87:40:0d:20:03:4c:6f:79:64:5a:2c:a9:
                    9c:00:ed:25:ed:67:03:1b:a8:30:25:be:c7:6b:81:
                    3b:8d:0e:9f:f7:ff:e5:47:34:65:70:65:43:61:95:
                    4a:06:d1:4d:50:b0:dd:53:c5:4f:eb:ae:13:cf:db:
                    9e:21:4d:a3:4a:a3:68:40:f1:b2:1d:36:91:c6:be:
                    92:b4:31:a9:16:31:00:3a:7c:bb:b8:52:e1:4a:cf:
                    69:35:83:16:fd:b2:64:79:81:a1:ff:73:62:d8:fd:
                    6f:b9:91:80:23:f6:4a:bd:b7:af:35:aa:68:79:aa:
                    24:91:ea:43:54:17:4c:37:41:29:61:6b:fd:f3:24:
                    73:2d:fd:d7:ab:55:3f:aa:28:39:a2:5d:c1:d0:4f:
                    a9:c3:01:6b:71:aa:04:59:ef:5c:cc:70:c1:91:fa:
                    c0:ac:aa:07:1c:21:91:2d:9a:2d:12:24:1b:ba:d0:
                    16:c9:61:f6:26:be:42:7e:40:e5:53:e5:2a:2e:ba:
                    af:db:bf:b5:28:f9:15:80:54:f0:b5:1d:14:24:0a:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CE:4A:AE:12:22:91:A5:FA:F2:CF:D2:79:41:90:76:47:45:2F:E9
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:43:10:dd:aa:4b:49:25:15:86:44:79:a8:20:a3:f1:ff:3b:
         9b:61:db:1e:f5:ec:e0:00:07:7d:6f:61:8e:93:e9:9f:fe:16:
         0e:54:06:be:c3:e1:ff:c2:87:bc:a5:5e:e1:be:31:f1:cd:be:
         eb:21:68:b0:27:1a:50:01:38:bb:b6:a2:0e:72:ab:b3:49:c4:
         95:52:0c:00:a2:5f:e2:4b:7f:90:c5:a4:ef:20:3b:06:c2:ed:
         7d:7e:e8:be:59:2c:be:67:c0:f3:38:ce:02:3c:61:ad:fe:1b:
         e7:2a:22:aa:9b:ae:46:eb:ab:02:eb:58:14:95:6b:dc:1f:2a:
         0f:88:42:3b:1b:09:0d:69:39:b6:22:3b:67:53:8b:04:ff:b9:
         a9:cf:8d:ab:e4:a6:76:9f:3f:d0:6a:99:ec:0b:54:5f:61:c3:
         3e:93:8b:29:a9:5d:7b:e3:cb:8a:d5:1d:3f:57:0e:1b:4b:5d:
         81:1d:c5:c4:ad:a9:50:69:af:31:fa:1d:d7:29:c7:08:35:b5:
         2d:67:9a:73:b6:c4:36:e5:4c:53:eb:0b:33:9d:65:5d:83:df:
         1c:44:25:6b:42:52:ec:53:2c:f0:21:43:d9:de:5a:41:e5:b5:
         05:c0:74:38:56:30:e7:fc:a2:48:19:d2:c7:48:28:b2:0d:24:
         f8:4b:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:33 2026 by rpki-client