Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          42Bwbk/MYrEZSkVPwtWn/b8Nz3pisYN1xJF76BGZ5us=
Subject key identifier:   D0:E3:69:F4:B8:0F:4D:74:07:CF:DD:5A:96:87:29:30:E9:EE:2C:2C
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       019EC111E4CF0DBBCEBDEA78AEE714E883F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          0CFA
Signing time:             Sat 13 Jun 2026 13:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:35 +0000
Files and hashes:         1: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: fRbEqftnZLZGNnUj9uYyWu8cnq+OsLaPivsHVJWyHXE=)
                          2: xd8WtTpNSiw3OPvDq9rsEjInsvA.roa (hash: fZ0V/o/vI20M9OPDqf1/6QRLbpnmYCprw2uInkjQ1rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:e4:cf:0d:bb:ce:bd:ea:78:ae:e7:14:e8:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Jun 13 13:00:35 2026 GMT
            Not After : Jun 14 13:00:35 2026 GMT
        Subject: CN=d0e369f4b80f4d7407cfdd5a96872930e9ee2c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:37:ad:31:11:7e:64:99:00:5c:fb:e0:ab:
                    71:58:91:40:eb:66:ba:c2:43:ac:73:ca:07:c4:8f:
                    fe:e4:c7:4c:75:02:6e:18:b4:ba:40:43:c2:13:88:
                    c2:ad:c7:ba:e6:4c:39:93:d3:fc:ce:82:b8:c9:2b:
                    0c:9b:3d:22:8e:c1:c2:a8:f1:cb:1b:c3:22:5a:c6:
                    4d:0f:34:b6:77:a9:46:22:a8:82:0b:fa:35:76:36:
                    1c:8d:32:02:17:33:e7:82:3a:fe:b1:80:f5:ce:04:
                    95:3e:d1:52:1f:e8:f5:c8:f6:02:21:42:dd:90:e9:
                    65:87:22:ed:ea:b2:98:bc:8c:ee:c2:c0:32:6e:a6:
                    03:c9:6e:8a:c5:63:c1:e2:47:c9:40:d9:2f:7d:57:
                    23:92:15:39:4f:cf:85:74:f8:7a:84:2a:0c:2d:ed:
                    3a:25:67:70:ec:bf:14:06:fc:c7:60:f4:39:d9:f3:
                    85:c4:21:f7:90:2d:a5:53:e3:72:4e:2c:ee:a3:66:
                    02:97:95:49:10:36:98:aa:b1:6d:60:0c:25:0b:25:
                    d4:13:cc:a9:a0:d2:42:e7:1c:7b:2e:c2:6d:89:9e:
                    a2:17:37:6b:75:7b:37:0a:4b:0c:dc:50:3d:8e:de:
                    de:dd:1f:1b:be:1f:e8:d3:d9:07:a4:fe:b8:9d:90:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:69:F4:B8:0F:4D:74:07:CF:DD:5A:96:87:29:30:E9:EE:2C:2C
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:95:16:f1:70:ac:67:ec:f8:5f:56:b1:ac:72:5b:05:45:
         16:87:05:f6:ab:9e:4c:db:8d:12:55:15:09:2b:7d:46:75:7d:
         c2:d2:a4:3c:c7:9e:ab:6b:ad:d8:85:8d:f2:83:b9:96:66:4e:
         7f:f8:21:fa:5a:80:01:74:b5:4c:14:ad:c7:31:0c:2b:b1:4e:
         c3:ad:c2:e6:0a:6b:67:7d:c5:a6:f5:4e:f0:c0:d3:c1:be:3c:
         a0:ac:3c:cb:fa:2f:7d:1f:f7:fd:c3:37:a4:84:2f:b5:59:a5:
         7b:f9:7a:15:49:5b:c2:81:5f:d4:b5:de:02:6e:d6:0c:91:88:
         c0:09:b1:62:38:d0:9f:21:22:48:c3:47:30:e5:27:08:1a:e0:
         1a:7f:cc:11:47:7b:1f:08:d0:e0:4f:af:8a:e2:a8:1b:47:85:
         8d:fe:8d:81:12:6a:3d:6a:14:4c:e9:16:2c:64:25:39:28:0a:
         40:62:31:b7:01:56:e6:9c:e2:ae:e1:40:ee:02:e6:8b:fd:1e:
         fe:ec:46:40:5e:65:d0:c8:4a:af:2a:f2:b8:ad:00:34:c9:19:
         08:42:ef:17:ce:1d:27:e6:a9:b6:72:11:92:57:51:ae:93:e9:
         fb:ba:a0:db:71:cb:4d:ea:60:78:32:31:15:78:59:f9:e0:74:
         0d:9e:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:57:18 2026 by rpki-client