Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File:                     ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier:          oDoSz0rLZKCYkoP46I/tcNXQSuyMqURD8iz61Tdjjl4=
Subject key identifier:   84:B2:64:1F:12:99:51:13:98:C3:AF:41:D4:7D:60:55:7C:D7:DC:AE
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer:       /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial:       019ED3BE382F6162CDF23DD9C2CB85C1CAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number:          197C
Signing time:             Wed 17 Jun 2026 04:01:59 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:59 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:59 +0000
Files and hashes:         1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
                          2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: 8rdyJVIhA0wBh2GFOMfLNE/iLLyZqvuqX+w/z4Xa+N0=)
                          3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:be:38:2f:61:62:cd:f2:3d:d9:c2:cb:85:c1:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
        Validity
            Not Before: Jun 17 04:01:59 2026 GMT
            Not After : Jun 18 04:01:59 2026 GMT
        Subject: CN=84b2641f1299511398c3af41d47d60557cd7dcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:5a:02:e7:c1:8c:c1:69:9d:b5:72:27:41:
                    6b:e7:7f:42:0e:69:fe:16:65:c7:45:1d:6d:30:63:
                    c3:be:2a:b4:6f:69:aa:92:4f:2f:22:45:21:9f:9a:
                    58:a3:73:dd:d3:b3:bb:35:e1:d2:09:97:98:3e:00:
                    26:82:31:77:14:0f:48:17:12:00:b4:bd:fb:01:63:
                    b1:35:ab:fc:c9:63:e2:ba:31:f5:6b:10:ca:24:95:
                    23:79:32:5a:f0:fd:3b:6b:9d:1f:36:08:48:42:c3:
                    42:49:be:81:3c:db:dd:60:2c:2b:cb:eb:5b:ee:73:
                    e1:13:8e:26:60:c7:12:14:07:36:dd:ef:81:62:0c:
                    7a:38:5d:11:4c:c7:60:83:c1:ac:dc:f4:29:d2:dc:
                    68:88:15:27:f8:ad:0e:d2:5e:7e:7f:d8:fe:91:86:
                    51:a5:b1:5a:fc:5e:2a:68:36:fb:74:f5:05:61:bd:
                    d1:97:65:16:89:1b:c5:a7:b1:2a:65:c2:a7:5e:b8:
                    42:02:47:5c:cd:f1:60:3f:46:1d:1b:a8:d1:ea:01:
                    b8:42:ae:fa:a7:82:e0:1e:dd:44:2e:02:a8:bd:a8:
                    eb:26:80:3c:42:43:a6:71:be:95:b3:aa:58:3a:2a:
                    bf:ef:4e:0d:3a:7e:d4:76:8c:31:d1:71:58:58:44:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:64:1F:12:99:51:13:98:C3:AF:41:D4:7D:60:55:7C:D7:DC:AE
            X509v3 Authority Key Identifier:
                keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:e0:d5:26:db:a3:01:c7:5f:72:b4:3e:0b:66:50:09:af:
         ea:18:f1:c7:89:8d:4b:8c:7a:07:0c:28:be:c6:7c:50:10:89:
         dd:70:34:d6:91:63:b5:3a:0e:a5:43:33:d5:dc:68:fb:63:80:
         75:c2:19:4e:60:92:ee:d2:e9:a8:d7:94:9f:0b:e2:f0:75:e0:
         8f:ce:16:6a:4e:9e:ef:66:6e:e5:bd:13:86:b5:60:1e:5f:8a:
         db:89:6d:ae:d9:8a:7d:0c:38:19:a7:fe:31:80:46:76:fd:c8:
         26:79:57:84:c8:4e:78:12:ec:3b:a0:ee:b3:63:34:00:53:76:
         d3:8e:06:42:e8:76:9b:78:0b:c3:69:b7:fe:b3:fd:5c:8d:9a:
         60:b8:23:5f:23:b0:84:93:54:3a:c0:9e:5b:d1:be:2a:6d:1c:
         22:e1:cd:1d:4b:08:8f:6b:e0:6f:3b:16:7f:a8:ae:eb:7e:15:
         08:78:e0:a0:da:80:7f:95:13:3d:35:2d:91:c5:18:ec:6b:0e:
         2d:30:86:2f:78:5f:98:dd:ea:64:a0:11:cc:e9:30:33:c8:33:
         ee:7f:02:3b:a6:8e:ae:bd:38:39:0f:a3:a7:d6:25:04:57:13:
         ed:1a:03:f1:42:c8:98:7c:57:eb:19:c3:a1:cd:4c:bf:93:48:
         cf:86:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:20 2026 by rpki-client