Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File:                     eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier:          XF35sPBlU47J2aqPPenJxaVYrt2ke21DO8AH7H0RoHY=
Subject key identifier:   76:D3:18:CB:05:D0:CB:24:19:0C:D4:38:00:7B:3B:95:BD:A4:A5:CE
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer:       /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial:       019EC3A52EBEF28E42CA6A00FF5042A920DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number:          E9
Signing time:             Sun 14 Jun 2026 01:00:42 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:42 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:42 +0000
Files and hashes:         1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
                          2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: ojeOyeShf4/F1LO1PTtJREPU31B7QK3qSsUDTjNEyeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:2e:be:f2:8e:42:ca:6a:00:ff:50:42:a9:20:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
        Validity
            Not Before: Jun 14 01:00:42 2026 GMT
            Not After : Jun 15 01:00:42 2026 GMT
        Subject: CN=76d318cb05d0cb24190cd438007b3b95bda4a5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:ef:0c:02:71:67:e8:fd:ae:89:72:03:e3:
                    94:d9:eb:52:da:fb:6e:c9:b1:2f:52:d8:52:17:25:
                    4c:54:0d:91:11:3b:36:f0:ba:3d:c7:b5:50:88:4d:
                    51:fe:8b:b0:f7:af:6b:b6:6a:35:18:96:cb:77:9d:
                    1b:f5:86:49:d4:d3:c6:fd:a8:47:e4:1e:38:99:a3:
                    05:62:a3:0f:a6:40:7e:e8:30:25:07:67:be:e1:17:
                    bb:47:9d:9c:a9:8b:2a:9a:f0:73:6c:17:e8:92:85:
                    81:bf:25:1e:2c:04:85:63:5a:c2:4e:c6:49:fa:4e:
                    34:84:cf:16:55:af:69:3b:c2:94:30:7f:98:93:5c:
                    84:22:57:3e:cf:3f:d1:5c:69:de:57:e1:61:dd:7a:
                    62:fd:85:b8:43:c2:32:a4:18:59:e8:89:aa:06:eb:
                    0b:61:33:1c:fd:14:4e:1f:f8:c5:b2:58:ab:50:8e:
                    2a:c8:8d:3f:ab:ca:42:ad:e4:26:2f:bc:8e:06:4c:
                    e6:9b:d1:6e:fb:3f:66:80:68:bc:1a:25:3a:14:b9:
                    72:a0:08:7f:27:a7:33:7a:ef:17:fc:33:ab:3c:7e:
                    ca:f2:b5:57:ae:08:12:81:24:bd:58:48:db:63:ac:
                    9d:fb:51:bb:74:39:2b:b6:01:13:75:36:54:88:af:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:18:CB:05:D0:CB:24:19:0C:D4:38:00:7B:3B:95:BD:A4:A5:CE
            X509v3 Authority Key Identifier:
                keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:66:11:82:4d:5a:bc:0f:8f:ac:ad:f7:c2:ab:11:e3:20:58:
         2a:94:60:7c:65:bc:32:39:e1:03:bf:74:ad:1e:16:27:81:4a:
         1a:42:69:00:7e:8f:98:15:81:f6:3d:62:d8:75:a4:ac:92:59:
         9d:ce:fe:22:d8:d5:e1:9e:00:02:e4:f1:95:2c:0b:4d:4f:20:
         38:95:33:59:c1:d4:54:fc:29:7a:60:85:9d:95:0e:69:46:d7:
         57:ea:2c:a1:27:24:66:99:5f:87:9e:34:e6:55:77:05:4a:1a:
         61:73:ac:36:12:45:f0:bc:32:5c:28:05:81:d3:0e:b2:18:e0:
         d7:7f:97:47:10:bb:a7:05:45:ca:df:6e:9e:e2:16:d2:55:aa:
         f5:45:e2:02:35:6e:c4:5f:49:b7:3e:5f:47:9e:a0:e0:87:da:
         2a:2e:d1:45:9b:1c:ad:eb:a0:e4:57:93:2c:64:72:11:04:8b:
         da:ff:7e:87:7d:37:91:68:29:aa:37:08:31:b5:90:31:54:a2:
         68:fe:65:f2:d9:11:cd:44:68:20:6d:bc:67:ec:54:d1:26:67:
         7f:1c:7c:5c:7f:59:30:23:25:33:99:ec:ca:8e:f3:ee:67:bb:
         b0:f6:fb:a6:b7:3e:d9:fd:c9:78:93:ab:9e:44:db:cf:b9:44:
         51:ad:40:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpS6+8o5CymoA/1BCqSDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTkxMTFiZmQ3MGI5MTc0NGRmYTRhNDlmZjkwM2IzOTFj
NWMzMzIwHhcNMjYwNjE0MDEwMDQyWhcNMjYwNjE1MDEwMDQyWjAzMTEwLwYDVQQD
Eyg3NmQzMThjYjA1ZDBjYjI0MTkwY2Q0MzgwMDdiM2I5NWJkYTRhNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygbvDAJxZ+j9rolyA+OU2etS2vtu
ybEvUthSFyVMVA2RETs28Lo9x7VQiE1R/ouw969rtmo1GJbLd50b9YZJ1NPG/ahH
5B44maMFYqMPpkB+6DAlB2e+4Re7R52cqYsqmvBzbBfokoWBvyUeLASFY1rCTsZJ
+k40hM8WVa9pO8KUMH+Yk1yEIlc+zz/RXGneV+Fh3Xpi/YW4Q8IypBhZ6ImqBusL
YTMc/RROH/jFslirUI4qyI0/q8pCreQmL7yOBkzmm9Fu+z9mgGi8GiU6FLlyoAh/
J6czeu8X/DOrPH7K8rVXrggSgSS9WEjbY6yd+1G7dDkrtgETdTZUiK+BXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbTGMsF0MskGQzUOAB7O5W9pKXOMB8GA1UdIwQY
MBaAFHiZERv9cLkXRN+kpJ/5A7ORxcMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0Mjgt
ZmE5MjQ0MDc0MDFmLzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0MjgtZmE5MjQ0MDc0MDFm
LzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGYRgk1a
vA+PrK33wqsR4yBYKpRgfGW8MjnhA790rR4WJ4FKGkJpAH6PmBWB9j1i2HWkrJJZ
nc7+ItjV4Z4AAuTxlSwLTU8gOJUzWcHUVPwpemCFnZUOaUbXV+osoSckZplfh540
5lV3BUoaYXOsNhJF8LwyXCgFgdMOshjg13+XRxC7pwVFyt9unuIW0lWq9UXiAjVu
xF9Jtz5fR56g4IfaKi7RRZscreug5FeTLGRyEQSL2v9+h303kWgpqjcIMbWQMVSi
aP5l8tkRzURoIG28Z+xU0SZnfxx8XH9ZMCMlM5nsyo7z7me7sPb7prc+2f3JeJOr
nkTbz7lEUa1A1A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:54 2026 by rpki-client