Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          W9Iv0rx3ux3N/sJTL0gvdBiZlCtadq3tK8PnHeFU1tc=
Subject key identifier:   C3:F5:4E:75:FD:42:9D:AC:86:92:68:D2:7D:7D:C7:A7:4F:84:B0:92
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       019EC3DCADA9B1519A3BC6A6B9B91F42E754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          0F38
Signing time:             Sun 14 Jun 2026 02:01:19 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:19 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:19 +0000
Files and hashes:         1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: OnNs7Ux0CZng8oKGnBx04K3t0UfjhcD8MjBAHLp12+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:ad:a9:b1:51:9a:3b:c6:a6:b9:b9:1f:42:e7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Jun 14 02:01:19 2026 GMT
            Not After : Jun 15 02:01:19 2026 GMT
        Subject: CN=c3f54e75fd429dac869268d27d7dc7a74f84b092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:4c:65:0a:10:eb:d4:05:4c:66:da:c6:3e:
                    1c:27:fe:0b:e7:b6:92:ff:2a:9a:8a:75:db:45:23:
                    b1:3a:53:40:a9:d8:bf:77:ed:b9:4e:83:16:ae:94:
                    02:ce:e7:ef:6a:1f:25:9a:5e:b4:fd:ca:94:58:b2:
                    c2:0d:1f:e3:f4:71:10:9d:37:6a:a4:d3:75:7d:43:
                    31:38:36:5a:a2:fa:62:28:2a:d2:c6:2f:5b:b4:d2:
                    d0:cb:b0:dd:83:2d:e3:90:8b:d0:53:15:71:b1:59:
                    a5:bb:2e:1c:4e:0e:80:c2:55:ed:da:8c:6c:a6:58:
                    c5:70:85:cd:fb:36:b3:8b:08:19:e6:ff:9c:eb:2b:
                    c3:68:eb:70:36:af:7a:b2:f6:04:79:1b:42:10:7f:
                    93:75:63:fe:9e:1c:3d:45:61:a6:bd:16:cb:3e:16:
                    16:d8:f6:0d:5d:79:96:bf:f8:71:d0:c9:d7:b1:9a:
                    8e:85:a9:42:f2:a5:6f:fe:0a:b0:db:ba:57:28:d2:
                    0d:94:de:f6:6b:bf:1e:ef:4c:df:87:02:f7:ef:6d:
                    94:98:7d:b2:3a:56:3b:1d:94:87:03:b3:12:40:bf:
                    b7:4e:b6:d0:6e:3b:ad:67:99:6c:ac:6e:b4:60:63:
                    75:e8:a9:82:91:3a:d6:ce:ea:18:f1:c2:1c:72:40:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:4E:75:FD:42:9D:AC:86:92:68:D2:7D:7D:C7:A7:4F:84:B0:92
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:23:bf:a8:13:fc:73:14:bc:c4:ee:ca:6b:3c:6f:19:24:
         f3:a5:c9:38:e2:1a:21:0d:51:fe:d0:38:99:5b:4c:d2:29:0f:
         6d:67:50:ad:b1:d2:c7:e2:b4:f6:da:bf:b3:8a:2d:8b:ed:32:
         74:a4:e4:b0:5e:14:4b:0b:25:16:4b:e5:1a:a1:a0:59:e2:cb:
         e4:7d:07:02:f9:f8:d6:a5:5f:e9:d0:0e:3b:a1:30:a8:30:66:
         57:18:b2:33:a5:4e:0f:58:2e:96:8e:70:54:bd:f3:27:15:04:
         d2:e6:cf:5d:8c:ca:db:28:06:39:9a:d9:b3:f5:98:a4:3b:62:
         98:f4:e5:4c:4e:f5:7b:d7:01:63:04:82:c0:ec:92:cc:1b:c7:
         18:75:bf:c0:c1:00:29:71:3c:48:d6:af:9b:c8:78:4c:a2:05:
         2a:66:ec:eb:60:8b:6b:3d:f7:a3:ae:57:b6:a8:38:5f:54:79:
         5c:cc:82:e8:51:fc:90:2f:c6:83:65:10:4c:2e:14:aa:66:6c:
         7b:8b:e8:41:e0:94:ee:1d:37:23:16:e2:85:86:77:08:c8:68:
         d8:61:aa:66:7d:51:38:a1:20:8a:2c:f8:25:57:f0:73:2c:32:
         a6:51:cf:f8:ad:53:57:fe:96:5e:28:9a:f5:d9:3e:36:ed:fd:
         c8:5a:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:22 2026 by rpki-client