Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          RCSx4WWq1TBTicG+wKQD8cLxqhJZSrxcugmr+Qtp8AM=
Subject key identifier:   39:11:06:AE:0D:62:90:06:D3:2E:9F:D8:E6:BE:43:34:C8:62:4A:AF
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019EBDD9B5557A000F2CB190397EDD2993CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1976
Signing time:             Fri 12 Jun 2026 22:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:22 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: trrBCsFY9bNUefLMjwLOtzkmUr7ceVJtCtgzeGLFp3E=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:b5:55:7a:00:0f:2c:b1:90:39:7e:dd:29:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jun 12 22:00:22 2026 GMT
            Not After : Jun 13 22:00:22 2026 GMT
        Subject: CN=391106ae0d629006d32e9fd8e6be4334c8624aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:84:3a:1d:15:55:55:c8:07:fe:e4:c3:63:
                    5b:ed:07:27:ef:8c:ef:97:e4:ff:d4:11:9c:f8:ae:
                    22:ae:14:b7:80:60:03:b6:0b:14:f6:26:ae:a9:2a:
                    0c:d8:f9:2a:03:d4:4a:43:a0:2a:0d:89:49:b1:5c:
                    c1:56:3c:d4:6a:f7:33:c6:81:21:57:df:0d:8b:f6:
                    d1:eb:d5:d0:ed:d3:58:db:b2:e2:49:c9:af:df:08:
                    5d:7d:bf:00:3b:5a:60:f4:e8:60:2c:47:d7:f1:4b:
                    cc:0d:9e:96:8c:31:78:20:0c:f6:25:d7:70:c7:a5:
                    ad:b6:e3:0b:26:d5:b2:a8:ae:90:9c:1e:27:f6:ed:
                    85:50:15:c9:bc:34:a5:33:dd:d2:fa:9c:c1:ee:fb:
                    63:a1:ea:31:a2:bd:37:65:ba:ab:76:c2:ab:15:06:
                    bf:5b:fa:ea:0a:ad:c2:2c:e4:71:74:7e:85:b7:43:
                    40:b7:32:d7:5b:80:4c:b6:b1:a9:dc:a4:f6:60:8e:
                    4a:dc:d7:2f:33:fb:ab:5a:e3:4f:f0:9b:b2:1c:f8:
                    f9:22:da:70:b8:1b:9e:ce:a5:d5:1d:81:0b:f5:55:
                    c4:e3:09:18:b4:fd:29:63:e7:5c:26:69:b9:06:f4:
                    5e:a4:32:25:7c:ae:85:18:04:a2:d0:10:a7:0d:60:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:06:AE:0D:62:90:06:D3:2E:9F:D8:E6:BE:43:34:C8:62:4A:AF
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:c8:33:2c:d8:c5:69:56:b9:e2:5f:5c:49:62:cd:ba:79:
         f7:3e:e2:9d:cb:e7:b3:fe:ac:e5:bf:6f:4f:c3:d2:55:49:46:
         fd:5b:df:82:59:7f:89:e2:66:e4:03:d0:6b:2b:e0:44:d8:d1:
         7b:4b:c4:bf:59:f0:fc:0c:e7:f0:3e:71:45:d1:c3:e8:d7:c0:
         74:1c:42:13:3e:95:cb:16:21:7d:86:b5:09:80:49:1e:30:cd:
         f7:db:8c:8a:84:2b:a9:5b:a9:a5:2b:4a:50:c6:f7:24:70:ed:
         6e:cb:ff:75:85:6c:dd:a5:e4:6d:10:fe:91:65:f4:05:16:0b:
         23:68:0b:19:cf:cb:1a:97:6a:be:70:ad:6e:df:c6:51:33:67:
         40:f5:c8:6a:4f:00:e0:87:79:5b:43:47:dc:8b:f8:53:bc:d6:
         eb:b8:8d:e7:50:7e:bd:a2:cc:0c:ce:7e:68:b8:96:00:a7:b7:
         79:d9:fd:6f:11:f4:1e:0c:c6:c3:9c:33:7b:19:a4:8b:bb:fe:
         07:4f:9e:0c:c3:82:68:8f:93:9c:66:38:d3:34:9d:b4:e5:fb:
         ca:ec:4f:64:6e:e6:d3:9e:7c:ff:a6:7e:49:85:ea:ef:01:12:
         b9:3b:ef:73:fa:39:28:91:fd:5d:b9:73:af:5c:d7:dd:f9:cb:
         ba:8c:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:53 2026 by rpki-client