Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          U4f1p31WNMZY9HwWsVLnTjD4ku1G5I6iFsci6/mEKfg=
Subject key identifier:   52:53:9C:D0:3C:50:17:7A:3C:C7:A6:4B:13:C2:CE:AE:B9:59:E1:ED
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       019EBE7EF3DF3FE2AF747435ACBB697F4163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 01:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:51 +0000
Files and hashes:         1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
                          2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: BljH5ZTMOo3MqAM2I6NiGtJN5KFj5J3Bq6FsR6XAlqM=)
                          3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:f3:df:3f:e2:af:74:74:35:ac:bb:69:7f:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Jun 13 01:00:51 2026 GMT
            Not After : Jun 14 01:00:51 2026 GMT
        Subject: CN=52539cd03c50177a3cc7a64b13c2ceaeb959e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:f2:0e:92:ea:9b:d7:7c:29:ff:fe:18:a9:
                    dc:88:6b:d5:f2:22:5b:93:1b:78:d1:66:16:6d:e0:
                    0a:78:f5:46:ba:52:2f:6f:6a:b4:51:a6:c7:f0:e0:
                    97:b1:7e:d0:bd:36:8e:23:bb:de:65:22:f9:83:99:
                    44:8b:5c:52:29:0a:68:df:92:45:de:52:1c:df:63:
                    99:d7:c0:1c:79:af:43:1a:ff:f9:7d:0c:1d:91:37:
                    26:bb:f2:c9:0a:1b:7a:4c:89:a4:06:e4:ce:ab:55:
                    4b:bd:c5:b4:a5:d1:dd:31:7a:52:5a:67:14:e6:bf:
                    92:0b:cb:38:cc:18:e5:9d:bf:7d:f9:e8:af:8f:13:
                    86:8e:c9:47:d8:67:54:c6:97:24:38:18:a1:bc:de:
                    3d:f8:de:f6:9c:79:90:70:d8:87:77:06:2e:5a:fe:
                    37:fd:0e:8a:eb:e6:fb:a2:31:4e:8a:d7:ad:39:19:
                    f9:67:1e:98:ea:7d:37:af:8f:b3:73:b3:e4:12:3e:
                    5c:f6:7a:35:b7:bd:1d:57:54:13:2d:c4:87:13:99:
                    fe:45:08:d5:c2:a6:84:fc:fd:29:c7:6f:27:71:ae:
                    ba:37:a3:5e:8f:81:80:99:09:2b:c0:53:a7:42:72:
                    95:09:fe:ed:4a:70:b4:d7:a6:df:19:e6:c4:a8:21:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:9C:D0:3C:50:17:7A:3C:C7:A6:4B:13:C2:CE:AE:B9:59:E1:ED
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:30:b3:f6:82:74:66:50:37:da:10:80:0b:bc:16:68:1f:
         dc:b1:f6:20:77:67:a1:63:c5:28:ee:25:ca:3d:cb:c3:b9:e7:
         aa:7b:4f:b8:64:4e:0d:fb:3b:95:a6:e6:1a:77:04:94:47:f6:
         da:fe:8b:53:64:15:8f:b1:6c:79:41:3f:41:f6:b0:96:02:25:
         7c:a2:7b:e7:8f:21:b0:59:08:cc:d9:ff:a5:2b:52:61:f8:c0:
         34:2f:e5:b8:c2:c2:b4:3c:02:6d:ba:04:26:bd:b1:ec:91:57:
         3b:cf:13:cb:bb:f3:a5:0d:60:9a:e5:be:e9:29:7b:a6:c9:3d:
         a6:0d:17:fb:ff:02:0b:48:ea:8e:c9:a4:71:1d:db:8c:66:f6:
         fd:25:75:66:b6:19:49:07:3e:42:98:c3:6e:84:be:18:20:2c:
         ef:32:42:0f:e9:92:c2:84:96:ce:58:5f:a5:ae:df:57:b9:77:
         0f:c0:8c:25:7c:75:ee:9f:8a:7c:33:75:4b:e4:d4:24:a4:3e:
         a9:5e:fb:c7:38:6d:7c:dd:26:ff:6b:68:a7:01:65:71:d6:a8:
         bc:bc:33:b5:58:ce:8d:82:c7:a7:23:e5:02:70:b6:7c:0c:1e:
         42:d2:09:4f:a1:e1:73:27:92:28:41:05:fc:f3:8c:b2:b0:37:
         b0:67:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:15 2026 by rpki-client