Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          ctXVXsNOk7E5UZI7gALk4HSVxl9N+qQy22G2f+pk/2k=
Subject key identifier:   76:93:4E:93:93:1D:F7:95:F1:8A:F5:01:EE:CA:61:4D:B9:E2:16:D1
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       019E1E34CC80E8A410C3EA5B775823C93D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1410
Signing time:             Tue 12 May 2026 22:00:37 +0000
Manifest this update:     Tue 12 May 2026 22:00:37 +0000
Manifest next update:     Wed 13 May 2026 22:00:37 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: zlUMad/tN/OkO2xP+01jBznptjhhVuvfBkyLizDqnVI=)
                          2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:cc:80:e8:a4:10:c3:ea:5b:77:58:23:c9:3d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: May 12 22:00:37 2026 GMT
            Not After : May 13 22:00:37 2026 GMT
        Subject: CN=76934e93931df795f18af501eeca614db9e216d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cb:76:ec:9d:05:89:22:3d:b7:d2:7e:aa:a6:
                    ba:c9:64:e7:2a:bc:8c:9a:55:2b:a4:a7:ed:55:59:
                    86:3a:ee:49:55:46:97:ab:0b:92:ae:b7:c1:b0:59:
                    d5:18:2a:19:83:03:b9:aa:45:cf:5b:b7:94:95:11:
                    b5:ea:e3:32:c5:7c:b6:30:ff:2a:0f:d0:2c:97:3b:
                    e7:31:f5:b4:8d:55:8b:ee:d6:57:04:9c:53:cf:29:
                    fa:c6:bf:ca:54:a3:cb:7e:19:38:89:d1:ee:77:a7:
                    6f:13:b8:ce:68:c6:8a:a1:3d:10:19:e1:09:c7:3f:
                    56:bb:c1:04:9a:4a:13:ad:5c:f7:ff:ac:8f:ef:ac:
                    05:4c:14:e8:27:a8:da:21:0a:5d:96:10:f1:ea:ac:
                    6c:f6:1b:22:b3:50:83:9d:1e:65:c3:f8:3f:e6:02:
                    bd:c8:34:db:53:f6:7d:45:d7:4e:7e:e4:bd:08:a5:
                    31:51:90:d9:8f:81:52:f9:c2:90:b0:64:07:5a:eb:
                    f9:cf:56:02:b3:bd:a3:d5:5e:8d:d2:28:d6:fd:e6:
                    5a:97:15:f5:3a:38:a8:58:78:5f:66:df:68:1d:17:
                    74:77:e2:21:28:96:f7:ce:9b:2b:4f:09:9f:07:25:
                    61:cb:ae:b0:58:8f:aa:13:0c:20:37:67:ee:bc:c6:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:4E:93:93:1D:F7:95:F1:8A:F5:01:EE:CA:61:4D:B9:E2:16:D1
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:32:e0:12:88:28:f1:38:ef:32:de:c4:cf:c4:00:2b:7b:
         d0:99:a4:74:90:4b:55:19:0d:0d:21:24:52:ba:da:19:e3:28:
         9d:04:b8:a3:87:6f:52:93:1f:b1:a2:54:8c:76:76:ff:ac:74:
         21:4f:51:5f:1d:f5:f9:5c:48:98:18:8c:b2:a3:f4:3e:c9:28:
         3c:7c:ac:77:75:69:36:b6:4f:50:da:29:ff:76:cd:b2:96:94:
         6d:d0:9b:f1:fb:30:8a:d5:a1:bc:3e:af:87:6d:a2:c6:9d:0d:
         b1:39:4d:e2:7a:d5:c9:70:9d:43:57:ee:68:5b:c5:52:f8:99:
         de:fe:13:81:e3:b9:61:c0:77:64:06:9c:6e:8a:dd:7c:ab:69:
         71:22:ae:f9:da:b7:c1:3f:ed:d8:bc:74:8a:c5:0e:a9:4d:f9:
         af:70:ab:3b:32:fd:7e:55:06:5b:c3:40:3f:fd:3d:79:58:13:
         7c:3c:84:06:51:9a:63:e1:54:18:41:05:ce:03:29:20:d4:27:
         0c:18:49:ce:f8:08:41:8e:a2:94:1b:f9:4a:c6:66:c7:5b:93:
         be:dd:e6:9f:1c:2f:f7:f6:70:6f:d8:d7:d6:71:a9:06:79:14:
         38:61:39:74:25:c9:28:2f:3a:19:91:c7:92:da:82:3b:cf:23:
         60:81:58:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNMyA6KQQw+pbd1gjyT0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjYwNTEyMjIwMDM3WhcNMjYwNTEzMjIwMDM3WjAzMTEwLwYDVQQD
Eyg3NjkzNGU5MzkzMWRmNzk1ZjE4YWY1MDFlZWNhNjE0ZGI5ZTIxNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98t27J0FiSI9t9J+qqa6yWTnKryM
mlUrpKftVVmGOu5JVUaXqwuSrrfBsFnVGCoZgwO5qkXPW7eUlRG16uMyxXy2MP8q
D9AslzvnMfW0jVWL7tZXBJxTzyn6xr/KVKPLfhk4idHud6dvE7jOaMaKoT0QGeEJ
xz9Wu8EEmkoTrVz3/6yP76wFTBToJ6jaIQpdlhDx6qxs9hsis1CDnR5lw/g/5gK9
yDTbU/Z9RddOfuS9CKUxUZDZj4FS+cKQsGQHWuv5z1YCs72j1V6N0ijW/eZalxX1
OjioWHhfZt9oHRd0d+IhKJb3zpsrTwmfByVhy66wWI+qEwwgN2fuvMa1CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaTTpOTHfeV8Yr1Ae7KYU254hbRMB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOysy4BKI
KPE47zLexM/EACt70JmkdJBLVRkNDSEkUrraGeMonQS4o4dvUpMfsaJUjHZ2/6x0
IU9RXx31+VxImBiMsqP0PskoPHysd3VpNrZPUNop/3bNspaUbdCb8fswitWhvD6v
h22ixp0NsTlN4nrVyXCdQ1fuaFvFUviZ3v4TgeO5YcB3ZAacbordfKtpcSKu+dq3
wT/t2Lx0isUOqU35r3CrOzL9flUGW8NAP/09eVgTfDyEBlGaY+FUGEEFzgMpINQn
DBhJzvgIQY6ilBv5SsZmx1uTvt3mnxwv9/Zwb9jX1nGpBnkUOGE5dCXJKC86GZHH
ktqCO88jYIFYlw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:44:27 2026 by rpki-client