Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          +SlTKP3ZWjf8Njg84VfGcDiH7e+tTptmHjoaCXiC6wI=
Subject key identifier:   7A:2D:95:B5:CB:EB:08:A7:AC:C9:E4:22:F5:5B:B1:9D:AA:C9:C6:EA
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       019E1EA39003EBC2F56447CA54042E979A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          17C8
Signing time:             Wed 13 May 2026 00:01:36 +0000
Manifest this update:     Wed 13 May 2026 00:01:36 +0000
Manifest next update:     Thu 14 May 2026 00:01:36 +0000
Files and hashes:         1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: Wwu8/P0xqj8gDmgRMLrF9JVcLKx3/H4UQBZWuYz6ABc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:90:03:eb:c2:f5:64:47:ca:54:04:2e:97:9a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: May 13 00:01:36 2026 GMT
            Not After : May 14 00:01:36 2026 GMT
        Subject: CN=7a2d95b5cbeb08a7acc9e422f55bb19daac9c6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:4f:c7:dc:f5:52:e3:bf:de:e1:ed:9f:50:
                    39:c0:37:32:d3:f4:2b:85:09:f7:be:b8:28:22:86:
                    4a:c4:c1:35:bc:62:12:50:27:cc:3a:4e:bd:11:c6:
                    1c:d5:a6:b2:6d:0c:ec:37:7c:c0:62:5e:78:9e:73:
                    07:af:eb:85:2e:54:35:62:93:40:a2:ed:6d:28:66:
                    f0:31:3d:09:87:3d:e3:a4:3c:d9:43:8a:34:37:59:
                    84:e2:73:e3:4d:b2:6e:6c:61:05:51:0c:81:d2:68:
                    bc:f7:34:65:8a:2d:1b:a2:fd:3d:f8:35:a7:37:e1:
                    9a:c4:1a:b7:bc:e4:21:de:4d:b2:f9:62:68:5a:48:
                    0e:12:aa:b7:6e:13:b4:41:31:5c:07:ac:8d:0d:61:
                    4c:a0:88:2e:89:f2:75:f5:8f:48:2c:cd:24:ea:70:
                    7a:74:ab:0e:e1:93:08:dd:d4:83:80:e2:ba:8e:31:
                    ef:45:15:74:8b:e4:c2:50:a1:ae:c9:bc:8d:f9:ce:
                    b3:5e:22:fd:25:06:d9:eb:e3:f3:1a:1c:35:4d:cb:
                    97:11:93:ba:2d:46:e6:8c:cc:0d:44:78:12:7d:b3:
                    27:56:54:75:a7:48:b1:e1:7a:d3:44:75:cc:a7:23:
                    b5:64:82:e7:99:47:18:05:c8:9b:7e:0a:19:d5:5c:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2D:95:B5:CB:EB:08:A7:AC:C9:E4:22:F5:5B:B1:9D:AA:C9:C6:EA
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:aa:50:d7:4a:20:4d:70:c8:86:df:3b:e2:df:a8:63:fe:
         85:b4:75:0e:8a:44:43:c8:18:0f:a3:bb:59:52:ef:d1:ce:ee:
         1c:ab:36:2d:60:d3:8d:ea:4f:79:e4:51:47:14:0f:71:d8:9d:
         3d:08:91:52:9a:5e:de:28:c1:f6:f5:07:f4:f8:17:13:b2:3e:
         25:6f:12:dc:e8:10:a3:9f:cf:be:8e:1c:66:59:09:96:90:0d:
         28:f1:7d:52:df:d8:68:89:92:68:3f:50:6d:f2:ef:a0:de:67:
         d0:fd:2f:66:62:5a:3d:df:07:73:8b:13:34:f3:0b:e9:45:2f:
         00:cd:d2:31:f1:3b:e8:b2:7f:ce:af:ab:a5:89:ce:40:f4:16:
         34:aa:72:b3:bd:1d:cf:00:fc:f8:5b:50:0d:6f:cb:96:73:78:
         dc:70:20:87:ad:a9:08:29:98:86:46:22:17:65:b8:a1:99:19:
         10:ec:7d:e4:39:82:d5:c6:81:8c:87:84:b6:14:38:c3:b5:9c:
         78:56:f2:c6:4b:fe:11:8b:e2:55:02:f8:55:10:c1:c8:26:18:
         3e:1e:e6:02:d3:5a:84:e3:f5:70:a6:d6:f5:db:67:f1:a5:d8:
         c9:a3:7d:12:26:c9:5d:54:3b:34:da:eb:34:05:fd:97:57:8c:
         15:59:72:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo5AD68L1ZEfKVAQul5pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjYwNTEzMDAwMTM2WhcNMjYwNTE0MDAwMTM2WjAzMTEwLwYDVQQD
Eyg3YTJkOTViNWNiZWIwOGE3YWNjOWU0MjJmNTViYjE5ZGFhYzljNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq65Px9z1UuO/3uHtn1A5wDcy0/Qr
hQn3vrgoIoZKxME1vGISUCfMOk69EcYc1aaybQzsN3zAYl54nnMHr+uFLlQ1YpNA
ou1tKGbwMT0Jhz3jpDzZQ4o0N1mE4nPjTbJubGEFUQyB0mi89zRlii0bov09+DWn
N+GaxBq3vOQh3k2y+WJoWkgOEqq3bhO0QTFcB6yNDWFMoIguifJ19Y9ILM0k6nB6
dKsO4ZMI3dSDgOK6jjHvRRV0i+TCUKGuybyN+c6zXiL9JQbZ6+PzGhw1TcuXEZO6
LUbmjMwNRHgSfbMnVlR1p0ix4XrTRHXMpyO1ZILnmUcYBcibfgoZ1VzWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHotlbXL6winrMnkIvVbsZ2qycbqMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy2qUNdK
IE1wyIbfO+LfqGP+hbR1DopEQ8gYD6O7WVLv0c7uHKs2LWDTjepPeeRRRxQPcdid
PQiRUppe3ijB9vUH9PgXE7I+JW8S3OgQo5/Pvo4cZlkJlpANKPF9Ut/YaImSaD9Q
bfLvoN5n0P0vZmJaPd8Hc4sTNPML6UUvAM3SMfE76LJ/zq+rpYnOQPQWNKpys70d
zwD8+FtQDW/LlnN43HAgh62pCCmYhkYiF2W4oZkZEOx95DmC1caBjIeEthQ4w7Wc
eFbyxkv+EYviVQL4VRDByCYYPh7mAtNahOP1cKbW9dtn8aXYyaN9EibJXVQ7NNrr
NAX9l1eMFVlySQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:13:48 2026 by rpki-client