Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          xXRpnfhIR42gcAThfxTV/hWWCxJjn3/bCnbjIGIsC0E=
Subject key identifier:   66:70:E2:CD:A4:04:21:DC:38:5D:1E:A1:DD:42:E1:69:17:90:0C:17
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       019E2023D5E41E23CC103D11C31BD2D15911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          10C3
Signing time:             Wed 13 May 2026 07:01:19 +0000
Manifest this update:     Wed 13 May 2026 07:01:19 +0000
Manifest next update:     Thu 14 May 2026 07:01:19 +0000
Files and hashes:         1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
                          2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: H77vuR+q6xvhq2AcyoOX8VhcqLUC79IctR901WOaZ6Y=)
                          3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
                          4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:d5:e4:1e:23:cc:10:3d:11:c3:1b:d2:d1:59:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: May 13 07:01:19 2026 GMT
            Not After : May 14 07:01:19 2026 GMT
        Subject: CN=6670e2cda40421dc385d1ea1dd42e16917900c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:96:50:0f:c2:4e:50:e0:b5:9c:a8:d6:33:
                    1b:5f:55:a1:57:e4:b1:30:c9:d1:88:f0:12:2f:b5:
                    0b:e2:ea:b6:a0:b5:fc:52:4a:7f:48:43:37:5f:e8:
                    21:75:40:4c:28:56:21:9e:e6:33:4f:64:81:71:fe:
                    45:35:07:7f:a8:af:bb:c6:26:90:94:d4:c9:c8:a8:
                    45:4e:01:12:ee:c1:1d:dd:6f:67:7b:d1:9c:41:29:
                    98:dc:d1:b8:20:1b:19:3d:82:36:07:57:25:a7:86:
                    10:76:8c:f0:06:32:b4:57:e4:b9:9d:d2:d5:bc:7e:
                    10:1c:a6:42:c6:c5:30:34:95:b0:9d:1e:1b:54:30:
                    23:b7:cd:93:9d:b0:64:4f:41:cb:a3:6e:4c:42:50:
                    71:cd:84:43:00:9d:cc:d2:19:a9:5b:2d:b6:0e:cb:
                    ab:54:30:3c:ad:eb:ea:f3:69:c5:28:3d:2e:fb:5f:
                    dd:d2:f6:43:bc:50:16:ca:43:e0:0a:32:55:51:b5:
                    08:34:82:16:84:ed:15:b0:b8:41:d7:b2:2d:a9:6c:
                    f9:71:42:3c:09:15:de:61:8f:20:ba:e9:ab:9e:f2:
                    9d:2c:7a:f7:f1:e3:1c:0b:18:ea:76:91:5b:45:0a:
                    68:79:b6:18:04:9e:c5:f4:22:9c:62:8b:be:51:ad:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:70:E2:CD:A4:04:21:DC:38:5D:1E:A1:DD:42:E1:69:17:90:0C:17
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:4e:8a:81:f2:1c:9e:ed:2e:ca:b8:28:49:c7:ee:cf:67:
         64:51:e9:fa:d4:da:1c:1c:93:30:fd:08:80:c2:99:f4:88:64:
         60:51:e4:fd:fc:bf:70:67:b7:4e:30:f8:51:67:74:fe:d3:6c:
         8a:b5:74:72:ea:82:99:21:c9:5d:17:fa:45:21:4c:7b:43:db:
         21:3a:ef:bd:e1:a4:d7:50:88:51:8a:4d:da:54:d5:f0:4b:7a:
         a8:89:6d:7a:28:b5:bb:7c:0f:ab:41:09:d6:18:92:e7:35:ac:
         42:05:86:94:88:ac:67:01:f6:e1:25:48:e3:ac:36:bd:53:63:
         35:ea:fe:3f:d3:ee:91:84:50:f4:ed:8e:b2:7f:16:64:3e:a9:
         dd:d9:56:e0:47:e1:52:ba:81:30:5c:ba:bc:95:2c:33:f5:d3:
         46:23:56:f0:5d:e5:be:26:b3:f9:39:43:2e:c1:e1:d7:f6:5d:
         71:b6:87:8f:cb:1e:f8:90:30:5f:aa:34:79:2f:32:27:70:b2:
         fd:bf:24:1f:26:e0:c7:31:88:72:d9:a1:a1:24:31:d0:81:58:
         f1:7b:26:93:63:7b:ba:c2:5a:9b:92:89:c0:ff:bb:00:77:37:
         f6:58:fe:15:6d:8c:17:7f:a9:c4:25:ad:45:34:e9:0c:c8:64:
         09:19:6e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI9XkHiPMED0RwxvS0VkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5
OGM4NGIwHhcNMjYwNTEzMDcwMTE5WhcNMjYwNTE0MDcwMTE5WjAzMTEwLwYDVQQD
Eyg2NjcwZTJjZGE0MDQyMWRjMzg1ZDFlYTFkZDQyZTE2OTE3OTAwYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRyWUA/CTlDgtZyo1jMbX1WhV+Sx
MMnRiPASL7UL4uq2oLX8Ukp/SEM3X+ghdUBMKFYhnuYzT2SBcf5FNQd/qK+7xiaQ
lNTJyKhFTgES7sEd3W9ne9GcQSmY3NG4IBsZPYI2B1clp4YQdozwBjK0V+S5ndLV
vH4QHKZCxsUwNJWwnR4bVDAjt82TnbBkT0HLo25MQlBxzYRDAJ3M0hmpWy22Dsur
VDA8revq82nFKD0u+1/d0vZDvFAWykPgCjJVUbUINIIWhO0VsLhB17ItqWz5cUI8
CRXeYY8guumrnvKdLHr38eMcCxjqdpFbRQpoebYYBJ7F9CKcYou+Ua1xeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZw4s2kBCHcOF0eod1C4WkXkAwXMB8GA1UdIwQY
MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt
MDgyYjFmN2YwZGIyLzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy
LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg9OioHy
HJ7tLsq4KEnH7s9nZFHp+tTaHByTMP0IgMKZ9IhkYFHk/fy/cGe3TjD4UWd0/tNs
irV0cuqCmSHJXRf6RSFMe0PbITrvveGk11CIUYpN2lTV8Et6qIlteii1u3wPq0EJ
1hiS5zWsQgWGlIisZwH24SVI46w2vVNjNer+P9PukYRQ9O2Osn8WZD6p3dlW4Efh
UrqBMFy6vJUsM/XTRiNW8F3lviaz+TlDLsHh1/ZdcbaHj8se+JAwX6o0eS8yJ3Cy
/b8kHybgxzGIctmhoSQx0IFY8Xsmk2N7usJam5KJwP+7AHc39lj+FW2MF3+pxCWt
RTTpDMhkCRluZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:49 2026 by rpki-client