Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
File:                     euqoSGZHGIMRqkvfkdXt554qE9A.mft (raw, json)
Hash identifier:          RIP0uOljqwhEaYH5MrkyCkqAu6S//36pP0AeQlCrUHY=
Subject key identifier:   63:24:EB:54:88:EC:7F:44:A3:54:F8:C6:B5:16:CC:09:D3:C2:BD:1E
Authority key identifier: 7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0
Certificate issuer:       /CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
Certificate serial:       019E1C7E0FCE6F4395E528D196CDF361684C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
Manifest number:          0105
Signing time:             Tue 12 May 2026 14:01:23 +0000
Manifest this update:     Tue 12 May 2026 14:01:23 +0000
Manifest next update:     Wed 13 May 2026 14:01:23 +0000
Files and hashes:         1: 4-x_b7YAPW0lqNsX2mQE72BLwNU.asa (hash: sqBEB26cGuqkuCnuPuobcaPqsCX12+bqK2ZHJ9suv/U=)
                          2: euqoSGZHGIMRqkvfkdXt554qE9A.crl (hash: snXXDnWBfXLc4xMBdgQEh57rhSmlkIUjnw3/s7y1Oqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7e:0f:ce:6f:43:95:e5:28:d1:96:cd:f3:61:68:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
        Validity
            Not Before: May 12 14:01:23 2026 GMT
            Not After : May 13 14:01:23 2026 GMT
        Subject: CN=6324eb5488ec7f44a354f8c6b516cc09d3c2bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:52:2d:75:c7:5a:6a:84:97:9e:ee:eb:69:02:
                    e1:df:ee:bb:f0:b8:97:6e:b3:46:26:71:98:86:9a:
                    0a:16:2a:64:4a:d5:51:ce:3f:79:1e:eb:d9:52:97:
                    37:c0:60:e7:4a:0c:31:9f:3b:44:16:22:dd:7d:46:
                    a9:23:8d:1a:1f:a8:b6:b3:93:8c:87:d0:54:a1:7b:
                    3f:16:dd:38:05:7a:eb:67:ba:cf:a5:80:06:8d:07:
                    e0:6c:44:b5:58:aa:bd:7c:90:1a:2e:80:65:31:f1:
                    e4:28:d5:04:dd:a6:f1:12:0b:e8:fd:b0:73:71:53:
                    df:69:37:68:6d:b6:cd:2e:71:e8:80:ff:90:eb:a7:
                    70:6e:4a:fb:5f:74:9b:c0:ef:5f:c8:cf:cf:36:b2:
                    5e:13:f3:7d:15:48:66:e9:aa:9f:89:64:e4:08:d6:
                    8c:f8:5f:1e:0c:ac:34:e2:3a:e0:54:7a:36:1c:a5:
                    d9:f4:68:02:fd:e1:64:a4:1b:f4:d5:92:fb:3e:f2:
                    ac:48:ed:93:c6:fb:08:d3:8a:49:09:7e:59:f7:55:
                    bd:a6:fc:ca:ee:43:cf:d5:3a:cc:8b:fa:4a:bf:00:
                    8c:f0:24:52:c6:1d:31:9d:b9:63:d5:45:ab:16:5d:
                    e6:2a:35:d3:1f:ac:31:7f:ae:76:7e:e8:2b:e7:b2:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:24:EB:54:88:EC:7F:44:A3:54:F8:C6:B5:16:CC:09:D3:C2:BD:1E
            X509v3 Authority Key Identifier:
                keyid:7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:13:12:d7:39:2d:73:22:3e:05:9a:0d:53:24:64:d6:2c:
         3c:d3:c2:79:32:68:f6:ab:fb:79:3c:fa:a6:b9:a0:1f:28:6e:
         88:ee:4e:12:79:ed:53:cf:a5:0d:02:82:7f:fd:13:a3:da:88:
         b9:d9:09:ba:27:2f:58:79:dc:6d:83:12:fd:5d:1b:67:44:44:
         6a:66:47:ce:c7:9c:97:d3:c5:49:2b:b3:05:26:7a:c3:b3:68:
         9b:84:17:e2:90:f0:ee:58:70:0b:72:84:d8:fe:60:f3:09:52:
         14:67:cf:ce:32:4f:5f:f4:c1:d6:45:00:15:29:03:56:10:b5:
         db:20:ba:d6:7a:8e:bc:a4:97:35:20:28:86:43:17:3f:3f:63:
         dc:d9:3f:f2:8f:44:05:91:42:54:dc:7e:65:23:91:36:63:c2:
         4a:19:9d:e8:8e:64:64:cc:c0:72:a8:81:ca:aa:40:a1:44:e7:
         ff:b1:03:55:b0:80:12:82:fc:a1:7c:f0:fe:c5:d4:67:36:e5:
         2c:24:dd:41:ee:d9:87:7b:be:23:8e:28:4e:53:fa:d3:98:44:
         c7:b1:76:da:1b:09:a9:f8:ac:4e:54:4f:41:dc:17:05:d2:ec:
         f2:c7:9e:0d:58:09:3a:ad:d7:a6:b6:58:00:ae:bb:8a:32:b7:
         08:cb:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:24 2026 by rpki-client