Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          lCaEZga87pJ+35mz4JrRxZHO7RwxLUoWHhR2TCru5Ls=
Subject key identifier:   C7:CC:FB:25:D3:36:67:08:24:52:CF:D3:6E:56:84:04:55:EF:12:04
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       019E1C4705510DD54E6478C36228EE489B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 13:01:16 +0000
Manifest this update:     Tue 12 May 2026 13:01:16 +0000
Manifest next update:     Wed 13 May 2026 13:01:16 +0000
Files and hashes:         1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
                          2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: UPEbphcjI89ZyWsJzElXJdKBjBqElvYxqfTfHJiC07A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:05:51:0d:d5:4e:64:78:c3:62:28:ee:48:9b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: May 12 13:01:16 2026 GMT
            Not After : May 13 13:01:16 2026 GMT
        Subject: CN=c7ccfb25d33667082452cfd36e56840455ef1204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:67:30:e3:6f:0b:ad:53:a3:7c:45:36:f2:
                    5a:68:1e:15:7b:0a:4f:5a:7f:d2:06:f6:a9:45:88:
                    c1:74:e2:d5:96:6f:34:97:22:9f:44:2d:8d:05:eb:
                    02:e6:f8:22:f4:f2:05:81:26:99:10:a9:0f:cc:66:
                    f0:fa:0d:e9:f3:eb:14:78:6f:2c:7b:7a:d7:f0:78:
                    40:a8:61:cb:68:1c:ab:4d:8c:57:d7:c6:1b:60:44:
                    60:c5:34:c9:9a:36:9d:bd:01:d4:0b:f7:3e:98:79:
                    a4:42:ae:da:89:6e:7b:87:ec:eb:49:fd:2c:f0:b3:
                    1d:39:8d:ba:24:c1:0e:11:ba:99:1b:8e:5f:2b:de:
                    e2:0d:e6:74:91:e5:bb:0b:66:d9:2c:e5:02:80:0f:
                    ba:3a:13:6b:d4:fe:84:39:fc:56:6d:22:e4:79:06:
                    1b:45:43:43:1b:a1:ff:54:37:ce:8f:f5:18:47:79:
                    d6:ae:0e:92:aa:3c:07:25:d3:02:1d:a4:52:e8:c9:
                    04:8e:0c:25:fb:67:e0:91:b5:3a:e9:cb:49:e5:93:
                    d3:84:3c:3a:c6:9a:f0:8a:0a:94:d6:09:52:f5:4e:
                    dc:e8:31:c3:c6:4e:56:e6:03:53:2e:4e:c3:bd:a3:
                    7f:4d:7e:04:e0:25:0a:88:52:71:d3:7e:bb:a2:18:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:FB:25:D3:36:67:08:24:52:CF:D3:6E:56:84:04:55:EF:12:04
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:02:f6:37:a6:3a:8b:1f:47:22:49:6e:a1:b2:d7:4a:ce:c9:
         28:95:ce:e1:06:00:c7:01:19:ff:08:ce:ce:02:28:78:7f:89:
         b6:ce:61:51:e8:0a:25:34:cf:f5:de:78:c5:c9:e2:70:5e:af:
         6a:a6:72:f6:f1:4b:46:e0:ec:04:76:c9:be:d4:d9:c1:56:aa:
         bb:ed:f1:9f:6c:4b:e9:ff:11:0a:9d:3b:2e:d6:f0:84:c9:47:
         46:af:5c:36:44:32:aa:2c:52:c3:fd:24:f9:a6:f7:43:a5:51:
         68:62:5b:c6:d0:07:45:d7:30:54:65:56:d7:8c:94:6d:4f:c4:
         76:03:8b:af:ee:b2:55:0c:d7:d6:b5:ed:c1:0b:ad:37:72:05:
         31:0b:c1:7f:65:2b:90:67:bb:58:32:83:45:ac:c9:64:be:c5:
         ed:46:10:ff:09:47:24:48:19:17:df:fa:33:d4:f2:39:2b:e3:
         a8:ac:d2:70:db:0f:ef:02:fd:11:ef:eb:51:06:03:eb:f7:37:
         f5:09:0e:05:fc:4b:74:60:24:4c:83:e4:f6:af:c4:d5:16:c6:
         b8:3b:d4:7c:1a:e1:67:a3:b7:4d:3d:47:c3:50:9e:04:dc:63:
         d0:c1:95:84:96:82:86:28:00:a6:37:f9:f2:e0:b5:10:cf:ca:
         76:df:55:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRwVRDdVOZHjDYijuSJtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0
YjQ5ZjQwHhcNMjYwNTEyMTMwMTE2WhcNMjYwNTEzMTMwMTE2WjAzMTEwLwYDVQQD
EyhjN2NjZmIyNWQzMzY2NzA4MjQ1MmNmZDM2ZTU2ODQwNDU1ZWYxMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4pnMONvC61To3xFNvJaaB4VewpP
Wn/SBvapRYjBdOLVlm80lyKfRC2NBesC5vgi9PIFgSaZEKkPzGbw+g3p8+sUeG8s
e3rX8HhAqGHLaByrTYxX18YbYERgxTTJmjadvQHUC/c+mHmkQq7aiW57h+zrSf0s
8LMdOY26JMEOEbqZG45fK97iDeZ0keW7C2bZLOUCgA+6OhNr1P6EOfxWbSLkeQYb
RUNDG6H/VDfOj/UYR3nWrg6SqjwHJdMCHaRS6MkEjgwl+2fgkbU66ctJ5ZPThDw6
xprwigqU1glS9U7c6DHDxk5W5gNTLk7DvaN/TX4E4CUKiFJx0367ohiTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfM+yXTNmcIJFLP025WhARV7xIEMB8GA1UdIwQY
MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut
N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi
LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQL2N6Y6
ix9HIkluobLXSs7JKJXO4QYAxwEZ/wjOzgIoeH+Jts5hUegKJTTP9d54xcnicF6v
aqZy9vFLRuDsBHbJvtTZwVaqu+3xn2xL6f8RCp07LtbwhMlHRq9cNkQyqixSw/0k
+ab3Q6VRaGJbxtAHRdcwVGVW14yUbU/EdgOLr+6yVQzX1rXtwQutN3IFMQvBf2Ur
kGe7WDKDRazJZL7F7UYQ/wlHJEgZF9/6M9TyOSvjqKzScNsP7wL9Ee/rUQYD6/c3
9QkOBfxLdGAkTIPk9q/E1RbGuDvUfBrhZ6O3TT1Hw1CeBNxj0MGVhJaChigApjf5
8uC1EM/Kdt9VBw==
-----END CERTIFICATE-----
Generated at Tue May 12 23:42:55 2026 by rpki-client