Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          weXpcy2NTplIPdoAM5fFxpUYL+rCEU+LCv8v99J//NU=
Subject key identifier:   30:9F:C4:75:0E:1E:0D:96:43:4F:01:08:1B:2A:E5:C2:0C:29:9A:3F
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019E1DFE198E7080878046B6208B065F8DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 21:00:52 +0000
Manifest this update:     Tue 12 May 2026 21:00:52 +0000
Manifest next update:     Wed 13 May 2026 21:00:52 +0000
Files and hashes:         1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: DHpVbqOSduMT+IZsHN4T3hqxwczABBoupdlTeZmEDNo=)
                          3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
                          4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
                          5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
                          6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:19:8e:70:80:87:80:46:b6:20:8b:06:5f:8d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: May 12 21:00:52 2026 GMT
            Not After : May 13 21:00:52 2026 GMT
        Subject: CN=309fc4750e1e0d96434f01081b2ae5c20c299a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:32:5b:07:fc:77:6c:1d:04:71:ef:d6:86:
                    09:3f:6f:f8:dc:82:9a:71:71:73:f1:4f:1f:e4:e0:
                    79:5e:d6:a5:d6:72:7c:52:9b:b9:97:32:0a:33:55:
                    4c:22:2e:f4:7b:fd:05:36:ff:a6:77:8f:0a:46:7b:
                    ed:d2:85:83:08:e5:83:cf:9a:3b:fd:99:89:9c:eb:
                    db:70:ce:ad:d5:9a:bf:fb:f6:37:ef:27:dd:83:f5:
                    94:3b:e9:7d:17:12:2b:9d:34:8f:73:f6:f6:32:af:
                    58:c1:6d:a3:cb:9a:3e:30:1e:57:42:b4:e0:ec:93:
                    12:a2:77:ee:57:f6:df:ca:f2:22:45:72:fb:94:29:
                    99:49:92:31:05:c3:d1:59:8e:99:b1:cd:b2:5d:8e:
                    3a:3e:c3:a1:fc:f2:f2:0e:99:86:f9:b7:77:a5:35:
                    e4:73:5d:7d:45:04:37:2b:66:6e:6b:e4:b3:ef:c4:
                    e9:6e:c6:4e:90:a6:ae:6c:85:aa:e0:ca:f9:a0:e1:
                    cb:91:7e:7c:3c:33:7f:11:bb:94:69:72:1f:1e:9f:
                    63:db:65:b3:c6:d1:1a:8b:f6:6c:c1:87:9e:0c:0a:
                    20:51:1f:a9:51:76:d9:26:b5:53:eb:1d:ff:e6:27:
                    ce:fb:5c:eb:11:7c:de:ad:21:46:11:35:d7:8f:d7:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:C4:75:0E:1E:0D:96:43:4F:01:08:1B:2A:E5:C2:0C:29:9A:3F
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:5c:01:f8:57:c8:28:76:4d:b6:99:d1:c9:fb:3e:a2:15:
         e5:46:ed:9d:24:e4:bf:12:4d:c7:51:17:66:1b:8d:6f:bc:d2:
         51:2d:d1:62:e0:a2:a9:a3:32:98:4a:a9:ec:eb:c3:9e:9f:1d:
         56:94:18:e2:51:2a:2a:04:67:34:04:4e:0e:70:d4:b9:ad:c5:
         ee:97:4b:5f:85:64:13:74:5d:7a:c3:2e:12:04:f1:15:a2:93:
         37:38:35:71:91:c2:ca:a4:94:1d:50:d5:78:71:19:5e:f8:57:
         07:ce:b5:8c:3a:92:10:fd:41:ab:f0:19:e6:d5:b5:7b:e9:c4:
         f7:7b:d7:6c:62:a5:fe:e1:9a:40:ee:a2:70:78:79:05:dc:52:
         37:e1:3e:09:c7:a6:32:4e:ae:14:0f:be:7d:03:8c:7f:da:34:
         47:d8:bf:81:d8:20:9d:e7:5d:cd:b9:15:0f:41:17:5a:77:fb:
         12:72:3b:83:af:e8:c3:1a:5a:8c:44:d6:72:3d:42:2e:bc:2f:
         23:c5:e5:5e:43:69:08:db:09:b9:29:52:bc:a8:24:8a:ed:5e:
         5a:09:42:f0:70:f4:f4:b6:9e:07:fc:77:66:cc:4b:fb:6f:24:
         39:48:39:77:66:29:37:d7:86:cb:cc:b1:58:a5:2f:cf:ce:74:
         01:98:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:17 2026 by rpki-client