Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File:                     euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier:          eQe47IT0fLHLTy1MDXgl8Zf1/xgMQQF8LmQEHgUjSUU=
Subject key identifier:   22:FA:A7:57:42:AC:EE:FF:3E:64:A0:5B:94:B6:E1:49:12:3A:CA:24
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer:       /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial:       019E1EA3B24FCD4786426E2EA17BCB241F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number:          04AE
Signing time:             Wed 13 May 2026 00:01:44 +0000
Manifest this update:     Wed 13 May 2026 00:01:44 +0000
Manifest next update:     Thu 14 May 2026 00:01:44 +0000
Files and hashes:         1: B1wrCLFvDtkXz7uzUA6Rjnhgs8Q.roa (hash: YIecpR2AzT5IE9MSa8CIu3UuOymap4GrOtDjDoFFQT0=)
                          2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: ymSmJYOB03dORjO55UobQcRJFTesyKU8aWTU8TSD5vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:b2:4f:cd:47:86:42:6e:2e:a1:7b:cb:24:1f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
        Validity
            Not Before: May 13 00:01:44 2026 GMT
            Not After : May 14 00:01:44 2026 GMT
        Subject: CN=22faa75742aceeff3e64a05b94b6e149123aca24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:02:11:ec:07:c6:cf:10:05:25:02:3c:24:
                    0a:c6:fa:cf:63:13:6e:6b:45:62:de:e4:0d:d5:06:
                    d8:db:9f:02:29:2f:16:bb:bd:f5:f1:6a:ce:2f:63:
                    3a:40:05:9f:99:f9:9f:a5:c1:fb:23:84:ea:0b:63:
                    e8:2f:07:f0:6b:8f:a8:d8:15:f9:2e:cb:03:d3:29:
                    c8:4a:33:7b:9f:4a:c4:27:a7:30:a5:0b:bf:b7:79:
                    e4:46:81:12:1e:bd:40:28:48:e8:a5:35:25:2b:59:
                    7a:38:9c:b3:34:96:3d:c7:ac:23:c0:fc:5c:be:83:
                    e3:49:e6:cc:da:d0:2d:1c:64:16:a8:84:7b:40:df:
                    ff:61:b8:ce:56:bb:db:34:9b:c5:f7:c0:9d:da:0a:
                    3b:3d:0e:a7:eb:d1:56:c2:88:23:bd:50:6e:ef:76:
                    60:18:18:58:b3:55:ea:be:b2:51:ba:3f:ae:11:a8:
                    f9:9a:86:4a:51:26:4a:0f:93:83:bb:d9:d7:85:64:
                    61:db:08:59:21:77:7e:f1:ba:6e:2d:0a:e1:fb:52:
                    1c:c5:e7:88:c1:17:9d:0c:61:50:50:34:e2:b8:fd:
                    19:67:e9:b1:b0:9e:ae:d6:c4:7e:dc:7d:e7:fa:8d:
                    17:1f:ae:b8:30:62:96:49:69:41:5c:21:7c:a3:23:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:A7:57:42:AC:EE:FF:3E:64:A0:5B:94:B6:E1:49:12:3A:CA:24
            X509v3 Authority Key Identifier:
                keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:71:01:bc:ac:56:c1:35:e8:f8:c2:8c:d6:f0:cb:e9:a2:21:
         c6:02:ef:fc:cf:99:fb:35:5e:26:96:09:a0:33:6f:d6:f2:a0:
         58:7b:8a:e5:d5:14:d8:64:de:0a:47:2a:b1:a3:6f:ee:44:b4:
         1c:a0:3a:df:19:85:70:93:c9:40:9c:81:5d:1a:c6:ff:fa:b4:
         84:8d:35:45:f2:f7:02:46:b0:ec:41:03:17:cf:bd:d9:9c:6c:
         2f:ba:79:54:ee:7b:69:ad:d6:5f:53:02:90:14:d7:3a:dd:77:
         18:42:26:86:7e:c8:ac:ce:ac:52:de:31:ab:2c:04:ec:40:7e:
         41:e4:c6:dd:b3:62:27:fa:12:4d:23:78:92:ba:01:46:07:fe:
         ae:d7:b4:c9:f2:97:ed:37:c5:2b:ee:5e:db:01:9c:fb:1f:65:
         54:fa:97:a3:93:25:d0:c6:4a:8e:ab:62:1d:ac:78:de:91:53:
         db:1d:db:25:9b:2d:a1:a2:9d:81:c8:47:45:dc:91:1a:65:ea:
         04:a1:a3:0c:b7:56:7d:05:df:fd:c0:3f:e9:8e:ed:4e:65:17:
         60:40:e1:df:5c:05:07:a6:1f:60:f0:5d:3a:cc:c8:50:cc:6c:
         ff:b3:63:29:78:2d:0e:2d:14:0e:d1:95:09:6f:ec:c6:91:83:
         84:bc:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:19 2026 by rpki-client