Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
File:                     Ee_b1yf7W9U87GlXoptHwsNKg0w.mft (raw, json)
Hash identifier:          i78SfPL88BBW1k3keANj/747BvbIJRP3htAMIvUjqJM=
Subject key identifier:   33:CC:E4:55:83:88:6E:AC:9E:2F:0C:36:3E:62:B6:F4:34:13:DF:22
Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C
Certificate issuer:       /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
Certificate serial:       019E1DC7A6683ED00BE035A3FB902F1F2AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 20:01:23 +0000
Manifest this update:     Tue 12 May 2026 20:01:23 +0000
Manifest next update:     Wed 13 May 2026 20:01:23 +0000
Files and hashes:         1: Ee_b1yf7W9U87GlXoptHwsNKg0w.crl (hash: L38LVpzSs7VZpzY+DnmLkXrh/HOZVZBVY9GZC8EPX6c=)
                          2: QQeKybyvUtPZq8rtSA1qJFplh-8.roa (hash: Q+OBW6DZJdlZ5hkFmp4+rBZr4bNQDjXlXvwILFLY5Hw=)
                          3: fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa (hash: pvDkmaTgQN4sNGe38GsqD+fJLQuvpfb1vbqdHC2CF7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a6:68:3e:d0:0b:e0:35:a3:fb:90:2f:1f:2a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c
        Validity
            Not Before: May 12 20:01:23 2026 GMT
            Not After : May 13 20:01:23 2026 GMT
        Subject: CN=33cce45583886eac9e2f0c363e62b6f43413df22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:8b:e9:96:a8:22:3d:95:c4:3c:9e:a5:c7:
                    a5:c3:30:7e:bb:ab:1c:e0:da:3b:85:f0:6a:17:39:
                    61:f0:a3:d4:b7:4e:39:1e:03:b7:63:46:c9:3b:6f:
                    cc:cc:3d:c9:b6:88:d8:2f:88:d0:13:84:4f:ec:16:
                    8c:42:d7:ae:c6:46:56:d4:ae:7e:0d:17:3b:34:c2:
                    bf:b5:a7:bc:df:d6:85:77:bd:dc:f5:c1:09:4c:0b:
                    e7:b0:32:67:87:28:86:cb:41:80:bf:61:09:21:b9:
                    44:f2:8a:e6:27:b2:08:bf:c9:2a:f4:97:4a:f8:1f:
                    0c:3d:a7:7d:86:55:dd:39:6c:16:90:2d:0e:21:e3:
                    e1:2b:67:1d:2c:f0:19:59:09:13:4e:7e:3f:0f:a8:
                    68:16:a4:d4:7d:fa:c6:18:c8:3f:99:48:56:d9:ac:
                    a4:a1:48:2a:0f:f6:4b:d8:2a:24:bd:ab:3e:db:2e:
                    7f:4d:76:9d:13:eb:61:3a:cc:55:81:ba:bc:8a:f7:
                    f7:3a:f8:bd:05:6c:ae:35:27:19:ae:c5:f5:2b:ac:
                    0b:f0:2a:d1:c3:32:68:50:e6:8a:ee:cd:d2:87:c6:
                    bd:ab:58:1d:14:5c:5d:12:ff:d9:f3:8f:72:f0:63:
                    49:6d:32:1a:ac:5d:d2:cc:ba:eb:92:02:74:c0:3f:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CC:E4:55:83:88:6E:AC:9E:2F:0C:36:3E:62:B6:F4:34:13:DF:22
            X509v3 Authority Key Identifier:
                keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:e5:35:ec:82:f8:c8:64:32:24:b1:08:eb:09:72:0d:8d:
         1f:e4:a1:05:3e:50:fd:4a:98:53:fc:e7:26:d6:89:a7:6d:11:
         e6:0d:c4:39:29:4c:0b:9e:c4:9f:19:a9:45:bc:ae:87:4a:09:
         3b:48:12:ef:d1:68:00:d4:83:8d:0f:16:01:72:92:9c:94:b2:
         9d:f5:ff:a4:c2:dd:ff:07:d0:c3:50:09:03:08:f5:7f:3b:90:
         bf:54:56:f8:8f:51:8c:ab:34:03:37:6b:b4:96:d0:f0:93:ae:
         db:94:c0:38:d6:38:59:4b:69:fd:19:78:cc:2a:34:e4:86:0c:
         13:51:5e:88:5c:45:74:a2:c9:3e:81:88:99:31:6a:f3:16:4c:
         93:03:24:ef:e5:52:34:78:81:3e:30:29:ef:22:e6:d5:e7:d7:
         39:42:35:29:63:d6:5c:c6:67:c9:98:73:36:c3:0d:b5:90:39:
         32:4b:f6:60:fc:54:bc:f9:b6:f8:21:5c:05:c7:cd:ed:67:a1:
         8d:ac:20:a0:90:06:21:34:aa:aa:e9:b9:f6:24:f8:4f:07:97:
         8e:6c:1d:7a:db:81:a4:35:8d:ef:6a:a6:b8:52:6e:7f:bf:aa:
         6f:ad:30:e6:50:17:2b:81:c9:50:f0:0b:55:dd:24:17:4a:4c:
         d4:60:e1:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx6ZoPtAL4DWj+5AvHyrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWZkYmQ3MjdmYjViZDUzY2VjNjk1N2EyOWI0N2MyYzM0
YTgzNGMwHhcNMjYwNTEyMjAwMTIzWhcNMjYwNTEzMjAwMTIzWjAzMTEwLwYDVQQD
EygzM2NjZTQ1NTgzODg2ZWFjOWUyZjBjMzYzZTYyYjZmNDM0MTNkZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvuL6ZaoIj2VxDyepcelwzB+u6sc
4No7hfBqFzlh8KPUt045HgO3Y0bJO2/MzD3JtojYL4jQE4RP7BaMQteuxkZW1K5+
DRc7NMK/tae839aFd73c9cEJTAvnsDJnhyiGy0GAv2EJIblE8ormJ7IIv8kq9JdK
+B8MPad9hlXdOWwWkC0OIePhK2cdLPAZWQkTTn4/D6hoFqTUffrGGMg/mUhW2ayk
oUgqD/ZL2Cokvas+2y5/TXadE+thOsxVgbq8ivf3Ovi9BWyuNScZrsX1K6wL8CrR
wzJoUOaK7s3Sh8a9q1gdFFxdEv/Z849y8GNJbTIarF3SzLrrkgJ0wD8NaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPM5FWDiG6sni8MNj5itvQ0E98iMB8GA1UdIwQY
MBaAFBHv29cn+1vVPOxpV6KbR8LDSoNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEt
ZGM2MzRlOGFhMmEzLzEvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEtZGM2MzRlOGFhMmEz
LzEvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKPlNeyC
+MhkMiSxCOsJcg2NH+ShBT5Q/UqYU/znJtaJp20R5g3EOSlMC57EnxmpRbyuh0oJ
O0gS79FoANSDjQ8WAXKSnJSynfX/pMLd/wfQw1AJAwj1fzuQv1RW+I9RjKs0Azdr
tJbQ8JOu25TAONY4WUtp/Rl4zCo05IYME1FeiFxFdKLJPoGImTFq8xZMkwMk7+VS
NHiBPjAp7yLm1efXOUI1KWPWXMZnyZhzNsMNtZA5Mkv2YPxUvPm2+CFcBcfN7Weh
jawgoJAGITSqqum59iT4TweXjmwdetuBpDWN72qmuFJuf7+qb60w5lAXK4HJUPAL
Vd0kF0pM1GDh+A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:56:22 2026 by rpki-client