Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File:                     ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier:          jKME09DL+75KOiyaoROPfapeGHTOEuMiQRb0vBVP10A=
Subject key identifier:   52:DE:56:B2:38:30:4C:84:4D:4C:8C:0D:69:80:58:48:8C:73:F0:1F
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer:       /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial:       019E1FB5D756FD90FDF7F10FC4398B229D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number:          18F5
Signing time:             Wed 13 May 2026 05:01:11 +0000
Manifest this update:     Wed 13 May 2026 05:01:11 +0000
Manifest next update:     Thu 14 May 2026 05:01:11 +0000
Files and hashes:         1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
                          2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: 6KwaBl2Uuy1XeTvd2SZVV/T4/nHgfp8vpOcWJ7M0Z9k=)
                          3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:d7:56:fd:90:fd:f7:f1:0f:c4:39:8b:22:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
        Validity
            Not Before: May 13 05:01:11 2026 GMT
            Not After : May 14 05:01:11 2026 GMT
        Subject: CN=52de56b238304c844d4c8c0d698058488c73f01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:29:37:e7:e2:15:37:70:eb:e7:62:c3:a0:
                    8a:38:f1:cb:39:c8:96:bc:ab:b3:08:ad:9a:ab:d7:
                    5f:52:87:b7:6f:e9:c3:80:39:93:ec:64:fb:84:dd:
                    2f:c9:8c:8a:20:a3:bc:d3:e5:f9:75:44:d7:c7:9d:
                    d5:da:b5:95:f1:d1:cb:a2:ba:a6:35:fa:10:08:3d:
                    a3:b7:f4:f9:04:ed:fe:2d:74:3b:c1:d1:e1:cb:bd:
                    d4:d0:a5:1b:81:6a:cf:76:35:a8:31:e2:11:6f:51:
                    88:3d:0f:1b:89:a4:c1:f6:17:c5:1e:e9:95:6a:83:
                    3e:13:67:b1:6b:bc:dc:fa:aa:47:44:a6:aa:b7:87:
                    31:8d:d0:b6:1b:5b:28:46:c7:ec:e2:b4:13:27:d4:
                    4f:25:8a:d4:99:51:e4:72:dd:56:ca:2a:ff:2c:38:
                    0b:67:ee:1a:ed:46:1f:61:1e:1f:da:53:7e:51:10:
                    c6:9f:35:6b:5c:59:7e:16:7b:2e:b9:11:58:00:d8:
                    fc:54:e4:69:e3:d8:99:e8:7d:d8:25:22:be:1e:2c:
                    33:2a:c8:a6:c6:3d:a2:0d:47:1d:31:05:b9:47:aa:
                    c2:0d:3e:12:a0:48:c3:a6:e2:7f:22:35:80:9c:44:
                    aa:f9:5a:48:e2:99:61:ac:1f:6c:1e:e8:e4:8d:94:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:56:B2:38:30:4C:84:4D:4C:8C:0D:69:80:58:48:8C:73:F0:1F
            X509v3 Authority Key Identifier:
                keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0c:64:44:58:96:d8:61:b8:ff:cc:a5:48:18:a1:1e:16:b6:
         dd:c0:df:e6:7d:4e:c0:e1:5a:2e:b6:3c:c6:9e:ab:bd:1d:eb:
         e4:78:8c:dc:5c:76:14:85:ee:96:b0:36:1a:52:de:3e:97:a0:
         d9:6a:30:26:64:d2:08:99:c1:5d:a0:ba:2a:6c:e8:80:44:36:
         46:6c:49:a9:12:96:15:ee:9e:eb:ca:73:e0:9a:d1:25:82:67:
         6e:8e:1d:d1:10:62:82:25:9d:3a:27:0f:b6:62:e2:d3:dd:48:
         85:a6:4d:47:34:db:26:f2:ee:d7:fa:79:87:6d:95:2b:26:bb:
         28:8f:bc:6b:79:aa:20:51:5e:27:18:90:f4:d1:10:c0:6b:a1:
         d7:0f:a2:b5:8c:fe:c2:87:70:af:19:26:8c:49:37:69:71:a3:
         ea:38:e3:13:4d:75:03:ab:31:b4:d2:dd:c7:e1:a3:67:15:52:
         9f:d9:90:3a:c3:2e:c1:9b:d4:89:75:58:61:26:3b:c0:f3:01:
         de:fd:75:22:68:f6:2b:47:13:aa:76:c6:b5:f0:0b:01:e2:26:
         94:45:ea:6c:5d:39:5c:15:1e:89:a3:9d:7d:72:d3:84:92:7a:
         b2:8f:85:c2:d5:a8:43:51:13:19:dd:17:7c:ae:e5:dc:98:85:
         46:61:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:59 2026 by rpki-client