Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File:                     EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier:          isrwkUV+1r17RVAF0WXI0oc92vOu0ihLE0QS4CccvAY=
Subject key identifier:   BA:A6:FC:7C:18:55:5C:93:8B:E9:B0:72:03:73:FE:CF:B2:FA:69:E4
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer:       /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial:       019E1C46DF313E99C0C77240093FCE27656A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number:          0393
Signing time:             Tue 12 May 2026 13:01:07 +0000
Manifest this update:     Tue 12 May 2026 13:01:07 +0000
Manifest next update:     Wed 13 May 2026 13:01:07 +0000
Files and hashes:         1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: bgF3OSS3AKK9vKEUX+1CRjW7ByJmESO533btmkllhT0=)
                          2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:df:31:3e:99:c0:c7:72:40:09:3f:ce:27:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
        Validity
            Not Before: May 12 13:01:07 2026 GMT
            Not After : May 13 13:01:07 2026 GMT
        Subject: CN=baa6fc7c18555c938be9b0720373fecfb2fa69e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:e2:55:7f:23:99:54:b4:7d:d7:b1:1e:e2:
                    04:25:b3:58:19:30:fa:f0:07:d1:ae:dd:7b:e4:0e:
                    33:65:b2:af:ee:15:cc:7d:49:96:ca:47:ba:f9:2b:
                    a6:35:ea:f6:65:ad:15:08:64:87:45:53:b6:a3:80:
                    29:0c:77:6e:4e:71:4e:33:ac:bb:72:b8:a9:59:3e:
                    88:08:4b:c9:60:ed:54:e7:9a:b9:c6:f2:e6:c0:a0:
                    01:22:fe:1d:26:a3:88:83:ca:34:23:e4:76:c9:3e:
                    44:a0:21:25:03:c9:e2:f4:ab:06:95:dc:42:5c:74:
                    5b:7f:a5:cf:70:22:db:fc:11:59:8a:a8:ea:91:3e:
                    70:38:69:35:04:53:a4:1c:5b:eb:4a:32:41:98:b7:
                    c2:10:4c:28:10:63:5e:74:c0:fe:82:38:d7:35:7e:
                    85:3d:59:7b:cd:76:3a:e3:48:d6:6b:c8:03:d8:2c:
                    8d:26:5c:fc:fa:5b:cb:03:60:d2:f2:a4:8d:7e:b5:
                    22:29:6f:b3:4e:1e:b2:90:f1:52:6c:87:1d:9e:28:
                    6d:e3:5e:54:a9:56:d9:79:5b:53:15:ab:cc:23:bd:
                    21:00:ae:8b:48:80:77:58:e5:05:84:22:27:bd:3d:
                    f2:53:99:2f:53:40:63:d6:9a:66:75:9c:d1:93:db:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A6:FC:7C:18:55:5C:93:8B:E9:B0:72:03:73:FE:CF:B2:FA:69:E4
            X509v3 Authority Key Identifier:
                keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:01:23:05:fa:6e:60:d8:87:a9:ab:01:c6:7c:44:7b:8e:6e:
         a4:0a:82:0c:31:99:36:d0:95:94:5b:3a:72:d4:82:f7:d1:aa:
         b5:6a:3f:17:f8:24:0d:46:68:95:11:73:5d:ff:6d:41:c2:29:
         92:30:2a:82:10:bb:fe:36:b9:fb:d5:3c:07:67:cc:fd:66:81:
         59:36:10:ac:36:fa:9c:63:c6:d9:8d:3b:a7:0a:af:9f:78:5c:
         0f:7d:3b:57:e0:55:9c:6f:e5:79:06:be:8b:c3:06:4d:d1:5d:
         ab:b8:1c:25:32:92:97:53:57:69:ac:f8:3a:fb:42:23:dd:66:
         57:35:92:6e:87:fd:c5:26:ac:e1:ea:7c:2e:67:62:88:98:ed:
         e1:0c:89:8b:9f:19:b9:3e:6c:70:41:aa:b4:a2:47:dd:78:54:
         d9:fc:ea:4c:4d:0b:74:46:a2:c1:8a:91:f7:9a:86:ec:04:00:
         53:3e:fd:5e:3f:1e:c7:7c:75:99:af:51:d4:d8:d1:c5:d3:20:
         53:b1:23:d4:d8:a7:9e:b5:a7:54:22:be:b9:a7:99:6c:b1:84:
         0c:a4:0c:8f:3d:e7:99:f4:d1:4a:86:db:7b:83:d6:ac:5b:88:
         7c:a4:ff:26:5f:de:07:10:6c:a2:55:90:db:84:48:5c:68:ef:
         e9:09:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:06:36 2026 by rpki-client