Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          g/JBHx+fg2IHczvcc+kK8Ld6jaPARsjJdlpm/krVCe8=
Subject key identifier:   E4:94:09:D8:05:64:33:8D:87:A9:7E:A5:64:0B:B0:1D:AE:64:30:27
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       019E1C0FA6C571589086DC8E1BD67BF182EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          1065
Signing time:             Tue 12 May 2026 12:00:48 +0000
Manifest this update:     Tue 12 May 2026 12:00:48 +0000
Manifest next update:     Wed 13 May 2026 12:00:48 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: n8TSLpt5FXlQQgSqS/QCcaf3wEFD6mzOaVRuYru8jg8=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:a6:c5:71:58:90:86:dc:8e:1b:d6:7b:f1:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: May 12 12:00:48 2026 GMT
            Not After : May 13 12:00:48 2026 GMT
        Subject: CN=e49409d80564338d87a97ea5640bb01dae643027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:0d:11:f8:0f:ce:92:a9:03:6f:a1:46:eb:
                    84:3a:8c:8b:bf:1b:48:d9:41:f4:0c:02:16:16:a2:
                    7d:07:87:80:63:c2:4e:0b:08:dc:55:9a:6c:d5:62:
                    90:fc:b6:ee:0c:09:a7:a6:d9:9a:af:34:50:30:eb:
                    3a:4f:68:fd:35:f6:f9:0e:35:6b:72:2c:27:5d:11:
                    5d:a6:01:2f:3f:44:55:91:f2:03:42:15:d3:23:d3:
                    df:19:c5:15:ed:33:5d:82:d7:a8:4b:af:db:59:60:
                    a1:08:e5:fb:7f:20:4e:bb:95:82:b7:c8:06:a4:f4:
                    8c:62:19:dd:a9:65:4f:eb:5a:08:a7:44:93:44:22:
                    2d:2b:99:a3:8b:5b:89:24:d0:96:c5:d6:3a:8c:f1:
                    07:a6:76:48:36:84:72:26:a2:1e:99:43:4c:39:3a:
                    58:d3:17:45:0a:5c:3e:5d:f8:01:c1:32:24:97:c4:
                    2d:66:4c:1c:f1:eb:5a:26:71:2d:00:fc:b9:70:bc:
                    c9:f2:0e:92:f4:ab:24:fa:5a:1c:d2:5b:55:a4:c7:
                    08:0b:8a:1b:86:f9:6f:6f:de:79:8f:75:e5:46:4c:
                    45:99:db:44:68:65:b6:8c:ad:df:03:ce:75:d9:b2:
                    53:ca:b5:9a:06:04:cd:b3:8a:33:da:b8:e4:4c:75:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:09:D8:05:64:33:8D:87:A9:7E:A5:64:0B:B0:1D:AE:64:30:27
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:ca:2b:cc:e8:c1:9e:1d:7b:de:19:9e:71:5a:f6:db:ae:
         7e:7e:62:19:48:6f:20:3e:71:fb:71:9a:fc:db:8e:4c:3c:24:
         a7:b9:49:fd:e8:ab:e1:69:24:80:89:ba:55:39:a1:5f:bd:af:
         9a:e9:50:4e:76:e5:38:6d:07:00:45:42:41:5c:3c:91:aa:1b:
         ac:54:bd:eb:da:c9:44:0e:d1:08:44:f1:bf:4a:90:a0:17:b5:
         e3:a4:de:90:16:46:ff:4b:e7:7d:44:6e:71:d8:e3:ea:9a:c1:
         35:d5:a1:a1:34:e3:6a:7e:37:fd:e9:9a:0e:86:53:86:b3:b5:
         19:93:92:13:ca:fe:44:70:d3:70:a1:d8:04:02:16:bf:90:cd:
         c9:9e:5e:ef:ac:5a:a8:15:6a:0b:b0:14:e2:41:ba:63:72:47:
         c3:b6:dc:a2:a7:77:17:fc:53:86:48:7a:1f:db:e8:94:f9:4a:
         52:28:43:b0:7c:14:fa:65:42:d7:7e:48:66:c4:4e:55:b1:10:
         79:3f:cc:b9:3e:a9:0c:5f:e4:68:7f:01:01:5d:3d:d8:23:a8:
         12:0b:b2:7f:25:67:27:63:bf:53:66:e5:0d:63:60:03:f1:69:
         98:72:5e:20:56:6b:90:23:67:57:9f:ba:98:ca:98:b6:ef:08:
         e7:d0:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:35 2026 by rpki-client