Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          V82aqMGUsKLiPQ7pKWJ7uskmUZmOO9B7GekosFYodio=
Subject key identifier:   89:F4:BE:1F:7C:C0:D3:FE:B2:0B:22:CC:45:FB:9D:8E:BC:CD:58:89
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       019E1CEB7D1F58FFD23B356A2C9A229E0314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          0CA5
Signing time:             Tue 12 May 2026 16:00:55 +0000
Manifest this update:     Tue 12 May 2026 16:00:55 +0000
Manifest next update:     Wed 13 May 2026 16:00:55 +0000
Files and hashes:         1: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: qu3qvi/qko6ckXzS1wOFJQTtrgLehqjtVZUN5SQpiSU=)
                          2: xd8WtTpNSiw3OPvDq9rsEjInsvA.roa (hash: fZ0V/o/vI20M9OPDqf1/6QRLbpnmYCprw2uInkjQ1rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:7d:1f:58:ff:d2:3b:35:6a:2c:9a:22:9e:03:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: May 12 16:00:55 2026 GMT
            Not After : May 13 16:00:55 2026 GMT
        Subject: CN=89f4be1f7cc0d3feb20b22cc45fb9d8ebccd5889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:58:fa:64:cd:14:ca:57:66:28:85:31:8c:
                    97:df:d8:bd:5d:f2:25:36:ec:fa:1d:0c:bb:27:f7:
                    57:8d:81:54:60:c8:4e:71:78:76:e6:ac:89:29:3a:
                    1e:3e:35:37:ca:03:89:18:e6:a2:7d:a0:14:1e:3b:
                    40:94:5c:0c:64:14:56:bd:de:0a:03:96:c8:6f:75:
                    79:cc:57:e0:8e:98:cc:29:fc:0a:97:b8:ea:41:3b:
                    7d:18:44:44:06:35:d6:74:61:a4:2b:1e:99:85:29:
                    2e:d0:10:98:1c:e2:49:ee:f9:0d:28:b8:b3:10:08:
                    7d:f7:e3:f0:40:53:26:1b:fb:fc:df:05:bd:ab:ac:
                    72:7c:e4:ad:d0:3f:73:0e:0e:dc:93:a7:4a:55:12:
                    c1:c3:f7:54:80:f5:af:cd:5d:69:d1:35:92:cd:2b:
                    42:1f:cf:f1:93:86:86:98:ff:52:49:e3:c3:bc:2f:
                    98:15:0b:59:cf:6d:8c:cd:d4:ed:58:e7:a9:12:a1:
                    17:56:78:59:c4:02:59:14:4f:fe:bd:4e:12:55:78:
                    27:2b:ac:53:9c:65:34:b4:d0:20:c9:64:fd:f4:55:
                    29:4c:f5:7d:ea:dc:7b:34:b0:d6:44:21:67:9a:bf:
                    0a:66:b5:af:72:93:fc:2a:36:ee:25:44:f1:ed:e6:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:BE:1F:7C:C0:D3:FE:B2:0B:22:CC:45:FB:9D:8E:BC:CD:58:89
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:15:62:09:6c:52:b7:e5:6a:f7:80:41:85:99:de:c1:ea:
         99:fc:bf:fe:1b:ca:f4:cf:90:91:37:86:2f:f7:f9:72:3c:6f:
         f9:b0:25:08:3d:8d:bc:89:06:15:be:75:b9:2e:91:09:36:b4:
         a0:10:8d:45:bb:4e:15:45:32:ca:bb:e3:d4:16:a9:9c:59:1f:
         8d:60:b2:d6:05:98:08:6a:d0:12:bb:2e:d5:d1:de:15:b3:50:
         1a:33:ab:30:03:92:45:fb:29:63:ad:66:0b:09:88:61:46:fb:
         67:df:f3:b3:21:05:dc:3f:c3:d7:e4:02:3c:31:bb:23:24:37:
         1e:c4:45:ca:8e:a6:e6:cb:40:d9:21:d6:e6:cf:17:d5:98:25:
         0a:e7:dd:80:bf:37:c1:1d:0a:b3:bb:1a:a0:44:fa:93:c5:02:
         33:39:ef:14:cd:84:b5:b5:5b:ed:22:ca:44:41:35:0b:76:66:
         ae:e2:20:09:e9:2c:0f:3d:86:3a:57:5b:8e:cd:84:f2:38:3d:
         1a:14:18:ac:de:9a:3b:6f:33:0a:e1:9d:35:2b:34:b4:d6:5b:
         97:0f:3a:12:10:9f:09:9d:ce:51:39:a7:8f:0c:5b:7b:71:89:
         91:55:da:15:6c:61:f0:12:b3:63:09:c9:2e:ef:d8:0c:b9:cc:
         de:7f:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:00 2026 by rpki-client