Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
File:                     eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json)
Hash identifier:          nF/E6V4xU3CYRzSKkJtT2swyp8TCxX8F58XWDI6E5Jo=
Subject key identifier:   B1:8D:38:C5:5E:9D:80:1B:8E:24:39:EE:EB:72:0A:D2:74:69:C5:3A
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Certificate issuer:       /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial:       019E1FED21CF96F9D6B082BE442C546D0B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
Manifest number:          0398
Signing time:             Wed 13 May 2026 06:01:34 +0000
Manifest this update:     Wed 13 May 2026 06:01:34 +0000
Manifest next update:     Thu 14 May 2026 06:01:34 +0000
Files and hashes:         1: 4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa (hash: ynXE8G+gS/lsZOLIqXkN1x5b0cy4lp5fSomJfLM7n9s=)
                          2: EzLM6o264fzi2aUeuo8X1-IxasQ.roa (hash: egEkzBQdw69GxTodEUiKdxFXNinDxPmtmsSk0Laf0Kg=)
                          3: JlJF5EbQzwplegsjgak95qFufvc.roa (hash: SWOatFVOoit3m90PErmrJxk2vw5+frRT4NdsxOBZwLo=)
                          4: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: ADzPdaXf278xqj3I6ubMqSNJ42hxtmlzTvv5QamLVp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:21:cf:96:f9:d6:b0:82:be:44:2c:54:6d:0b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78decead419807747c92ace69448113ff0928b85
        Validity
            Not Before: May 13 06:01:34 2026 GMT
            Not After : May 14 06:01:34 2026 GMT
        Subject: CN=b18d38c55e9d801b8e2439eeeb720ad27469c53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:0f:79:ef:33:8f:8c:a2:ab:bb:e3:43:3e:
                    8f:82:88:17:8f:ed:31:42:5b:46:f1:a3:2f:81:c4:
                    0a:90:0a:00:1f:fb:0e:7e:a2:b9:0a:ac:65:4f:30:
                    70:6e:ee:e4:af:fa:4e:75:4a:81:c7:6b:34:39:a4:
                    cd:e7:47:6f:2d:c7:1e:41:a3:23:b6:45:f1:e3:46:
                    d1:12:73:72:49:56:b4:8a:83:91:1a:fa:16:2a:d1:
                    ab:f9:32:d2:0c:26:a0:20:40:62:a1:64:95:dc:d7:
                    71:25:72:f8:69:f5:b0:fa:7f:72:4e:a7:a5:e3:89:
                    bc:fc:34:9e:fa:7c:fc:66:4e:e3:cd:5c:4f:cc:d8:
                    10:87:1d:54:15:89:da:fb:a1:ea:a4:27:06:19:34:
                    c6:13:87:4d:de:7e:92:5d:06:18:2a:1c:3c:2f:a3:
                    a6:e5:c2:e1:c8:6b:55:ea:0d:d6:25:17:31:ce:29:
                    f2:d3:e1:bc:12:aa:a9:b8:52:3d:9c:b0:74:12:0f:
                    3b:28:73:b0:23:c8:e9:56:5d:1e:aa:54:35:06:f2:
                    cc:3a:16:37:54:26:bb:36:a6:50:a0:6d:cc:94:93:
                    fa:9c:0f:44:0b:17:ed:25:8f:17:f8:12:26:30:56:
                    7d:a4:79:16:5a:c1:e2:80:2d:a6:33:fa:45:b5:c2:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:38:C5:5E:9D:80:1B:8E:24:39:EE:EB:72:0A:D2:74:69:C5:3A
            X509v3 Authority Key Identifier:
                keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:33:da:0b:ea:51:c7:74:bc:44:56:4a:42:96:e8:a0:7a:
         f7:6d:e0:02:d4:8b:ee:bb:90:5f:b2:0d:83:85:a6:ff:a6:83:
         95:2b:d9:4e:3b:82:34:ea:44:67:04:83:8f:e0:d9:78:12:a3:
         66:26:b8:99:75:fc:c3:56:4a:50:26:a6:ee:65:ec:7d:48:01:
         f0:1d:39:e5:d6:df:34:dc:4c:de:40:4f:2a:98:36:cb:af:46:
         b2:59:44:c5:06:b7:05:cd:85:e0:ea:c4:a6:94:ab:c7:af:88:
         c2:ec:01:0c:b0:d1:d6:30:cc:7b:81:20:3c:84:3e:dd:f9:1f:
         5b:d8:ca:25:65:aa:1b:09:d3:0f:8f:f8:d0:c8:a0:61:4d:f7:
         6c:8d:5c:f8:aa:f8:ea:59:43:0c:d9:f4:2f:26:f4:66:24:ff:
         a7:30:9c:92:fe:d9:86:3c:b4:bf:c7:d0:5e:df:93:da:bf:2d:
         d4:82:d5:38:97:b9:a9:6e:c0:90:61:59:62:5e:5a:6f:98:03:
         81:c4:93:f3:dc:08:a1:de:44:dd:f6:e1:f0:dd:15:c8:d1:06:
         9c:cf:f6:4b:7c:f9:39:f0:c3:a3:8c:b3:54:a8:b1:1b:a5:4d:
         f8:88:88:11:49:36:25:aa:06:9f:e5:1e:b1:e7:f0:a8:c2:40:
         41:47:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:39 2026 by rpki-client