Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          uN4SrNSQgq8F/joAFl5gnidKOVlPDxeLCz7Q3yO46+k=
Subject key identifier:   79:C5:80:B4:F7:AC:F7:C7:72:23:76:D2:5F:17:BF:C4:93:23:5F:47
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019E1D906C80D3042C2D5293A519DD0897FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1923
Signing time:             Tue 12 May 2026 19:01:04 +0000
Manifest this update:     Tue 12 May 2026 19:01:04 +0000
Manifest next update:     Wed 13 May 2026 19:01:04 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: Ym1hOQS416BvI+kXCdLjgzeh2BpGTwGE5UObUuDkcIM=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:6c:80:d3:04:2c:2d:52:93:a5:19:dd:08:97:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: May 12 19:01:04 2026 GMT
            Not After : May 13 19:01:04 2026 GMT
        Subject: CN=79c580b4f7acf7c7722376d25f17bfc493235f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:32:27:fb:f5:3f:ec:9e:b0:e6:4f:84:0f:d9:
                    8c:27:2f:7a:46:c3:9e:39:3e:c0:cf:f0:79:70:b8:
                    0d:00:ba:96:34:fe:0a:ad:b9:7e:2e:d9:f8:6b:ec:
                    96:31:2a:9c:49:51:2a:ff:f3:5e:05:65:a5:74:a7:
                    2e:29:db:b5:70:63:2b:da:1a:4d:60:98:67:4e:61:
                    9c:c2:5c:a4:07:db:a0:94:da:70:2b:66:13:10:60:
                    1d:aa:db:9b:26:eb:cb:91:ae:24:f8:16:91:da:4d:
                    d6:ec:06:b1:78:1c:75:50:7a:5e:ee:be:e3:f2:fb:
                    70:c0:5a:5e:28:eb:1a:b0:21:1f:5d:8d:1f:b5:6a:
                    c9:6c:73:19:38:d9:08:8d:b7:94:30:dd:a0:7b:b2:
                    9a:e1:5e:48:4c:b4:01:e3:d1:17:d3:88:a6:d2:b8:
                    1c:5d:85:2f:d7:d9:f6:2e:60:c8:a1:be:64:2e:19:
                    cc:38:54:5c:9e:e5:0c:a3:04:f2:d4:ca:e4:cc:4b:
                    d0:65:b2:ba:33:52:7d:0f:9e:1a:85:46:dc:3d:b5:
                    a7:97:77:e8:81:41:44:f5:4f:c6:99:38:68:71:5b:
                    02:ca:11:aa:69:1e:a2:13:c4:a7:9b:57:98:5e:dc:
                    a2:c3:76:24:bf:a2:26:6a:f0:1c:ec:2b:59:c0:22:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C5:80:B4:F7:AC:F7:C7:72:23:76:D2:5F:17:BF:C4:93:23:5F:47
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:00:56:92:d4:bf:a1:17:6e:50:0f:84:fc:ed:7e:17:31:
         fd:7f:9c:d7:e3:93:fe:52:51:94:92:54:5d:52:c9:ab:ca:4e:
         48:f1:7b:fe:f1:df:f2:a0:c9:02:cc:cf:a6:33:d4:e1:c7:7a:
         0c:c3:35:da:28:95:c3:f3:3c:1c:cf:b7:5f:f6:69:a7:1b:c8:
         da:10:b9:ad:1c:68:ae:ad:b8:fe:6f:d6:d8:8b:6a:45:7d:2d:
         5d:79:76:95:0c:41:7a:4f:92:d6:76:5d:84:45:88:4c:d4:f6:
         df:37:7b:5b:d9:f5:51:9f:07:4c:ab:3f:d0:40:8c:9b:9e:06:
         78:a6:37:4a:e7:cc:e4:73:f5:1a:3a:94:46:83:99:fe:b2:9f:
         5d:63:ce:df:92:80:d1:98:a6:8d:1a:a7:98:36:ee:af:d5:0b:
         67:75:cf:6b:53:ef:05:22:53:79:73:90:fb:5c:02:c9:00:31:
         43:52:4a:42:a1:00:f0:d7:02:ed:d5:78:0b:09:c0:e3:22:d8:
         94:5a:e4:15:06:56:6b:15:74:c8:b3:69:5d:1e:5d:b5:18:ff:
         c6:02:21:9b:47:2e:f1:80:96:98:14:1a:c6:d7:0a:94:ac:5c:
         ca:fa:b2:0a:c4:be:bc:01:b0:d8:2c:ca:9b:6c:ea:5a:a4:68:
         f7:0e:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:15 2026 by rpki-client