Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          emT3ZYlQGsvJLHacSuFaWTRWWqahWckIiW6yTXCWYPc=
Subject key identifier:   6F:78:6D:99:98:A2:00:92:9F:D0:8C:CC:53:8B:C8:30:0F:45:E0:94
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       019E1DC752AA1800610351BCE9F65494A3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 20:01:02 +0000
Manifest this update:     Tue 12 May 2026 20:01:02 +0000
Manifest next update:     Wed 13 May 2026 20:01:02 +0000
Files and hashes:         1: 5tBrp55-EAXMGlNBrWNqj744wk4.roa (hash: rV+tN1f8sl1mzbaoUz6eUbNwGQ89OtRS1uDIueamB+M=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: h2i18SrH1Ayd4JgzIIrdzznpPUGy9hkpS5bvR0YJKoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:52:aa:18:00:61:03:51:bc:e9:f6:54:94:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: May 12 20:01:02 2026 GMT
            Not After : May 13 20:01:02 2026 GMT
        Subject: CN=6f786d9998a200929fd08ccc538bc8300f45e094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:35:78:09:3e:47:78:eb:99:7e:29:3d:55:
                    67:5e:ea:77:47:1c:28:03:07:a0:53:42:1e:6f:6c:
                    73:e2:32:d3:fc:7f:df:44:74:48:66:9f:d7:3c:b7:
                    85:29:8c:f7:bd:cf:7d:b0:52:ba:25:94:18:98:d8:
                    f7:7f:a7:ec:7c:e1:62:cc:ab:97:a1:b1:33:57:d8:
                    16:b7:30:a5:08:44:f1:7c:76:64:e7:46:07:6e:8f:
                    86:75:e9:85:b4:45:e9:27:f3:6c:f6:94:94:90:b4:
                    57:63:61:58:c0:6d:cc:bc:e3:6d:9c:7b:2c:26:56:
                    95:8b:b9:63:03:d6:75:31:b3:0f:68:f1:4d:22:1b:
                    35:d7:01:05:2f:45:8b:fa:2f:b5:43:9b:85:b8:c6:
                    2f:ac:b3:38:bc:d3:db:78:17:3c:3f:d2:f7:78:a9:
                    37:8a:8e:7b:46:61:ed:f1:e6:96:3d:31:46:10:92:
                    ed:a0:45:b6:09:70:91:79:6e:15:ff:f6:f3:58:31:
                    75:95:64:b0:7b:5b:9c:59:75:5e:2c:ea:d8:cc:34:
                    17:02:90:3c:9c:51:e0:4c:97:a7:72:64:6c:84:9c:
                    50:b7:a9:e0:39:3e:a6:06:fe:59:c6:e6:ec:b3:4f:
                    32:f1:a8:28:e5:18:a2:23:42:47:40:74:7b:d5:f2:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:78:6D:99:98:A2:00:92:9F:D0:8C:CC:53:8B:C8:30:0F:45:E0:94
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:94:63:f1:33:c9:45:b0:57:19:87:bf:7e:cf:67:e6:0d:
         dd:0a:45:dd:71:10:99:d3:c6:44:73:7e:f4:a2:df:8b:29:e9:
         5f:71:de:a9:fb:5c:50:ea:37:b0:f3:4f:a3:54:d6:a2:63:51:
         8d:e0:2a:63:e9:cd:e0:f1:91:fa:98:52:1f:09:6d:e6:c0:53:
         c8:3a:f2:76:47:4c:5f:9f:a6:05:99:4b:97:15:e9:59:79:8f:
         d0:5f:37:9b:a1:6f:c8:64:94:42:40:65:d9:87:82:2c:15:99:
         3c:19:ec:da:ad:1f:82:02:6d:53:2b:a6:e8:2a:df:7b:86:bb:
         a9:8e:a6:d3:8a:66:40:67:7b:c7:17:17:b9:a6:19:79:f6:ff:
         ef:22:8e:3b:91:b2:fa:f4:4e:a2:68:d8:cc:85:48:3c:ee:0b:
         60:97:58:71:07:a1:44:fa:01:09:a0:70:ec:1c:d7:00:37:89:
         13:7a:61:d1:a4:81:65:bd:65:77:bd:2b:36:bf:6e:f5:18:b2:
         43:a0:50:41:63:e1:02:b8:37:d2:9d:80:f7:6a:e1:3d:0f:68:
         16:85:01:45:d8:3d:0f:31:36:67:f8:76:0c:c8:ba:b2:0d:6f:
         0f:c4:d7:88:2f:e4:a9:73:95:fa:0b:6d:9c:99:93:10:15:76:
         c7:00:8d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:28 2026 by rpki-client