Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          HEO/fnOCZTSkx+hSMjDYUwevKVBTtdWbi1U/R6VQJvw=
Subject key identifier:   64:48:D6:99:56:C7:78:B4:11:E6:0C:05:B0:89:AE:09:25:BE:47:BE
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       019E3072FECEEDC707D3A3278129CE085947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          0FEE
Signing time:             Sat 16 May 2026 11:01:43 +0000
Manifest this update:     Sat 16 May 2026 11:01:43 +0000
Manifest next update:     Sun 17 May 2026 11:01:43 +0000
Files and hashes:         1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
                          2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: +kbRUq/+isyamnpQOXHUBmUHbWeQGuBT1IG30oQNLLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:fe:ce:ed:c7:07:d3:a3:27:81:29:ce:08:59:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: May 16 11:01:43 2026 GMT
            Not After : May 17 11:01:43 2026 GMT
        Subject: CN=6448d69956c778b411e60c05b089ae0925be47be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:da:b3:91:53:5c:9d:8a:8b:da:24:14:d3:
                    a0:76:3c:64:b5:3c:2d:15:15:7a:45:09:be:07:d6:
                    fe:6f:e6:72:04:d6:97:e1:2e:21:0c:fc:f5:77:07:
                    95:c4:58:5a:ce:a0:b6:c0:18:37:92:4d:26:02:ce:
                    b7:26:f6:04:ca:d2:43:ef:2b:8f:ad:6d:0e:fb:2b:
                    45:cc:78:aa:88:c1:c0:00:84:65:11:07:3e:56:98:
                    d5:76:48:63:44:b2:df:33:f8:43:11:2f:8b:e5:2c:
                    a5:13:f5:f5:e1:9e:d0:82:62:0f:b3:32:97:97:32:
                    00:1b:7d:b5:94:c5:f3:aa:7d:13:84:df:67:29:d4:
                    27:9a:f8:1f:9e:ac:d3:27:a3:1a:6f:9d:3b:47:26:
                    20:5e:2c:e7:01:79:2c:6f:be:6b:bc:cd:db:d4:e7:
                    4b:bb:89:fa:7a:c1:ee:6a:ee:0f:a2:b8:ba:69:26:
                    84:73:ee:89:f6:bc:be:59:06:3f:a8:63:d4:cd:59:
                    bb:64:13:61:e4:6b:60:5d:27:bf:3d:c2:05:da:b6:
                    97:8d:21:74:ea:46:51:fa:53:a4:bf:2c:27:63:ee:
                    71:0f:22:2a:12:99:53:a2:7c:21:da:30:04:d4:cf:
                    60:fb:a3:b4:55:15:f7:f0:8a:26:bb:d4:26:cb:50:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:D6:99:56:C7:78:B4:11:E6:0C:05:B0:89:AE:09:25:BE:47:BE
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:90:6e:d9:0a:0c:48:61:2c:8e:90:79:52:db:23:28:4d:
         cf:05:28:9c:b2:9a:2f:05:b8:8d:b7:d3:04:ee:c7:24:2e:1f:
         50:83:26:56:6b:85:17:07:61:77:ea:79:67:93:5c:f6:bc:41:
         24:82:c8:e0:e0:61:37:2a:80:00:e7:90:bb:56:38:77:5c:ab:
         2d:73:cc:9c:2f:ae:29:3d:cb:4c:8f:51:93:89:cb:f9:89:5c:
         9e:50:19:f0:d9:7a:73:16:25:35:50:05:29:35:7a:82:b9:11:
         40:7a:86:de:35:ed:75:b5:7e:ce:bd:b4:38:12:ed:0a:a4:63:
         c2:9a:16:e2:ff:86:f1:c5:e5:fb:9c:1f:8a:be:21:05:a7:a1:
         e6:d2:1f:fc:eb:81:a8:6e:35:8f:01:7d:47:d6:38:a5:c3:58:
         26:ca:a8:00:9b:36:21:4d:b8:9e:10:f5:fe:21:54:2e:5a:ac:
         b5:c8:00:ed:a0:77:7e:84:d0:2a:1b:47:64:60:e3:34:71:fd:
         b1:54:4c:43:9c:a2:03:b1:6f:5a:33:65:cd:0b:71:8c:f5:07:
         c8:91:02:f3:68:52:3e:43:d2:1a:e8:65:80:7b:65:aa:3b:fa:
         f0:db:e5:c6:83:f3:ad:83:80:d9:5b:d2:c2:5c:a2:ee:a3:19:
         3e:ef:35:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcv7O7ccH06MngSnOCFlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0
NWFkMDAwHhcNMjYwNTE2MTEwMTQzWhcNMjYwNTE3MTEwMTQzWjAzMTEwLwYDVQQD
Eyg2NDQ4ZDY5OTU2Yzc3OGI0MTFlNjBjMDViMDg5YWUwOTI1YmU0N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27fas5FTXJ2Ki9okFNOgdjxktTwt
FRV6RQm+B9b+b+ZyBNaX4S4hDPz1dweVxFhazqC2wBg3kk0mAs63JvYEytJD7yuP
rW0O+ytFzHiqiMHAAIRlEQc+VpjVdkhjRLLfM/hDES+L5SylE/X14Z7QgmIPszKX
lzIAG321lMXzqn0ThN9nKdQnmvgfnqzTJ6Mab507RyYgXiznAXksb75rvM3b1OdL
u4n6esHuau4Pori6aSaEc+6J9ry+WQY/qGPUzVm7ZBNh5GtgXSe/PcIF2raXjSF0
6kZR+lOkvywnY+5xDyIqEplTonwh2jAE1M9g+6O0VRX38Iomu9Qmy1B7AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRI1plWx3i0EeYMBbCJrgklvke+MB8GA1UdIwQY
MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt
YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1
LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkaQbtkK
DEhhLI6QeVLbIyhNzwUonLKaLwW4jbfTBO7HJC4fUIMmVmuFFwdhd+p5Z5Nc9rxB
JILI4OBhNyqAAOeQu1Y4d1yrLXPMnC+uKT3LTI9Rk4nL+YlcnlAZ8Nl6cxYlNVAF
KTV6grkRQHqG3jXtdbV+zr20OBLtCqRjwpoW4v+G8cXl+5wfir4hBaeh5tIf/OuB
qG41jwF9R9Y4pcNYJsqoAJs2IU24nhD1/iFULlqstcgA7aB3foTQKhtHZGDjNHH9
sVRMQ5yiA7FvWjNlzQtxjPUHyJEC82hSPkPSGuhlgHtlqjv68NvlxoPzrYOA2VvS
wlyi7qMZPu81kQ==
-----END CERTIFICATE-----
Generated at Sat May 16 19:29:52 2026 by rpki-client