Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          Tp2v+xL8SJRc7ND/Q1ikEUHmfumjxG5XJozVDHP/YcI=
Subject key identifier:   8F:63:74:50:A0:46:AC:ED:C7:E1:F8:23:EB:78:67:10:88:EE:A6:28
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019E9BBBCC44E76D3F66B1D77B9A96F6E84E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          1949
Signing time:             Sat 06 Jun 2026 07:00:36 +0000
Manifest this update:     Sat 06 Jun 2026 07:00:36 +0000
Manifest next update:     Sun 07 Jun 2026 07:00:36 +0000
Files and hashes:         1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
                          2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: IE3gTDKgHUEQw8r/rQejipue1Fqo6E6hhp7g2Z1ZTJA=)
                          3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
                          4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
                          5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bb:cc:44:e7:6d:3f:66:b1:d7:7b:9a:96:f6:e8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Jun  6 07:00:36 2026 GMT
            Not After : Jun  7 07:00:36 2026 GMT
        Subject: CN=8f637450a046acedc7e1f823eb78671088eea628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:26:28:ff:ea:f1:17:27:6c:23:0e:bd:e2:
                    86:e9:ca:db:65:1b:fb:35:3b:a8:d7:18:e9:69:12:
                    4f:e8:c8:26:33:b9:dc:b6:3e:26:68:03:e8:d5:f0:
                    c6:82:4f:58:5d:7a:06:b2:fc:e7:f3:00:d9:74:30:
                    b1:9d:fe:be:7c:2d:f4:85:98:6b:1a:d7:cb:fb:b6:
                    16:75:a6:da:64:60:d2:0b:23:c0:48:84:f7:37:15:
                    a3:d8:d0:a6:62:ee:9e:b4:c5:32:92:fe:61:91:18:
                    ac:37:f6:db:b5:b3:4e:a6:35:dc:09:81:02:e9:3b:
                    e2:00:f7:23:21:44:50:54:4a:a9:c8:91:c1:d2:7b:
                    84:55:60:8f:21:16:50:f2:92:a1:3d:dd:d5:78:ff:
                    bf:5a:a6:55:9c:5a:20:f3:4e:e7:f5:49:84:0b:2e:
                    8c:bd:1a:7c:02:89:ae:d7:bc:76:bb:c2:32:35:35:
                    a5:da:a2:be:91:0b:16:06:43:51:24:d2:13:58:3e:
                    29:3b:f0:e8:94:9c:d6:30:74:bd:32:bf:c1:f3:f5:
                    36:b9:7f:7f:90:21:ba:4f:d0:31:65:8a:97:ad:70:
                    ac:d9:da:92:6f:4c:b5:e4:4d:dd:31:89:cf:f7:ca:
                    2c:9d:51:84:18:82:c7:82:e2:be:5d:42:e2:e9:fc:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:74:50:A0:46:AC:ED:C7:E1:F8:23:EB:78:67:10:88:EE:A6:28
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:e9:fa:32:07:98:ed:7f:50:c3:d2:72:04:71:f8:f9:4a:
         10:53:2c:6e:6a:86:1d:0e:e1:25:4b:a5:e3:0c:93:3b:67:f8:
         9f:29:7e:21:f5:86:df:d4:81:43:4d:6e:14:86:db:f0:bf:a6:
         6d:5f:65:04:f3:4b:fc:7a:ac:8a:ee:03:7b:ae:c4:a6:be:6d:
         97:6d:68:73:df:79:53:77:e6:7b:0e:74:1b:f3:5c:d3:6f:78:
         45:d3:66:3c:a3:a7:11:20:f4:a5:1d:85:2a:78:4d:e9:16:ea:
         d6:a2:3d:ba:11:65:dd:cc:4e:ea:b3:16:b1:bb:23:33:37:19:
         46:f1:47:f8:1c:28:c7:2f:7a:fc:62:af:dc:d4:88:3a:bd:b9:
         fc:93:84:ea:af:4b:60:e4:8f:fa:20:85:d6:d4:63:8b:ff:69:
         df:96:b9:ea:f3:b2:04:c8:23:a5:eb:2a:2d:2f:c2:f8:fc:07:
         3a:6d:55:68:ae:91:69:69:49:b4:d0:8b:ef:b4:35:74:15:7f:
         a1:26:32:56:a8:09:42:6e:a8:33:31:8b:2f:a6:f3:cb:95:7f:
         c2:5d:73:ef:32:d5:b2:77:7c:00:7a:ed:26:97:0a:e2:02:17:
         19:3e:de:e4:5b:4e:9f:18:ce:b2:4c:7a:96:67:2d:90:87:57:
         9a:09:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:15:11 2026 by rpki-client