Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          +NDyE2awYMfApOLHMicLW08Spbbz/cxFsHGX74arOIk=
Subject key identifier:   E1:1E:D7:EA:91:3D:F5:BE:AE:11:88:D8:B3:29:D6:F5:02:98:89:35
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019E25EF03E7492D82D2539F1C9D04F283A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1955
Signing time:             Thu 14 May 2026 10:01:21 +0000
Manifest this update:     Thu 14 May 2026 10:01:21 +0000
Manifest next update:     Fri 15 May 2026 10:01:21 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: ALj8Jw_vLPfuxhGkrNZe2ZmHHf4.roa (hash: 9HMLj+nWEm3obGLFbDMgKi1p1g38OTKr4AsjrophMb0=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: HR1jfFN83A6ixXXTMfJWpFHZXASRnLDSAsOqF85TgO0=)
                          5: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          6: OQT-T2xwDnT3SaaWIX_swo_jqrU.roa (hash: 6jhpIBR4CaUCC7h962ftGGzayHzglVk18hHzO4Kre0g=)
                          7: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          8: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          9: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          10: Sp4JhFUAyekIacUgRv336KvjT_o.roa (hash: De1RZZOHCJNIcik/zANnmI2X7I3Z/7PHfNu3v3ZB8fk=)
                          11: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          12: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          13: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          14: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          15: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          16: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          17: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          18: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          19: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:ef:03:e7:49:2d:82:d2:53:9f:1c:9d:04:f2:83:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: May 14 10:01:21 2026 GMT
            Not After : May 15 10:01:21 2026 GMT
        Subject: CN=e11ed7ea913df5beae1188d8b329d6f502988935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:bc:65:83:19:59:b0:f5:fb:40:47:1b:91:
                    51:00:70:6d:21:c0:c4:9d:34:a3:fa:5b:8d:34:b7:
                    a2:17:00:93:e8:5e:bc:39:cf:38:6c:93:95:8e:60:
                    a1:3b:9a:c2:27:ac:b4:b8:5e:15:58:a4:98:c2:58:
                    54:b1:03:a3:f5:f8:d5:e8:61:e8:f1:37:bf:20:91:
                    fa:f7:e6:ee:95:78:21:eb:c4:31:63:9b:09:34:94:
                    b8:15:fc:8c:a4:b1:65:84:e3:e1:3b:99:07:52:93:
                    78:50:6c:fc:44:fe:e1:dc:81:7d:db:fa:42:1f:b9:
                    5e:b1:1b:0d:0d:68:89:ca:80:9d:2e:5e:04:ff:96:
                    35:c3:07:60:9b:fb:9c:36:d0:65:bb:97:ce:a1:18:
                    d1:a9:3e:1d:1b:95:ea:c1:93:7f:4f:1d:b5:19:79:
                    a7:96:0a:13:dc:44:96:25:f0:93:9e:bd:57:29:f2:
                    e3:52:84:80:fe:ef:5a:9d:19:7b:62:78:09:74:3b:
                    33:2d:6b:46:ba:8a:7f:c6:26:85:58:50:05:f2:93:
                    db:53:0c:ac:81:05:9b:3a:e4:15:79:22:de:05:fb:
                    5b:6f:43:76:13:5c:5f:1f:2f:bf:3c:c8:b6:e6:db:
                    cb:01:42:56:65:bf:a5:79:c9:51:20:1b:49:d8:35:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:D7:EA:91:3D:F5:BE:AE:11:88:D8:B3:29:D6:F5:02:98:89:35
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5c:8a:fe:24:e2:74:a1:ac:ce:35:45:5a:6d:b4:5f:71:22:
         90:f6:0a:6f:1b:06:96:fe:31:22:88:3c:0a:eb:58:fb:ec:0a:
         d9:1d:d3:c1:e2:fa:c1:c0:27:82:e0:83:91:89:e9:8a:c9:5d:
         ef:58:47:a2:eb:14:02:8c:07:cd:b2:c4:65:3a:98:3d:b8:a6:
         e5:ca:03:28:1f:eb:dc:45:00:e9:f5:05:ae:54:20:c3:2e:55:
         37:4c:c3:96:43:46:99:ec:fb:b3:9c:f9:fa:c0:e5:9c:f8:72:
         bf:06:f9:88:bf:00:3d:4c:1e:fe:3b:93:d3:46:8c:99:fc:96:
         df:7b:14:65:7f:e7:e1:c6:47:ba:39:93:94:19:7b:df:a4:cd:
         af:ff:cf:20:a0:47:bc:55:16:e4:36:c6:eb:a9:56:d4:ef:9e:
         1c:4e:0f:a7:04:a5:89:77:2a:40:7c:77:de:39:51:d1:1b:cf:
         56:ab:9e:98:68:47:b3:18:49:4a:0e:24:2b:18:e7:25:f4:1e:
         b4:4e:e5:92:45:4e:69:5c:99:03:df:06:49:d3:ce:27:3e:d4:
         39:43:9d:8f:84:de:ca:dd:5a:6c:aa:98:b5:dc:01:be:a4:56:
         7f:37:a8:5a:39:29:44:33:d1:e2:27:db:80:9f:75:84:90:11:
         f2:0e:a1:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4l7wPnSS2C0lOfHJ0E8oOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjYwNTE0MTAwMTIxWhcNMjYwNTE1MTAwMTIxWjAzMTEwLwYDVQQD
EyhlMTFlZDdlYTkxM2RmNWJlYWUxMTg4ZDhiMzI5ZDZmNTAyOTg4OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVK8ZYMZWbD1+0BHG5FRAHBtIcDE
nTSj+luNNLeiFwCT6F68Oc84bJOVjmChO5rCJ6y0uF4VWKSYwlhUsQOj9fjV6GHo
8Te/IJH69+bulXgh68QxY5sJNJS4FfyMpLFlhOPhO5kHUpN4UGz8RP7h3IF92/pC
H7lesRsNDWiJyoCdLl4E/5Y1wwdgm/ucNtBlu5fOoRjRqT4dG5XqwZN/Tx21GXmn
lgoT3ESWJfCTnr1XKfLjUoSA/u9anRl7YngJdDszLWtGuop/xiaFWFAF8pPbUwys
gQWbOuQVeSLeBftbb0N2E1xfHy+/PMi25tvLAUJWZb+leclRIBtJ2DUhfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEe1+qRPfW+rhGI2LMp1vUCmIk1MB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFyK/iTi
dKGszjVFWm20X3EikPYKbxsGlv4xIog8CutY++wK2R3TweL6wcAnguCDkYnpisld
71hHousUAowHzbLEZTqYPbim5coDKB/r3EUA6fUFrlQgwy5VN0zDlkNGmez7s5z5
+sDlnPhyvwb5iL8APUwe/juT00aMmfyW33sUZX/n4cZHujmTlBl736TNr//PIKBH
vFUW5DbG66lW1O+eHE4PpwSliXcqQHx33jlR0RvPVquemGhHsxhJSg4kKxjnJfQe
tE7lkkVOaVyZA98GSdPOJz7UOUOdj4Teyt1abKqYtdwBvqRWfzeoWjkpRDPR4ifb
gJ91hJAR8g6h/g==
-----END CERTIFICATE-----
Generated at Thu May 14 16:46:17 2026 by rpki-client