Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          38EHU8X2ZdXVK33nJiTMXj6T3R1WZ7s8Mf+Gi8kZsjE=
Subject key identifier:   62:E4:C1:73:CF:B2:2F:C4:80:D7:09:C8:F2:76:99:28:44:7C:CD:C9
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019E92EF57A6A7A37AC0CA0C444B498F2F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1990
Signing time:             Thu 04 Jun 2026 14:00:19 +0000
Manifest this update:     Thu 04 Jun 2026 14:00:19 +0000
Manifest next update:     Fri 05 Jun 2026 14:00:19 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: t52ixGB3IXPn/m/XY1/QMn7Xnvt4D6f57q/ZZXzdois=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:ef:57:a6:a7:a3:7a:c0:ca:0c:44:4b:49:8f:2f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jun  4 14:00:19 2026 GMT
            Not After : Jun  5 14:00:19 2026 GMT
        Subject: CN=62e4c173cfb22fc480d709c8f2769928447ccdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:09:7e:17:6f:61:75:12:87:7f:d7:1a:e8:
                    d0:90:fd:c6:c6:35:93:25:63:ba:55:9e:46:b1:7d:
                    28:60:44:f3:88:f3:56:ed:38:83:80:83:85:74:f5:
                    3e:c6:a0:77:f1:05:57:c7:85:b3:db:65:d9:5c:99:
                    54:91:89:20:ca:40:e7:b2:af:9b:82:3c:a0:40:d2:
                    ca:3a:85:60:26:47:7c:5b:87:eb:b9:df:9e:e4:1b:
                    2a:ce:2c:64:04:a4:e3:d8:ab:ba:1a:d0:19:93:40:
                    f1:be:9b:86:47:2e:a4:64:85:43:20:2b:ac:bb:15:
                    da:1f:91:97:56:c4:d2:67:2c:fb:c6:2c:e1:23:c1:
                    d8:53:a4:6d:ef:0a:31:db:a8:ca:24:c4:d5:67:89:
                    28:1d:f5:e4:39:26:38:c2:4a:cf:7e:3e:db:2b:16:
                    36:ac:45:78:5d:72:9d:ea:e9:60:6a:78:e7:4f:f4:
                    1b:49:d1:5c:e7:c7:d5:9c:cb:56:4c:8c:f5:5d:e3:
                    0f:f0:2f:f4:e9:8b:3f:c6:9a:c0:1a:23:4c:ed:41:
                    fa:79:8c:bc:b5:8b:da:ea:1c:8b:b2:98:30:3f:27:
                    73:73:e4:b8:b2:85:62:0a:51:96:f5:de:e0:d3:ea:
                    61:32:3b:67:65:0d:7a:ad:c5:90:25:6a:fb:db:fb:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:C1:73:CF:B2:2F:C4:80:D7:09:C8:F2:76:99:28:44:7C:CD:C9
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:d8:a6:f8:da:d1:e7:ff:be:09:84:3b:0a:4e:aa:ef:11:
         78:76:a4:ff:f2:9c:8e:49:46:ef:01:27:7b:9e:76:da:67:0f:
         0b:05:ba:8e:af:d0:66:dd:8a:5a:e1:fd:12:21:1e:4e:6f:ea:
         31:b0:33:20:04:c6:94:84:4e:06:f7:77:30:d8:72:60:cd:20:
         9a:ff:af:85:35:2a:a6:3b:69:9c:ba:0d:43:46:bd:33:a9:02:
         bd:49:b3:e6:54:67:ec:4b:0a:2d:7f:53:fa:5d:9b:f7:11:56:
         1d:03:2e:8b:53:90:72:f6:ed:0c:e4:6f:c0:44:ef:e2:45:a2:
         04:d4:92:7d:ed:d7:2a:7a:4b:a4:ea:60:0e:3b:c7:83:16:02:
         13:ca:4d:9f:be:ba:32:66:88:95:75:1d:e6:62:c7:41:52:f3:
         1c:83:4a:15:54:aa:8d:0c:ba:49:b8:8c:6b:10:42:de:2c:03:
         e9:3d:5e:29:8c:bf:34:1a:81:e0:3b:50:45:a9:a8:d4:6f:08:
         ef:ad:6b:7c:e2:e2:32:b1:f2:08:67:7f:4c:25:84:88:55:f4:
         01:c9:04:39:64:a2:4e:af:34:3c:ef:69:58:b4:a2:29:b5:69:
         90:06:e0:41:4c:e9:f5:00:76:1c:c9:5c:ba:ca:fe:28:b0:74:
         ad:e2:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 23:22:47 2026 by rpki-client