Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          dg79aQmLRQ19Yt824/NnfdxTZH/ut4UIHJROZojnyC8=
Subject key identifier:   0D:4F:AB:AE:58:D7:A6:EF:DC:91:FA:ED:15:C7:8C:76:BA:16:42:B3
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       019E9DAA788A24BCB6958C81F0FCDC790489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          1452
Signing time:             Sat 06 Jun 2026 16:00:55 +0000
Manifest this update:     Sat 06 Jun 2026 16:00:55 +0000
Manifest next update:     Sun 07 Jun 2026 16:00:55 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: W4UGBil4J7kcIx6zxoYYNNF3jb3wqDEo+EG9yXNA/XI=)
                          2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:aa:78:8a:24:bc:b6:95:8c:81:f0:fc:dc:79:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Jun  6 16:00:55 2026 GMT
            Not After : Jun  7 16:00:55 2026 GMT
        Subject: CN=0d4fabae58d7a6efdc91faed15c78c76ba1642b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:99:59:38:f0:d2:a6:ff:4f:ab:16:46:09:
                    cf:80:2c:c8:3c:6d:86:3d:c5:d0:cc:77:9e:4a:ac:
                    f5:58:6e:39:92:9d:2a:0d:f5:db:b5:bb:df:3c:20:
                    4e:46:06:04:e5:18:a1:11:7a:e2:9e:03:4e:db:a2:
                    45:ed:62:1c:47:01:07:3c:2a:a3:f1:bc:c3:01:1b:
                    06:ef:b4:1a:db:a0:ac:26:5a:ad:b2:c4:b5:07:8e:
                    55:22:91:ea:f4:5a:97:ba:1b:58:35:9c:ba:14:ab:
                    78:9b:a2:fc:82:49:ee:14:68:90:b7:6b:8b:53:a9:
                    c5:2d:4e:b0:75:af:ad:c5:8f:ef:23:7b:6e:fe:cc:
                    dc:d3:6b:ce:02:f1:b5:9d:99:9c:43:f1:ce:4a:66:
                    b7:e1:32:7b:50:86:73:f9:83:78:97:cd:21:31:2b:
                    07:72:bf:99:ae:80:30:9b:db:0a:b1:06:f4:8d:85:
                    e6:d1:13:86:b7:b2:f3:48:9f:08:8d:f0:b7:1f:90:
                    bf:16:c7:e4:1e:79:79:fb:bd:1a:de:05:04:0f:8c:
                    01:75:1b:fc:ac:19:02:d6:d5:62:c6:62:c8:47:e7:
                    2c:d2:a0:39:bd:d6:59:2e:49:f2:3a:24:5a:37:14:
                    d2:14:b8:cb:83:54:2c:23:a5:b8:d7:d0:c9:87:8f:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4F:AB:AE:58:D7:A6:EF:DC:91:FA:ED:15:C7:8C:76:BA:16:42:B3
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:2b:a8:24:4e:20:fb:a9:77:47:79:77:b8:a6:25:c4:aa:
         b7:e1:a0:ba:51:71:25:d8:5d:a8:6a:84:17:41:b3:c5:4e:b6:
         80:a2:d9:9b:d7:83:6b:7c:ad:89:90:f0:a8:2a:51:22:4c:13:
         0c:f1:7d:b9:82:d8:8b:6b:80:61:94:44:5a:e2:ea:a5:51:a6:
         b9:3e:39:82:35:e8:f6:d1:df:5c:68:68:59:96:08:eb:4f:56:
         68:2a:89:70:2c:a5:a6:51:69:df:92:98:01:9b:e4:0b:ea:f8:
         a6:c3:43:d7:b0:7f:26:d4:f6:cf:a3:b3:3f:cb:3a:5f:0b:0b:
         79:bc:49:5f:6f:6b:3a:11:14:d1:68:ff:24:1e:fe:42:75:18:
         5f:8d:e7:b3:df:6b:88:a4:d6:4c:4e:75:eb:b6:6e:d2:79:d9:
         ba:b2:5a:03:7b:5f:26:ea:76:7c:aa:86:fd:7b:08:ea:b3:52:
         56:4a:ff:0e:b2:00:7a:d9:0a:69:c0:1b:b8:d1:10:33:a4:80:
         8b:7a:29:ef:02:5f:ee:07:e9:e8:2e:77:57:f0:70:66:77:b3:
         93:7b:e4:f3:6f:28:5e:59:20:92:f9:89:3e:5f:79:d6:e0:96:
         49:a8:c3:d7:92:15:25:89:40:f1:89:fd:1d:99:46:c5:78:09:
         f0:4e:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:18 2026 by rpki-client