Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          veXTu5zBG63SvnHyMcILu+tIVXziu16nWsx84+qMF6s=
Subject key identifier:   DF:22:B2:75:43:6B:85:59:AC:91:E3:35:97:47:EE:B6:A2:05:A1:6C
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       019EB9224310E86BC0149B10254330568BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          1818
Signing time:             Fri 12 Jun 2026 00:01:30 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:30 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:30 +0000
Files and hashes:         1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: lUMpaUzva/AdMsx/+KbDURGNcxMIv3RuSvql7+pTGHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:43:10:e8:6b:c0:14:9b:10:25:43:30:56:8b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Jun 12 00:01:30 2026 GMT
            Not After : Jun 13 00:01:30 2026 GMT
        Subject: CN=df22b275436b8559ac91e3359747eeb6a205a16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:52:0d:91:64:41:e9:18:3b:cb:63:3b:a2:d6:
                    b3:64:4b:8e:a2:12:84:da:bd:41:27:c6:fe:45:d8:
                    57:7a:31:25:a9:67:14:b8:8d:6f:d2:84:cf:e1:d4:
                    bf:ca:31:96:9e:e0:1d:e3:cb:0a:12:89:86:b8:2a:
                    2e:68:44:9d:fb:61:cd:b9:da:13:03:6f:16:1b:cd:
                    f5:2c:62:7d:d0:9f:40:7d:db:33:a9:17:14:6f:af:
                    d0:29:b3:96:d0:48:3d:8e:39:f1:f9:6e:8d:1f:fc:
                    83:06:d4:40:31:99:d1:a8:78:61:5d:0f:01:f5:f1:
                    ac:52:48:81:ca:86:35:14:df:89:9b:cf:5a:58:d8:
                    07:82:51:5a:72:30:c3:33:0f:6f:e3:cc:cc:a8:f2:
                    ba:8d:2e:99:63:d3:64:8b:36:97:98:d7:a3:d7:f2:
                    a3:12:50:97:eb:4b:40:0d:98:e3:f4:09:8a:9e:9a:
                    33:05:1a:31:6d:eb:72:dd:6f:a1:01:02:1e:d7:42:
                    a7:c0:20:cf:5f:b6:a5:f5:84:5d:9e:5a:9f:43:b5:
                    88:35:38:30:15:76:57:11:61:8f:af:a8:68:b4:5b:
                    30:a3:41:f7:ae:72:c5:2c:8f:0f:97:f1:70:28:b7:
                    43:db:e0:a9:40:72:68:a2:ca:9c:ed:ca:24:8a:c1:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:22:B2:75:43:6B:85:59:AC:91:E3:35:97:47:EE:B6:A2:05:A1:6C
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:90:4b:94:cf:16:bf:d2:42:d3:9f:9b:b8:38:b3:d1:0a:c9:
         42:bc:bc:12:38:d3:29:e4:c8:3b:e4:87:57:79:73:5e:43:5d:
         99:27:f7:0a:60:dd:fc:19:be:fd:10:2d:f7:45:dc:e9:12:f4:
         97:35:73:0b:10:85:61:50:28:d5:1d:35:d5:20:f6:74:60:ce:
         2c:a0:32:dd:a3:4a:28:95:83:f9:92:4d:da:3e:db:2d:4f:f3:
         1e:bc:87:f4:db:10:f2:31:af:f1:2c:01:17:7e:dd:df:c5:09:
         a1:58:03:e7:70:c4:77:84:df:9d:2f:6e:b4:4c:5c:92:6f:29:
         2b:dd:43:a0:59:4e:f4:62:e1:88:34:c0:af:28:17:82:1d:3f:
         6c:9b:7b:d2:4b:1b:ea:15:0e:a6:76:2b:8c:bc:8b:f9:07:b1:
         61:36:73:6e:8c:b9:c6:d3:5a:f3:b3:99:57:ab:b1:1e:17:71:
         77:d1:d2:45:cf:08:cc:fe:91:57:19:e5:67:aa:9f:98:9f:5d:
         1b:10:ce:b8:fa:25:b0:7b:3d:75:3e:d6:36:62:f0:6f:93:a1:
         ec:b2:d1:a7:26:b5:76:15:dd:7a:8e:90:2c:b5:55:40:34:c0:
         68:b8:1b:c4:bf:66:4a:9b:05:af:2f:1e:fe:ec:c8:3a:e5:63:
         6f:cc:d5:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IkMQ6GvAFJsQJUMwVov8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjYwNjEyMDAwMTMwWhcNMjYwNjEzMDAwMTMwWjAzMTEwLwYDVQQD
EyhkZjIyYjI3NTQzNmI4NTU5YWM5MWUzMzU5NzQ3ZWViNmEyMDVhMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VINkWRB6Rg7y2M7otazZEuOohKE
2r1BJ8b+RdhXejElqWcUuI1v0oTP4dS/yjGWnuAd48sKEomGuCouaESd+2HNudoT
A28WG831LGJ90J9AfdszqRcUb6/QKbOW0Eg9jjnx+W6NH/yDBtRAMZnRqHhhXQ8B
9fGsUkiByoY1FN+Jm89aWNgHglFacjDDMw9v48zMqPK6jS6ZY9NkizaXmNej1/Kj
ElCX60tADZjj9AmKnpozBRoxbety3W+hAQIe10KnwCDPX7al9YRdnlqfQ7WINTgw
FXZXEWGPr6hotFswo0H3rnLFLI8Pl/FwKLdD2+CpQHJoosqc7cokisFatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8isnVDa4VZrJHjNZdH7raiBaFsMB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpBLlM8W
v9JC05+buDiz0QrJQry8EjjTKeTIO+SHV3lzXkNdmSf3CmDd/Bm+/RAt90Xc6RL0
lzVzCxCFYVAo1R011SD2dGDOLKAy3aNKKJWD+ZJN2j7bLU/zHryH9NsQ8jGv8SwB
F37d38UJoVgD53DEd4TfnS9utExckm8pK91DoFlO9GLhiDTArygXgh0/bJt70ksb
6hUOpnYrjLyL+QexYTZzboy5xtNa87OZV6uxHhdxd9HSRc8IzP6RVxnlZ6qfmJ9d
GxDOuPolsHs9dT7WNmLwb5Oh7LLRpya1dhXdeo6QLLVVQDTAaLgbxL9mSpsFry8e
/uzIOuVjb8zV0Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:19:51 2026 by rpki-client