Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier:          uMD4AWjNLsDWOfCu94z0ayOfhMHAYyvmeJjaI7NdF7c=
Subject key identifier:   C6:BC:91:8D:CE:54:73:D5:F1:E5:2B:C0:74:E6:4C:9B:33:94:01:70
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       019E303B5FA821B0D4411B6641CC533D5A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number:          0BF0
Signing time:             Sat 16 May 2026 10:00:57 +0000
Manifest this update:     Sat 16 May 2026 10:00:57 +0000
Manifest next update:     Sun 17 May 2026 10:00:57 +0000
Files and hashes:         1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=)
                          2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: yPgebzmnq2koU+JuohJQzidSBikmeSZC2rsL7ETAFVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:5f:a8:21:b0:d4:41:1b:66:41:cc:53:3d:5a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: May 16 10:00:57 2026 GMT
            Not After : May 17 10:00:57 2026 GMT
        Subject: CN=c6bc918dce5473d5f1e52bc074e64c9b33940170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:ef:24:6e:d7:26:82:da:e5:0b:44:53:60:
                    00:d6:c4:fd:ee:af:54:0b:9c:ec:95:92:ac:e0:b4:
                    cd:c3:e5:9d:c2:5a:be:cd:bf:b1:a7:e6:91:ca:8a:
                    80:c7:73:6d:c7:2c:b6:a6:ca:f6:75:15:f7:f1:ad:
                    a2:14:2c:4f:58:82:2b:59:1e:cb:49:ca:41:23:09:
                    27:56:b9:a7:60:8f:36:5d:2b:b9:f8:44:e0:07:45:
                    88:dc:93:f9:30:ff:75:95:19:8c:27:5a:89:88:3a:
                    ea:65:76:a0:40:fa:54:27:a2:68:bd:e2:d1:6a:b1:
                    24:78:80:65:32:71:b9:fe:57:8d:03:7f:eb:1a:2b:
                    90:cc:e4:9b:b6:65:a1:46:96:c9:cb:8c:04:b1:34:
                    79:a3:23:e7:23:71:e0:c5:5d:47:ed:10:d7:06:08:
                    61:26:1e:af:ea:2b:3a:f9:9f:f4:9c:f3:f8:6b:da:
                    8b:ce:7b:2d:46:59:37:76:4a:a0:ac:26:bc:5d:d5:
                    d3:94:27:a6:72:8b:cd:7a:d0:f4:35:5d:19:38:6e:
                    1d:3c:26:f7:a1:a2:bb:d7:dc:2d:1b:52:66:79:29:
                    a5:d2:98:7c:f0:65:52:79:fe:52:96:7e:c6:27:c7:
                    70:db:ee:e7:4e:b7:7a:81:12:9d:de:30:c2:e3:30:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:91:8D:CE:54:73:D5:F1:E5:2B:C0:74:E6:4C:9B:33:94:01:70
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6c:15:9d:41:39:99:a6:80:dd:d8:c6:79:26:ce:82:9e:a0:
         e1:59:31:cc:46:8b:ce:ec:eb:d4:e5:b6:64:d7:4e:1b:f8:ce:
         3c:c8:61:64:1e:64:f0:0a:57:18:56:47:b7:85:f5:dd:7b:63:
         3e:63:aa:1c:0d:41:9d:58:b2:72:5e:1a:f1:1c:21:bf:35:70:
         0f:04:2c:a0:74:78:03:24:e8:7c:84:d5:32:b2:4f:52:c1:0b:
         c7:24:54:22:51:bd:66:fd:0e:00:25:31:02:85:60:1c:5c:07:
         fe:12:af:64:5b:36:1f:ee:d5:d4:c1:0b:e1:42:81:2b:ec:91:
         b3:78:ed:bb:c4:7f:d9:11:18:48:b7:5c:28:bf:a6:87:bb:8e:
         b0:5b:bb:c5:b0:f9:1a:8a:80:83:a6:27:ca:e1:74:96:a7:49:
         c0:a8:5a:b2:dc:ad:a7:67:14:b6:97:0f:e5:9a:00:4f:a7:ab:
         2e:f0:bd:60:38:06:7a:03:b2:b4:bc:b6:14:9b:71:8d:d9:0b:
         d7:bc:73:13:ac:91:23:c2:49:b6:87:21:1c:43:fc:bc:fe:f0:
         9f:45:8a:6a:44:bb:c4:fd:b4:63:a8:17:fe:18:22:2b:94:b0:
         99:24:1d:7a:9f:06:41:3f:ef:2d:68:ca:5a:ed:dc:e9:89:dd:
         2c:67:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:53 2026 by rpki-client