Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File:                     EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier:          b8JkTKnLrrWyUAPsyUcaYYwD0SvQ+h1hO+5U2osQFWQ=
Subject key identifier:   1D:0D:A0:F3:1E:96:15:CD:05:71:18:68:1F:36:C4:B9:FB:FE:E3:1E
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer:       /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial:       019E30724E482AB32075F9F0DF114F20AAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number:          062B
Signing time:             Sat 16 May 2026 11:00:57 +0000
Manifest this update:     Sat 16 May 2026 11:00:57 +0000
Manifest next update:     Sun 17 May 2026 11:00:57 +0000
Files and hashes:         1: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (hash: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno=)
                          2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: 4JjuYIywMn4xfvGpCB1ZPOuGr4uTwQSCFWXPND+RqiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:4e:48:2a:b3:20:75:f9:f0:df:11:4f:20:aa:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
        Validity
            Not Before: May 16 11:00:57 2026 GMT
            Not After : May 17 11:00:57 2026 GMT
        Subject: CN=1d0da0f31e9615cd057118681f36c4b9fbfee31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:4b:9f:0a:cd:2a:53:56:da:99:70:ea:77:
                    1e:ab:f4:0a:7f:26:f5:b5:fd:39:88:03:b1:05:e3:
                    9b:d5:17:b1:2a:bc:f1:16:e0:20:2e:e3:40:9d:0e:
                    d8:08:4b:9d:59:34:f3:f3:98:a5:12:3f:8e:6f:76:
                    80:7c:a3:c7:9d:25:eb:ed:23:88:02:12:00:30:33:
                    c3:8c:a0:60:dd:8e:c7:14:f2:cb:84:4d:58:ac:13:
                    56:16:9c:ed:1f:46:9f:a2:bb:04:93:3a:9e:ed:44:
                    10:ab:31:63:14:c7:2d:eb:90:51:d3:59:c9:64:b7:
                    9c:a1:b8:0f:05:75:a1:34:7e:5f:a9:3c:a2:ab:57:
                    98:45:8d:87:fd:e9:bf:79:1b:49:5b:3e:14:cd:e4:
                    fb:60:0c:46:8f:cd:16:ba:32:0a:bd:d7:37:6a:03:
                    8e:62:c6:d7:87:69:ed:60:33:ae:1d:15:43:e3:d0:
                    16:88:08:43:8d:48:9d:af:25:1b:13:b0:24:69:eb:
                    d3:64:b8:f9:cb:49:e3:42:e1:6a:5d:fc:c1:25:93:
                    7d:fe:ff:19:98:93:21:03:63:0e:97:c3:91:8d:db:
                    25:ba:e5:57:0b:aa:73:41:0b:9f:a6:da:40:3b:89:
                    e6:ff:a8:78:d9:f0:82:cf:d2:a6:0d:d5:06:6b:73:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0D:A0:F3:1E:96:15:CD:05:71:18:68:1F:36:C4:B9:FB:FE:E3:1E
            X509v3 Authority Key Identifier:
                keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:46:b6:57:30:5f:fa:a7:9d:60:45:d7:5c:54:a5:d3:ba:06:
         78:b2:96:14:ba:04:4c:b6:f8:90:18:9c:58:4c:c3:18:49:05:
         57:67:60:78:38:87:71:b6:6e:76:ce:09:58:60:1f:99:2d:7b:
         cc:e4:11:31:29:31:f6:e8:20:65:bc:66:80:e8:b3:5b:d5:05:
         27:88:96:5f:44:ff:20:5e:49:f2:82:66:6d:96:53:bb:06:80:
         d3:bf:ea:8b:e8:6e:56:52:11:cc:82:7a:df:e8:ef:a5:d1:17:
         2e:a3:f9:5f:19:0b:04:fd:11:16:f9:6f:c1:07:37:32:60:dd:
         a9:bf:c9:30:ca:50:24:6e:23:e0:b0:de:b7:d6:1b:0b:9d:9e:
         5c:e8:e8:6d:b4:cb:f2:65:fe:56:6d:5b:fa:a3:73:51:9b:ad:
         ed:81:b8:d0:2f:80:83:af:ee:ec:fe:da:3f:df:63:a3:61:2c:
         3c:09:fa:13:14:ee:a3:ca:98:75:8e:86:63:41:79:99:77:eb:
         0c:ba:94:a8:fc:c3:72:94:e4:d6:6f:cf:0e:04:02:32:2b:13:
         9a:5c:61:84:2a:1d:9f:24:f9:36:b9:7e:66:49:eb:68:43:86:
         73:32:b8:30:95:12:07:26:6b:76:aa:e7:90:f3:e6:09:13:b5:
         a4:ae:88:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wck5IKrMgdfnw3xFPIKriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNjNDM2Mjc5NTM3ZDRmNzI2ZDIzMTBjZWYxNGE0MmYx
YjJiOGEwHhcNMjYwNTE2MTEwMDU3WhcNMjYwNTE3MTEwMDU3WjAzMTEwLwYDVQQD
EygxZDBkYTBmMzFlOTYxNWNkMDU3MTE4NjgxZjM2YzRiOWZiZmVlMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszxLnwrNKlNW2plw6nceq/QKfyb1
tf05iAOxBeOb1RexKrzxFuAgLuNAnQ7YCEudWTTz85ilEj+Ob3aAfKPHnSXr7SOI
AhIAMDPDjKBg3Y7HFPLLhE1YrBNWFpztH0aforsEkzqe7UQQqzFjFMct65BR01nJ
ZLecobgPBXWhNH5fqTyiq1eYRY2H/em/eRtJWz4UzeT7YAxGj80WujIKvdc3agOO
YsbXh2ntYDOuHRVD49AWiAhDjUidryUbE7AkaevTZLj5y0njQuFqXfzBJZN9/v8Z
mJMhA2MOl8ORjdsluuVXC6pzQQufptpAO4nm/6h42fCCz9KmDdUGa3P/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0NoPMelhXNBXEYaB82xLn7/uMeMB8GA1UdIwQY
MBaAFBCDxDYnlTfU9ybSMQzvFKQvGyuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTIt
ODEyMjQ4YjY1MzcwLzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTE0NzMtNGQ4Yi00YmM5LWE5MTItODEyMjQ4YjY1Mzcw
LzEvRUlQRU5pZVZOOVQzSnRJeERPOFVwQzhiSzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0a2VzBf
+qedYEXXXFSl07oGeLKWFLoETLb4kBicWEzDGEkFV2dgeDiHcbZuds4JWGAfmS17
zOQRMSkx9uggZbxmgOizW9UFJ4iWX0T/IF5J8oJmbZZTuwaA07/qi+huVlIRzIJ6
3+jvpdEXLqP5XxkLBP0RFvlvwQc3MmDdqb/JMMpQJG4j4LDet9YbC52eXOjobbTL
8mX+Vm1b+qNzUZut7YG40C+Ag6/u7P7aP99jo2EsPAn6ExTuo8qYdY6GY0F5mXfr
DLqUqPzDcpTk1m/PDgQCMisTmlxhhCodnyT5Nrl+ZknraEOGczK4MJUSByZrdqrn
kPPmCRO1pK6IiA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:27:05 2026 by rpki-client