Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File:                     Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier:          dDRsEQFFov7npQUdoPae8aAKvxyL9ViCUFHCJrtGzh4=
Subject key identifier:   5C:3F:B5:37:AA:7A:F8:08:6F:FF:54:08:CC:8A:C2:2E:04:3B:13:73
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       019F292493DB74DF8F0CF18FAAB878039C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number:          1996
Signing time:             Fri 03 Jul 2026 18:01:30 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:30 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:30 +0000
Files and hashes:         1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=)
                          2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=)
                          3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: /oBAgqyDOeaS7URZrlZ6gAzkgAItKLjIEL9dIH4Slrg=)
                          4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=)
                          5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=)
                          6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=)
                          7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=)
                          8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=)
                          9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=)
                          10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:93:db:74:df:8f:0c:f1:8f:aa:b8:78:03:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Jul  3 18:01:30 2026 GMT
            Not After : Jul  4 18:01:30 2026 GMT
        Subject: CN=5c3fb537aa7af8086fff5408cc8ac22e043b1373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:f0:b5:33:da:f4:e9:43:e1:de:93:ea:e9:
                    7c:d6:58:5c:92:cf:41:78:78:10:c8:c1:4e:38:14:
                    80:9c:64:ae:8f:74:7f:d0:87:03:6a:31:42:06:bd:
                    ad:67:3d:ac:fc:66:6e:1b:22:04:66:c7:5a:80:fa:
                    5a:ec:43:92:82:0f:19:ee:76:e8:7c:fc:4d:19:9f:
                    16:11:53:34:76:a5:ae:1c:bc:83:aa:20:72:bb:92:
                    81:fa:d3:e8:f4:5d:80:1f:40:38:24:fa:47:d9:ea:
                    b2:0e:1e:ad:b2:46:f1:b8:10:71:f5:69:8d:e5:5c:
                    34:d1:9f:cb:c6:8f:78:b7:a5:f5:94:17:fd:c3:7f:
                    4f:e0:07:66:66:c8:fa:45:f3:20:09:2a:5b:a2:46:
                    5c:ce:d1:98:1a:9d:43:c8:f2:81:0d:74:50:0e:48:
                    57:e9:a9:d3:15:6c:2c:9b:5e:60:02:58:b6:f3:3a:
                    ee:b7:7a:38:61:34:74:fb:ec:73:21:d1:3d:80:c8:
                    49:f0:3e:91:fb:93:83:fb:41:0a:f7:2d:2a:40:62:
                    e0:a3:4e:1b:86:ad:54:c2:38:b5:2a:f6:4a:78:33:
                    9d:8b:b2:75:8d:d4:45:a6:99:b9:91:41:18:ec:9d:
                    ce:23:fd:4d:7f:f3:96:0b:dd:8c:b8:15:3b:00:e8:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3F:B5:37:AA:7A:F8:08:6F:FF:54:08:CC:8A:C2:2E:04:3B:13:73
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:15:d3:0c:8f:9a:99:39:60:c2:36:a8:4d:8b:8a:1b:cb:
         9d:68:c0:93:22:f9:e5:39:41:13:c1:8d:6a:8e:f9:b1:bb:0b:
         d5:2c:fe:2b:0e:fd:81:fb:2e:cd:c5:38:78:de:f9:e2:e7:25:
         a0:b2:0d:47:eb:b3:30:8a:b8:9b:4e:ec:18:82:26:68:1e:03:
         c6:80:6d:98:f4:b4:54:f5:23:8c:a8:e3:a5:52:4b:35:73:89:
         57:11:05:8a:5f:66:f4:66:2a:0d:73:84:bf:56:4b:d5:19:e5:
         44:af:db:66:27:b9:e5:63:87:fe:eb:d8:5b:35:87:4d:51:c8:
         23:36:f8:b6:e2:9e:76:7b:35:75:e7:3c:75:8b:44:3d:e1:6e:
         18:e8:c7:c2:7c:36:07:9b:cf:24:31:8c:79:48:e6:0c:d7:e7:
         3d:94:5e:17:56:55:d1:b0:17:31:22:19:7e:f9:b0:32:38:8a:
         74:e6:2f:9f:b5:91:94:65:1e:2c:37:87:fd:12:5e:3d:b9:ad:
         96:e2:40:b3:33:a4:27:93:74:50:06:30:62:b3:a1:f5:24:30:
         aa:a3:e7:20:65:da:11:60:b8:d6:1e:02:c2:e0:4c:44:c0:0e:
         e5:64:37:e4:a3:9c:8e:34:dc:60:03:87:52:02:dd:8f:76:3e:
         c1:0a:de:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pJJPbdN+PDPGPqrh4A5xSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll
MGEyMzgwHhcNMjYwNzAzMTgwMTMwWhcNMjYwNzA0MTgwMTMwWjAzMTEwLwYDVQQD
Eyg1YzNmYjUzN2FhN2FmODA4NmZmZjU0MDhjYzhhYzIyZTA0M2IxMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20/wtTPa9OlD4d6T6ul81lhcks9B
eHgQyMFOOBSAnGSuj3R/0IcDajFCBr2tZz2s/GZuGyIEZsdagPpa7EOSgg8Z7nbo
fPxNGZ8WEVM0dqWuHLyDqiByu5KB+tPo9F2AH0A4JPpH2eqyDh6tskbxuBBx9WmN
5Vw00Z/Lxo94t6X1lBf9w39P4AdmZsj6RfMgCSpbokZcztGYGp1DyPKBDXRQDkhX
6anTFWwsm15gAli28zrut3o4YTR0++xzIdE9gMhJ8D6R+5OD+0EK9y0qQGLgo04b
hq1Uwji1KvZKeDOdi7J1jdRFppm5kUEY7J3OI/1Nf/OWC92MuBU7AOiCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw/tTeqevgIb/9UCMyKwi4EOxNzMB8GA1UdIwQY
MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt
Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz
LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe90V0wyP
mpk5YMI2qE2LihvLnWjAkyL55TlBE8GNao75sbsL1Sz+Kw79gfsuzcU4eN754ucl
oLINR+uzMIq4m07sGIImaB4DxoBtmPS0VPUjjKjjpVJLNXOJVxEFil9m9GYqDXOE
v1ZL1RnlRK/bZie55WOH/uvYWzWHTVHIIzb4tuKedns1dec8dYtEPeFuGOjHwnw2
B5vPJDGMeUjmDNfnPZReF1ZV0bAXMSIZfvmwMjiKdOYvn7WRlGUeLDeH/RJePbmt
luJAszOkJ5N0UAYwYrOh9SQwqqPnIGXaEWC41h4CwuBMRMAO5WQ35KOcjjTcYAOH
UgLdj3Y+wQreyA==
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:57:54 2026 by rpki-client