Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File:                     Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier:          S0bl1s1davWKiiGZAYeJDOdtJ4tHVQfkJzt/E2VQbhY=
Subject key identifier:   39:14:FC:9D:A1:D3:77:78:85:20:71:D3:60:FD:DF:FB:39:EF:B6:9A
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer:       /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial:       019F18D6934EB784E4D664DBC6106606B537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number:          191B
Signing time:             Tue 30 Jun 2026 14:02:23 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:23 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:23 +0000
Files and hashes:         1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
                          2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: hAcbIYrUmNAYaRgshl8cV1l/VWmjKilB4GdIypz0/1Q=)
                          3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:93:4e:b7:84:e4:d6:64:db:c6:10:66:06:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
        Validity
            Not Before: Jun 30 14:02:23 2026 GMT
            Not After : Jul  1 14:02:23 2026 GMT
        Subject: CN=3914fc9da1d37778852071d360fddffb39efb69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3c:e1:05:22:53:72:bb:e4:3e:d9:d5:e7:22:
                    9f:b0:53:51:81:2a:9e:4c:f7:32:c4:d5:40:27:c3:
                    2a:14:89:9e:c9:84:fa:b0:c9:01:bb:92:07:26:d4:
                    2a:c8:58:25:63:a5:fe:df:44:51:07:99:fc:cc:d1:
                    99:33:16:a1:10:18:2b:86:0d:f6:d0:c8:a1:4f:d0:
                    3d:76:70:52:df:c3:bd:f2:b3:7e:fb:34:a4:b6:2e:
                    cc:68:94:cc:2a:7a:75:98:97:7a:6a:35:9d:f8:c7:
                    ae:77:03:8e:b5:56:d5:58:7f:7b:55:1d:16:49:24:
                    ac:d7:c3:cb:34:85:45:8f:c2:b1:df:bd:73:a6:de:
                    b4:f9:a6:14:e2:c0:0b:31:c6:f8:30:67:cb:ee:3a:
                    e2:84:59:ce:dd:b0:e0:cd:1c:15:17:70:b5:73:15:
                    e1:8f:83:0d:85:1b:a1:87:9f:c7:de:14:26:b9:3f:
                    44:cb:05:88:9f:ea:b5:2f:e6:2f:a6:70:33:be:41:
                    a5:ff:87:09:38:1e:51:44:b1:a8:db:19:23:8b:2f:
                    47:c0:07:79:04:12:0c:96:de:4e:ec:8a:db:e7:8b:
                    88:76:ad:8b:40:c5:85:67:1f:fb:82:9c:cb:44:59:
                    22:d6:c0:12:69:a1:30:2c:e7:ac:d6:4b:cf:c7:27:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:FC:9D:A1:D3:77:78:85:20:71:D3:60:FD:DF:FB:39:EF:B6:9A
            X509v3 Authority Key Identifier:
                keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:8b:3f:6e:46:26:42:ba:f0:0d:a9:c0:25:c1:90:84:66:
         38:2d:12:f0:cd:f2:a5:34:37:54:25:f4:fc:66:7d:fd:e0:de:
         a1:91:6d:21:41:ce:53:7a:2f:1c:3b:2d:82:25:7f:30:45:fc:
         6d:6f:fc:ec:c8:65:a0:3d:7d:ba:f8:7f:88:43:f4:26:f3:dc:
         b2:b1:fe:f5:38:d7:1a:17:c8:d1:01:de:e2:8a:83:37:7b:b4:
         cd:b6:28:91:35:59:c9:6a:bc:35:38:ab:34:5a:73:59:b9:27:
         05:4b:df:68:b3:ab:4e:c8:ec:75:1c:5a:77:5f:11:e7:d7:d4:
         7c:87:1d:e0:f2:3f:b9:28:eb:44:f5:12:8f:3c:bc:66:b1:79:
         6a:2f:04:9a:7c:73:40:72:c8:a0:44:f2:23:4a:21:1c:56:6a:
         d3:4d:6c:e1:b3:26:7c:6b:38:be:46:3c:50:e6:08:f9:ce:82:
         6b:70:1b:9d:76:61:e0:92:61:77:49:a5:03:ec:a5:c8:f5:fd:
         f0:d6:b3:8a:6f:30:75:7c:f4:37:29:1a:69:10:55:a7:0a:dd:
         f2:80:81:9b:6c:92:a0:ad:1a:df:46:2e:19:57:0e:a1:36:c1:
         6d:90:5d:15:d5:57:0f:25:2c:09:56:9b:0a:ad:af:db:d5:ef:
         b8:99:35:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1pNOt4Tk1mTbxhBmBrU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjYwNjMwMTQwMjIzWhcNMjYwNzAxMTQwMjIzWjAzMTEwLwYDVQQD
EygzOTE0ZmM5ZGExZDM3Nzc4ODUyMDcxZDM2MGZkZGZmYjM5ZWZiNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjzhBSJTcrvkPtnV5yKfsFNRgSqe
TPcyxNVAJ8MqFImeyYT6sMkBu5IHJtQqyFglY6X+30RRB5n8zNGZMxahEBgrhg32
0MihT9A9dnBS38O98rN++zSkti7MaJTMKnp1mJd6ajWd+MeudwOOtVbVWH97VR0W
SSSs18PLNIVFj8Kx371zpt60+aYU4sALMcb4MGfL7jrihFnO3bDgzRwVF3C1cxXh
j4MNhRuhh5/H3hQmuT9EywWIn+q1L+YvpnAzvkGl/4cJOB5RRLGo2xkjiy9HwAd5
BBIMlt5O7Irb54uIdq2LQMWFZx/7gpzLRFki1sASaaEwLOes1kvPxydK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkU/J2h03d4hSBx02D93/s577aaMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKOLP25G
JkK68A2pwCXBkIRmOC0S8M3ypTQ3VCX0/GZ9/eDeoZFtIUHOU3ovHDstgiV/MEX8
bW/87MhloD19uvh/iEP0JvPcsrH+9TjXGhfI0QHe4oqDN3u0zbYokTVZyWq8NTir
NFpzWbknBUvfaLOrTsjsdRxad18R59fUfIcd4PI/uSjrRPUSjzy8ZrF5ai8Emnxz
QHLIoETyI0ohHFZq001s4bMmfGs4vkY8UOYI+c6Ca3AbnXZh4JJhd0mlA+ylyPX9
8Nazim8wdXz0NykaaRBVpwrd8oCBm2ySoK0a30YuGVcOoTbBbZBdFdVXDyUsCVab
Cq2v29XvuJk1xw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:45 2026 by rpki-client