Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          0/YFoS8Mxp75GYmjUOGkfbtbKaYUnAu5LyQPsvrc9/A=
Subject key identifier:   C8:3E:41:2E:54:B2:97:AE:29:AF:9B:5C:8F:FC:C7:3E:78:18:FD:01
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       019E2B4C859C251B56EDA1AED3120D02C7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          188B
Signing time:             Fri 15 May 2026 11:01:35 +0000
Manifest this update:     Fri 15 May 2026 11:01:35 +0000
Manifest next update:     Sat 16 May 2026 11:01:35 +0000
Files and hashes:         1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: UumWEZ+KGZho1p8slhT/3j6aFqwiPGJnw6Faukod0AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:85:9c:25:1b:56:ed:a1:ae:d3:12:0d:02:c7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: May 15 11:01:35 2026 GMT
            Not After : May 16 11:01:35 2026 GMT
        Subject: CN=c83e412e54b297ae29af9b5c8ffcc73e7818fd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:66:ad:f2:19:bd:5a:7c:0a:20:88:cd:a8:
                    9c:3b:5a:2a:85:12:d7:c9:f0:89:66:e9:2e:a5:47:
                    1b:c0:8e:e7:61:d2:b1:19:47:a0:da:13:e7:c7:d0:
                    66:b6:e2:ce:bf:34:d1:10:e1:db:f1:24:1c:90:8e:
                    1f:f8:32:58:ca:9b:c1:83:9a:92:ff:f6:11:e6:6c:
                    f0:27:20:63:a5:e7:28:4c:ce:48:4f:78:d2:9e:64:
                    29:7d:5f:c8:b0:98:44:ef:2a:0b:21:b3:61:80:12:
                    53:fe:cd:76:5c:b1:4a:d9:c6:5b:87:e6:16:ff:0a:
                    05:95:5d:0e:04:e1:5d:86:cf:de:55:8a:69:be:33:
                    3c:e6:33:cf:1f:c9:38:b8:aa:0a:47:8b:c3:0b:53:
                    5c:94:69:cc:92:e7:99:44:12:fa:5f:7a:6a:1f:26:
                    17:df:fc:be:d5:4c:fd:5c:1c:6d:7d:4b:21:94:fc:
                    31:3e:4d:d1:27:60:13:8a:0c:39:1a:1a:06:c6:49:
                    6f:5d:6a:69:47:76:92:db:08:8a:a4:5e:2f:7b:77:
                    b6:5b:bd:4e:4d:e7:2d:a9:47:b9:71:c5:2c:c0:91:
                    07:19:90:ae:08:2e:b8:fe:ae:1f:be:1c:87:ef:cb:
                    c8:ec:5f:f0:eb:48:f3:b4:4d:c3:3c:c3:9a:b4:8b:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:41:2E:54:B2:97:AE:29:AF:9B:5C:8F:FC:C7:3E:78:18:FD:01
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:54:b6:52:47:a2:19:3a:40:3c:04:5c:0a:4b:2c:23:ae:
         b4:3c:62:f3:e1:38:a0:75:f2:58:74:b3:30:56:72:7f:65:3d:
         f0:51:c3:88:c5:d4:6c:b9:c8:89:05:ad:44:21:d8:19:12:05:
         26:a2:44:05:4f:95:40:7a:3d:fc:47:7e:a4:9c:3b:9d:a1:7e:
         ad:3c:92:85:69:cc:95:26:31:24:45:2c:2e:42:b8:96:d0:10:
         d3:4e:83:9e:2c:a5:eb:df:93:0a:8f:76:fa:93:18:2a:2e:c2:
         2c:9a:a3:f4:7a:f6:f5:e0:ce:ae:9b:74:d8:89:19:5a:5c:ed:
         09:2c:6b:32:98:b0:95:3d:ae:34:de:df:4a:77:ae:da:1a:ac:
         3f:10:da:cc:0d:5e:20:f8:c9:53:27:96:57:14:bc:3f:3e:6f:
         1a:3a:26:7b:50:da:5d:b8:74:1b:76:42:9b:f8:10:50:03:53:
         49:a8:a1:36:72:ee:75:c5:5a:86:04:6a:6d:d3:de:48:75:fd:
         b2:66:62:ef:cb:e3:ec:01:0f:45:c9:28:fb:7e:2d:df:1b:60:
         28:a0:76:bc:d3:8b:24:4b:e2:26:86:f3:49:65:29:f2:d9:e4:
         f2:b1:39:bf:66:ab:07:af:63:36:c6:5e:9f:bb:19:a0:fd:17:
         13:54:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:04:05 2026 by rpki-client