Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          0G6i03dTwxEu6Y9GTYLmTqWUwV1G15PK8kM6rda7zR0=
Subject key identifier:   D7:A5:E2:80:77:64:47:16:E3:AC:3B:0C:EC:09:91:1E:3A:C3:D2:C0
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       019E2F970A023186BA30AD233599BB0F52C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0EC5
Signing time:             Sat 16 May 2026 07:01:28 +0000
Manifest this update:     Sat 16 May 2026 07:01:28 +0000
Manifest next update:     Sun 17 May 2026 07:01:28 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: mP9OEJ3k9OBvbZeNBFBIITqZwYfbP9Q7Y0srQR+tiao=)
                          2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:0a:02:31:86:ba:30:ad:23:35:99:bb:0f:52:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: May 16 07:01:28 2026 GMT
            Not After : May 17 07:01:28 2026 GMT
        Subject: CN=d7a5e28077644716e3ac3b0cec09911e3ac3d2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:4b:f2:ff:c2:05:52:96:b4:19:b8:8d:3b:
                    b3:2b:3c:41:28:e6:20:4f:00:b5:64:61:33:9f:24:
                    f8:d5:77:34:d7:2e:89:2f:c9:a2:b2:b9:62:ac:fa:
                    f1:28:98:c8:bd:cd:0a:07:f4:c0:46:83:c2:ec:b4:
                    73:3a:68:ed:64:fa:a7:4d:a0:58:0f:8d:94:10:03:
                    a9:53:3c:bf:3e:24:52:b1:b0:06:df:2b:99:00:23:
                    13:7b:07:e0:3c:c8:d8:cd:a1:6a:1d:f7:60:45:b2:
                    c5:06:83:d7:8d:f8:55:60:bc:c5:2c:f7:72:94:1e:
                    55:84:69:cd:87:e6:81:67:9c:12:c1:26:94:31:e9:
                    c2:8b:c5:81:e9:df:3e:b0:a1:8e:a3:7e:de:96:31:
                    d6:b0:59:db:2a:94:41:a1:2c:96:d1:f2:7e:de:21:
                    fb:94:d2:b9:34:c5:b7:58:56:30:31:b3:f8:31:a4:
                    17:6b:e1:3a:cc:c9:7a:fa:ab:19:2d:c8:42:12:a7:
                    f7:90:10:62:8c:a5:33:6c:5a:db:d0:1d:8b:d2:78:
                    ee:4f:82:15:1c:55:e4:fc:f8:4e:e3:b9:ae:33:ac:
                    c5:71:40:17:c3:7a:ff:44:6d:df:07:da:c5:40:88:
                    45:99:7d:71:a6:e5:6f:68:d1:ba:ea:88:c5:40:be:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:E2:80:77:64:47:16:E3:AC:3B:0C:EC:09:91:1E:3A:C3:D2:C0
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:23:39:72:4a:2f:bb:a7:40:b9:14:35:8a:af:c2:a3:fa:d2:
         f4:e4:3b:4a:7e:0e:00:fa:ba:ca:77:cf:74:b9:bb:e2:ec:24:
         ff:96:da:36:94:62:68:d5:13:e0:1a:a3:d9:23:84:14:57:70:
         05:1b:bf:d6:a8:88:be:01:d6:58:36:73:7d:d1:eb:d9:16:16:
         ea:7b:a0:76:81:a1:a6:4e:e6:ad:51:6b:a5:f2:41:b2:20:e4:
         cc:00:59:e4:c1:67:b4:0d:50:ee:2e:ac:aa:15:42:fa:d3:aa:
         30:dc:ac:1f:ea:19:b5:75:c0:1a:26:d1:76:65:06:81:0b:2b:
         58:4a:f3:79:eb:9e:03:de:d5:a4:24:6e:bf:bd:99:3d:2c:27:
         3e:19:06:cf:d1:b9:4e:05:f9:62:db:56:e7:06:b7:7b:8b:7e:
         52:17:43:96:70:f3:04:68:71:a4:30:f5:cd:57:a0:24:75:cc:
         05:2f:8a:aa:38:22:b5:ea:f5:b9:44:82:84:5f:99:18:28:34:
         ff:53:a9:fc:e2:cd:2f:37:89:8d:f0:da:c7:ac:f6:ce:f9:78:
         0c:2f:be:db:94:74:28:44:cc:bd:fb:51:77:57:a9:39:a4:15:
         a6:e7:a6:c2:94:f4:c0:5e:e6:96:d6:1d:ab:25:6e:2c:27:e2:
         e8:d3:6c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:15 2026 by rpki-client