Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          QqKhQ6Va/2w91U1pJ2huYIemZBXNv5BL2mmYKkzSp8A=
Subject key identifier:   B3:73:B8:27:14:89:79:EB:3F:D0:6F:BE:88:63:CD:D9:AE:7C:A3:FB
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019EBAA29E50D58DCDBC258D3CF5100B344A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          15A1
Signing time:             Fri 12 Jun 2026 07:01:19 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:19 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:19 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: BtfPHk5sptRzdsl1iIpdAX05NAFU7u6cn6fDqCt/piU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:9e:50:d5:8d:cd:bc:25:8d:3c:f5:10:0b:34:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Jun 12 07:01:19 2026 GMT
            Not After : Jun 13 07:01:19 2026 GMT
        Subject: CN=b373b827148979eb3fd06fbe8863cdd9ae7ca3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:b9:0d:d4:88:ea:23:62:ae:f1:e3:62:e2:
                    54:9c:6f:ca:20:7a:b3:38:ee:7f:98:d0:47:72:71:
                    79:f0:f9:5b:7f:43:ec:bb:94:60:4f:ee:d3:72:1d:
                    02:1e:53:9b:89:d5:75:46:de:1d:c0:21:5d:64:b0:
                    53:43:b3:9a:3f:4a:3e:ee:45:33:19:c3:d5:49:8b:
                    21:f0:28:e4:3a:35:f0:a0:b5:d3:72:ee:50:7b:d3:
                    87:af:12:82:da:bc:0d:26:b0:48:3a:e0:67:65:98:
                    65:bb:63:75:52:31:e3:83:d9:bc:50:94:be:ca:a8:
                    fd:4e:b3:a5:bb:e6:d5:a5:ee:76:e4:a5:65:fb:c4:
                    68:3a:a2:46:db:83:6e:f9:73:d0:53:42:b8:20:74:
                    2f:e3:64:58:9e:d1:a3:73:e6:80:da:87:e1:63:90:
                    d0:aa:6a:53:1e:e9:5a:a8:90:fc:f4:e9:53:9d:05:
                    9d:27:57:9c:f7:aa:5b:f7:6b:a7:4c:4a:07:2c:30:
                    5d:cd:7e:e6:12:25:b3:9b:e7:9a:f0:1f:5c:62:6a:
                    9e:88:1a:bd:ec:20:11:92:61:21:be:cb:e3:9d:4e:
                    b0:6a:ed:b7:25:8a:9c:99:cf:23:18:cf:91:20:d0:
                    ad:89:25:4f:01:a8:c0:0b:38:dd:4c:a6:64:27:ea:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:73:B8:27:14:89:79:EB:3F:D0:6F:BE:88:63:CD:D9:AE:7C:A3:FB
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:25:2b:80:1a:9c:53:ee:1c:f6:58:e0:51:ba:e7:0a:5d:cd:
         ce:04:09:b9:3e:78:46:1f:df:a1:db:28:92:03:c4:da:7e:62:
         74:38:e2:14:ea:b5:9c:35:d7:ea:2f:b1:07:5c:da:48:ff:cf:
         a2:41:d1:44:77:ac:67:96:a3:a8:1a:e7:cc:f6:60:d4:ff:32:
         cf:c3:81:ec:ab:b7:0a:82:83:ea:bf:53:50:6c:a1:32:61:98:
         1c:7f:3c:ad:f1:8a:f5:42:65:23:a8:eb:85:53:56:be:14:5a:
         44:79:30:59:21:a4:f9:41:35:28:ef:da:9d:29:13:c8:02:ef:
         98:2f:3a:9c:7c:7a:43:ef:82:e5:3f:42:e3:61:8a:f5:20:2e:
         25:dc:c9:9f:82:83:02:c3:9f:41:94:97:65:b8:a0:fa:5e:0d:
         f2:6c:2e:74:bb:e7:33:24:c9:ce:3e:8e:9f:a6:25:ac:e3:f7:
         fa:07:84:54:50:77:6a:27:37:f8:c1:45:37:4c:b9:ba:9f:48:
         f0:6d:a7:5e:2a:f0:b1:9f:8a:b2:a1:5b:06:0f:11:27:b5:fb:
         62:43:d0:c2:f0:52:75:02:d6:a5:f6:fd:35:da:56:01:7c:b3:
         65:1d:ac:9a:61:ad:02:31:9a:32:14:87:25:b1:86:44:e3:91:
         57:05:f9:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66op5Q1Y3NvCWNPPUQCzRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx
MTdjZDIwHhcNMjYwNjEyMDcwMTE5WhcNMjYwNjEzMDcwMTE5WjAzMTEwLwYDVQQD
EyhiMzczYjgyNzE0ODk3OWViM2ZkMDZmYmU4ODYzY2RkOWFlN2NhM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGG5DdSI6iNirvHjYuJUnG/KIHqz
OO5/mNBHcnF58Plbf0Psu5RgT+7Tch0CHlObidV1Rt4dwCFdZLBTQ7OaP0o+7kUz
GcPVSYsh8CjkOjXwoLXTcu5Qe9OHrxKC2rwNJrBIOuBnZZhlu2N1UjHjg9m8UJS+
yqj9TrOlu+bVpe525KVl+8RoOqJG24Nu+XPQU0K4IHQv42RYntGjc+aA2ofhY5DQ
qmpTHulaqJD89OlTnQWdJ1ec96pb92unTEoHLDBdzX7mEiWzm+ea8B9cYmqeiBq9
7CARkmEhvsvjnU6wau23JYqcmc8jGM+RINCtiSVPAajACzjdTKZkJ+oWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNzuCcUiXnrP9BvvohjzdmufKP7MB8GA1UdIwQY
MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt
ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi
LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyUrgBqc
U+4c9ljgUbrnCl3NzgQJuT54Rh/fodsokgPE2n5idDjiFOq1nDXX6i+xB1zaSP/P
okHRRHesZ5ajqBrnzPZg1P8yz8OB7Ku3CoKD6r9TUGyhMmGYHH88rfGK9UJlI6jr
hVNWvhRaRHkwWSGk+UE1KO/anSkTyALvmC86nHx6Q++C5T9C42GK9SAuJdzJn4KD
AsOfQZSXZbig+l4N8mwudLvnMyTJzj6On6YlrOP3+geEVFB3aic3+MFFN0y5up9I
8G2nXirwsZ+KsqFbBg8RJ7X7YkPQwvBSdQLWpfb9NdpWAXyzZR2smmGtAjGaMhSH
JbGGROORVwX5+g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:04 2026 by rpki-client