Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File:                     EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier:          N+rD/cOWvTn7Ol4QN19JNSVna+sGX7cJ5ZPVeZUIn20=
Subject key identifier:   33:0B:0D:06:ED:06:07:59:0D:88:71:A6:CC:2D:E9:ED:C6:E6:57:63
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer:       /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial:       019F190CE1F31F131ABEB52E5679E210FBEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number:          1350
Signing time:             Tue 30 Jun 2026 15:01:42 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:42 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:42 +0000
Files and hashes:         1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: nWGOb+RFf5D3XxZnQoxEI3SkLZYcKLQ2bP7EH5d+0Bs=)
                          2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e1:f3:1f:13:1a:be:b5:2e:56:79:e2:10:fb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
        Validity
            Not Before: Jun 30 15:01:42 2026 GMT
            Not After : Jul  1 15:01:42 2026 GMT
        Subject: CN=330b0d06ed0607590d8871a6cc2de9edc6e65763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:4f:b5:21:3c:76:fb:72:b0:07:17:5b:48:
                    6a:ef:d7:cc:af:b5:25:3e:02:91:6c:8d:4b:b3:7e:
                    99:28:b8:59:5e:9a:3e:01:37:75:75:bb:c5:4c:23:
                    f8:b7:78:b9:74:04:73:67:f2:23:d7:6f:1b:fe:06:
                    c1:29:c6:a9:73:6c:3a:d5:91:12:b1:03:99:a6:8e:
                    b8:6d:1c:94:f2:9c:7a:41:cb:05:6e:aa:63:5f:97:
                    2a:a0:7b:e2:f2:c5:ca:c8:f1:82:3a:e4:35:de:44:
                    95:f7:09:3e:97:52:c8:ff:57:02:84:17:67:8b:5d:
                    23:c3:92:16:c0:6a:78:d0:3b:66:82:65:92:0a:19:
                    84:7e:54:37:8f:82:28:5c:86:29:f8:27:b7:67:2d:
                    e7:57:3a:c4:ed:f8:e6:e8:e1:dd:23:a3:a6:43:e2:
                    61:72:8d:87:d8:43:5c:ab:c7:cb:90:22:0f:c1:30:
                    26:d0:e5:4a:c4:3a:3a:c7:9c:06:ec:de:f1:be:6b:
                    19:0d:62:9a:5d:a7:ee:7d:15:18:fc:6c:ec:bd:d4:
                    a2:5c:2a:7b:34:2e:9e:d3:73:00:64:57:b4:5a:cb:
                    58:44:bd:7f:13:36:fa:65:e1:8b:f7:8c:96:49:e2:
                    c6:2a:3e:33:cd:60:83:2c:50:f3:4b:a4:0e:88:00:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0B:0D:06:ED:06:07:59:0D:88:71:A6:CC:2D:E9:ED:C6:E6:57:63
            X509v3 Authority Key Identifier:
                keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:dd:35:fc:98:cb:e4:d1:92:e5:fe:28:ed:32:8a:e0:b3:
         5e:9a:2c:97:87:20:ae:07:d5:81:0d:09:dc:8c:b1:99:69:f8:
         fd:eb:e7:75:aa:45:d1:88:3a:02:d8:f1:80:f8:bf:15:ac:81:
         97:85:08:cd:68:e2:61:86:b1:1e:7a:bf:bc:b0:ed:1d:c6:ea:
         0d:fc:e6:ad:ea:09:ce:51:b1:c9:38:d4:81:76:72:3c:c6:86:
         cb:3c:fd:15:d7:99:a0:e3:3f:34:ee:47:4c:43:0f:d4:8e:ae:
         f5:e1:58:58:ad:d8:d6:f8:e6:9c:22:c0:3b:19:65:96:72:43:
         66:b5:2a:6a:0b:e4:89:90:d0:6f:77:a2:f8:c8:9d:10:fc:39:
         65:87:b7:21:71:e4:6b:2d:fa:1d:1c:04:b2:ae:47:8f:82:c6:
         8f:cd:8e:0d:be:24:36:73:73:a1:04:37:bf:ff:98:66:0a:3b:
         8a:fd:c7:b5:93:c3:2c:06:df:0b:4c:ad:43:76:a5:d5:18:37:
         ad:4e:f9:94:8e:ba:e4:b1:1c:8a:73:83:77:b5:69:d9:f3:6a:
         34:98:38:fe:a8:65:83:1d:6b:f8:ed:be:0a:e4:29:78:50:5f:
         f0:9b:6e:0a:37:f8:5b:50:95:9f:35:9d:c5:56:cd:4b:c2:db:
         97:f1:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:07 2026 by rpki-client