Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          ozC2C0Lpvw15Mx9PdZHYLXUGb67z5Fzjnz93kImFXA4=
Subject key identifier:   64:57:AF:69:57:5A:B9:4D:4D:19:F6:AB:52:5A:BA:D5:82:E6:CA:E8
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019EB80E7B61DA126CEA9EC93A43F7E3476B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          1976
Signing time:             Thu 11 Jun 2026 19:00:17 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:17 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:17 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: o0b/Xyu6fzwBKbJn8BQs7K2Vvp7B3L9L05c+hktweSU=)
                          3: J7GPCuP-10SpSyVCFlPlKa7j_TQ.roa (hash: C/Bmm1uex1v5gT0sTjxxNFMaiLu5ZTn+YiphEqVg8Ag=)
                          4: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          5: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:7b:61:da:12:6c:ea:9e:c9:3a:43:f7:e3:47:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jun 11 19:00:17 2026 GMT
            Not After : Jun 12 19:00:17 2026 GMT
        Subject: CN=6457af69575ab94d4d19f6ab525abad582e6cae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:7e:31:b5:c9:12:6f:98:85:70:db:3a:7d:
                    44:ef:42:e0:e8:df:db:40:32:7a:a4:23:2e:2a:76:
                    cf:ac:67:86:b9:92:58:1c:8a:c1:7d:52:95:37:02:
                    4d:9a:63:0d:9c:6a:36:7e:74:84:5b:18:84:f8:7a:
                    00:dc:cb:bb:10:ba:76:d5:08:76:f5:40:3d:a3:2e:
                    80:48:3b:0d:0d:cf:88:68:6a:45:c6:b6:e4:35:f5:
                    13:e9:bc:bc:2a:aa:eb:f6:34:a1:b3:a9:10:39:ae:
                    82:4a:49:7b:ca:4e:fc:98:24:47:c5:bb:81:1f:eb:
                    b5:7c:2d:fa:df:84:ed:6c:99:ba:d2:4b:19:8d:c0:
                    ea:c4:60:33:d9:f0:19:4b:60:f8:02:95:c6:f2:53:
                    13:67:71:6c:b3:11:7f:09:d8:a8:17:2d:d6:58:9a:
                    b5:fb:8b:96:1c:c3:cf:d1:f5:af:38:e6:c2:67:39:
                    bc:b4:a9:9d:5a:65:86:db:5f:7c:1e:c3:89:71:e5:
                    8a:92:13:02:70:30:87:1a:fa:d2:44:24:44:ed:49:
                    b0:6e:01:2c:6f:93:9e:92:5f:96:2a:aa:2e:bb:fc:
                    44:b9:a0:42:8a:f3:e6:8a:f6:28:b5:a3:4f:20:e4:
                    aa:bd:cb:c2:e6:de:c0:49:a4:e0:03:a2:a9:d6:09:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:57:AF:69:57:5A:B9:4D:4D:19:F6:AB:52:5A:BA:D5:82:E6:CA:E8
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:3c:8b:24:1f:19:55:46:11:15:62:18:f5:22:cc:9f:9a:
         25:38:2e:4e:59:c7:b4:26:8b:c8:47:12:5d:d0:57:c4:ef:f1:
         36:73:56:4c:9b:5b:3a:91:53:c1:70:e5:fc:63:cc:2f:4f:dd:
         d3:f6:de:e9:10:3d:2b:9c:6a:3f:73:c9:6d:99:ac:d7:06:d9:
         11:3c:89:36:1b:a1:4f:42:72:c9:cb:05:06:4b:22:e3:92:ad:
         7f:ce:4c:1a:2f:09:7d:3c:42:dd:f6:10:5f:07:95:a5:1a:73:
         6b:06:37:8c:e6:23:03:d0:08:c3:aa:08:53:56:ed:0f:8e:86:
         15:c3:2e:5d:3d:0d:e5:8b:6c:cc:b9:a2:eb:06:40:36:18:ef:
         1f:da:a3:90:59:f2:ef:64:fe:6d:4f:18:7c:9a:a8:f0:81:b3:
         4a:c5:7b:57:71:08:5b:c1:bc:c7:e5:cd:5f:3b:97:b6:87:de:
         3b:00:bc:b0:f6:25:72:ff:2d:ab:eb:a7:2c:6f:4d:22:fa:3f:
         07:be:86:76:0e:65:b9:be:52:22:9a:71:42:38:15:27:b6:59:
         cc:72:45:cb:f8:c8:56:f8:a9:e5:49:03:80:90:16:bc:a2:8f:
         90:3d:b3:b1:2e:29:02:69:37:06:b2:c1:33:2d:88:be:cc:29:
         55:9b:92:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64Dnth2hJs6p7JOkP340drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjYwNjExMTkwMDE3WhcNMjYwNjEyMTkwMDE3WjAzMTEwLwYDVQQD
Eyg2NDU3YWY2OTU3NWFiOTRkNGQxOWY2YWI1MjVhYmFkNTgyZTZjYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAB+MbXJEm+YhXDbOn1E70Lg6N/b
QDJ6pCMuKnbPrGeGuZJYHIrBfVKVNwJNmmMNnGo2fnSEWxiE+HoA3Mu7ELp21Qh2
9UA9oy6ASDsNDc+IaGpFxrbkNfUT6by8Kqrr9jShs6kQOa6CSkl7yk78mCRHxbuB
H+u1fC3634TtbJm60ksZjcDqxGAz2fAZS2D4ApXG8lMTZ3FssxF/CdioFy3WWJq1
+4uWHMPP0fWvOObCZzm8tKmdWmWG2198HsOJceWKkhMCcDCHGvrSRCRE7UmwbgEs
b5Oekl+WKqouu/xEuaBCivPmivYotaNPIOSqvcvC5t7ASaTgA6Kp1gnwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRXr2lXWrlNTRn2q1JautWC5sroMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2U8iyQf
GVVGERViGPUizJ+aJTguTlnHtCaLyEcSXdBXxO/xNnNWTJtbOpFTwXDl/GPML0/d
0/be6RA9K5xqP3PJbZms1wbZETyJNhuhT0JyycsFBksi45Ktf85MGi8JfTxC3fYQ
XweVpRpzawY3jOYjA9AIw6oIU1btD46GFcMuXT0N5YtszLmi6wZANhjvH9qjkFny
72T+bU8YfJqo8IGzSsV7V3EIW8G8x+XNXzuXtofeOwC8sPYlcv8tq+unLG9NIvo/
B76Gdg5lub5SIppxQjgVJ7ZZzHJFy/jIVvip5UkDgJAWvKKPkD2zsS4pAmk3BrLB
My2IvswpVZuSig==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:00 2026 by rpki-client