Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
File:                     E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json)
Hash identifier:          +fEam7L/eMoMYAKoGYfVTgBD84iJTQhNomxCeft+Ev4=
Subject key identifier:   73:6D:06:09:4A:AC:70:97:4B:12:5F:DA:EF:A4:23:E7:4F:B1:C1:51
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Certificate issuer:       /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial:       019EB5E9840C5BC77906261DCD05CCBE23E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
Manifest number:          0AEB
Signing time:             Thu 11 Jun 2026 09:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:40 +0000
Files and hashes:         1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: ftqoc6wVB9dRWhscCQwk0jGdrnsXhb7SFyiB9Qds4H4=)
                          2: ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa (hash: xavsN1HJdLi+aPkdFObLI236THGttyRtSD4R0FVRKWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:84:0c:5b:c7:79:06:26:1d:cd:05:cc:be:23:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
        Validity
            Not Before: Jun 11 09:00:40 2026 GMT
            Not After : Jun 12 09:00:40 2026 GMT
        Subject: CN=736d06094aac70974b125fdaefa423e74fb1c151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:72:f3:99:a1:1c:87:21:2c:92:3f:fc:fc:
                    6e:d7:2c:85:7f:38:6c:03:37:c8:c3:05:20:77:d1:
                    32:3d:2a:3e:3e:d7:60:2d:a0:03:5b:37:ef:48:b4:
                    48:a2:1b:45:e0:5a:50:4c:19:b8:4c:ff:24:e8:75:
                    fa:2c:0d:72:8f:24:82:eb:20:f6:6d:b5:b2:e8:73:
                    55:65:6d:3f:12:0f:1a:7d:51:b8:29:a3:7f:40:d1:
                    bc:90:16:8a:88:ed:61:87:4e:1d:5c:ec:a0:d7:7f:
                    21:af:0a:60:b0:7b:1c:f9:e2:ae:15:b5:93:80:91:
                    cc:42:12:1b:0b:55:dd:cb:40:52:aa:3d:09:59:cd:
                    83:7c:c7:78:00:45:9c:f9:79:ea:ea:1d:ef:14:ab:
                    bd:e9:86:be:be:09:69:e0:db:ab:68:29:35:b2:3a:
                    68:e4:72:58:50:93:44:68:e8:c0:c2:5d:26:94:4b:
                    8b:e8:9b:ad:bd:b4:a8:a1:ad:9f:e9:f7:ca:88:2b:
                    38:4c:66:08:4b:6b:28:1b:7c:e3:b5:93:37:35:c8:
                    e0:50:47:5a:2e:df:fd:db:9f:2f:7f:ae:d1:c2:d8:
                    14:d6:76:1b:b8:ca:70:6f:f5:63:43:08:a4:ec:bd:
                    7f:d3:60:d4:9a:5c:5d:00:79:84:04:c9:40:f1:40:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:06:09:4A:AC:70:97:4B:12:5F:DA:EF:A4:23:E7:4F:B1:C1:51
            X509v3 Authority Key Identifier:
                keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:fc:f5:1b:50:df:a0:ac:7c:a8:c9:db:89:b3:70:c2:df:
         a6:78:4a:f3:98:30:6d:12:c3:2e:c6:64:f8:9e:92:89:e8:9d:
         db:13:75:97:df:7f:f6:3c:cb:2f:dc:ec:9d:02:dc:96:03:76:
         93:cd:02:3b:c9:3f:ff:3b:2c:7b:1a:b4:c4:79:eb:b2:b3:44:
         10:7f:7b:68:65:0d:2a:fc:9c:8d:b2:53:2e:49:00:f5:86:90:
         5d:de:a0:c6:78:fc:54:33:fc:0a:0b:46:90:48:02:18:a0:ac:
         fb:41:03:13:6a:60:c1:14:b8:aa:d9:8a:9e:28:1b:f2:6b:7a:
         40:62:50:dd:72:3c:b3:92:43:f1:70:31:2e:e1:8e:cf:ee:3e:
         38:5b:8a:9d:23:41:79:14:1a:87:d9:80:fa:ca:54:d4:b4:07:
         d5:78:e2:1e:4a:e8:9d:46:4f:bf:fa:40:35:ac:1f:fd:59:d1:
         2b:6b:0c:85:ff:b9:e0:d2:0c:31:f7:f1:41:7d:d2:88:80:2c:
         07:6c:24:ce:83:4d:ff:0c:8e:c4:52:dd:04:3b:db:fd:e6:cd:
         46:2f:a2:6b:f5:fd:17:bf:e0:cd:10:7f:c0:3f:43:11:76:19:
         4e:e5:cb:59:6e:7c:f0:b1:9d:66:5d:62:c7:66:0b:da:fc:95:
         61:30:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:07:56 2026 by rpki-client