Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File:                     _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier:          emSl9kITM3MM/NCvYwixONPyTIqY+KGxNLN6UWitXlw=
Subject key identifier:   35:9E:67:DE:EA:BA:3A:BA:19:98:15:67:A0:91:F0:AD:23:9F:05:B5
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer:       /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial:       019EBA6AB624A413221DF8B17B7D61B58053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number:          1607
Signing time:             Fri 12 Jun 2026 06:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:15 +0000
Files and hashes:         1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: M3syMuUqupb0GxfnDkWUhAuZ/MZLM4JvSZ1SVRCXJME=)
                          2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6a:b6:24:a4:13:22:1d:f8:b1:7b:7d:61:b5:80:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
        Validity
            Not Before: Jun 12 06:00:15 2026 GMT
            Not After : Jun 13 06:00:15 2026 GMT
        Subject: CN=359e67deeaba3aba19981567a091f0ad239f05b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:01:21:03:8f:58:4c:5e:55:a5:df:65:0c:
                    cd:12:da:01:8f:3d:ba:b2:34:66:4b:5f:95:7a:ab:
                    d9:87:9d:f3:55:7b:f4:17:28:2e:96:dd:5b:b1:9a:
                    ba:03:dc:10:9e:a5:fc:70:d8:30:9c:ed:57:a2:a8:
                    e1:ea:1b:b1:2d:49:a9:16:d7:17:65:90:4a:31:95:
                    9f:23:aa:ab:f9:ee:33:5d:e6:cd:2d:1d:98:d4:64:
                    33:66:b7:a8:b2:df:3f:91:3a:25:b3:cd:c8:1e:3e:
                    d6:0b:9f:3d:98:a5:56:29:12:c5:38:d4:37:ac:bf:
                    dd:aa:f3:cf:c9:3a:27:4d:ac:dc:87:72:4f:36:0d:
                    54:03:11:4b:d6:c5:db:20:25:6e:d9:4e:73:2a:81:
                    1c:3f:af:53:68:80:80:7f:1b:4b:1c:5e:f4:ba:08:
                    46:06:0e:8b:5a:05:6a:e6:f7:91:75:2d:e2:41:58:
                    2a:d1:11:e4:b9:91:03:73:86:e6:d7:7a:c7:bd:d0:
                    1b:26:16:ec:a5:ec:85:ba:64:3e:de:47:06:6e:18:
                    2b:1b:a5:66:c7:10:ca:50:39:b5:6c:93:f2:f6:53:
                    a4:68:91:41:ab:75:f4:bc:11:02:ab:79:ee:db:2b:
                    c2:2a:40:d6:de:59:f0:e2:af:f3:b5:49:05:b4:7d:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:67:DE:EA:BA:3A:BA:19:98:15:67:A0:91:F0:AD:23:9F:05:B5
            X509v3 Authority Key Identifier:
                keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:60:01:1a:49:b3:d2:b8:da:51:e9:c5:83:27:37:74:82:d5:
         e5:7d:73:74:85:77:53:59:1a:98:b6:51:b5:94:67:7f:d7:60:
         e6:21:e9:2f:64:da:2f:1f:c7:5e:5d:89:9a:80:ec:6c:5d:9a:
         cd:f4:0d:23:38:d5:22:c8:f0:14:36:ea:af:c9:48:76:05:d0:
         d6:c6:f2:53:24:00:f9:cf:0f:e5:98:cf:d7:05:00:0e:48:9d:
         84:28:94:75:c9:95:74:1b:de:49:46:01:b1:96:c5:ee:f2:39:
         fa:27:81:54:51:56:16:68:93:09:2c:4b:e0:a2:d8:43:d9:b6:
         a3:31:75:76:46:bd:20:93:22:79:cf:bf:53:21:25:b6:33:54:
         3b:aa:cc:41:71:d3:09:e7:ec:12:67:b7:13:6f:9c:55:47:19:
         0c:b6:49:e4:45:d8:be:73:ff:6a:5e:29:6c:9c:07:3b:9e:c6:
         15:43:05:75:43:09:e8:61:c8:b4:c1:da:0e:a2:e6:8c:bf:c1:
         68:85:ac:d8:b8:48:b4:47:70:f2:99:d4:47:70:7e:ea:d5:b7:
         de:af:45:6b:16:a1:6a:eb:49:61:e1:9e:89:ef:31:88:43:21:
         5b:9d:d8:5c:53:a3:16:ec:87:1e:6d:50:1a:d3:4b:b3:6a:93:
         b9:82:30:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66arYkpBMiHfixe31htYBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5
MmZjZTkwHhcNMjYwNjEyMDYwMDE1WhcNMjYwNjEzMDYwMDE1WjAzMTEwLwYDVQQD
EygzNTllNjdkZWVhYmEzYWJhMTk5ODE1NjdhMDkxZjBhZDIzOWYwNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyakBIQOPWExeVaXfZQzNEtoBjz26
sjRmS1+VeqvZh53zVXv0Fygult1bsZq6A9wQnqX8cNgwnO1Xoqjh6huxLUmpFtcX
ZZBKMZWfI6qr+e4zXebNLR2Y1GQzZreost8/kTols83IHj7WC589mKVWKRLFONQ3
rL/dqvPPyTonTazch3JPNg1UAxFL1sXbICVu2U5zKoEcP69TaICAfxtLHF70ughG
Bg6LWgVq5veRdS3iQVgq0RHkuZEDc4bm13rHvdAbJhbspeyFumQ+3kcGbhgrG6Vm
xxDKUDm1bJPy9lOkaJFBq3X0vBECq3nu2yvCKkDW3lnw4q/ztUkFtH1ydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWeZ97qujq6GZgVZ6CR8K0jnwW1MB8GA1UdIwQY
MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt
ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3
LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2ABGkmz
0rjaUenFgyc3dILV5X1zdIV3U1kamLZRtZRnf9dg5iHpL2TaLx/HXl2JmoDsbF2a
zfQNIzjVIsjwFDbqr8lIdgXQ1sbyUyQA+c8P5ZjP1wUADkidhCiUdcmVdBveSUYB
sZbF7vI5+ieBVFFWFmiTCSxL4KLYQ9m2ozF1dka9IJMiec+/UyEltjNUO6rMQXHT
CefsEme3E2+cVUcZDLZJ5EXYvnP/al4pbJwHO57GFUMFdUMJ6GHItMHaDqLmjL/B
aIWs2LhItEdw8pnUR3B+6tW33q9FaxahautJYeGeie8xiEMhW53YXFOjFuyHHm1Q
GtNLs2qTuYIwNQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 15:08:45 2026 by rpki-client