Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
File:                     eodGp2zag2kAnSiUHvFWI5xqY6E.mft (raw, json)
Hash identifier:          ubiIC15e6FeQpBS/3DzUlkYWXMq2piU+5+m91wloCak=
Subject key identifier:   C5:11:AB:65:AC:3D:6D:2C:71:BC:D5:4F:0B:C0:4B:22:B5:28:6F:63
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Certificate issuer:       /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial:       019EB7D7A780A996E93216AA26B9C3190A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
Manifest number:          1854
Signing time:             Thu 11 Jun 2026 18:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:24 +0000
Files and hashes:         1: J6M4EozHrDG4fvaLTmVZa-mH5dc.roa (hash: AoAnoiGlXHm5QrZ2JxJnXRitP0xkX4DDwK3G8CYg8BA=)
                          2: eodGp2zag2kAnSiUHvFWI5xqY6E.crl (hash: 7E0TJFVuZXU1D6uaAfZCvvIEGRClF/pEk23o5DieS00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:a7:80:a9:96:e9:32:16:aa:26:b9:c3:19:0a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
        Validity
            Not Before: Jun 11 18:00:24 2026 GMT
            Not After : Jun 12 18:00:24 2026 GMT
        Subject: CN=c511ab65ac3d6d2c71bcd54f0bc04b22b5286f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:fb:9b:e9:de:e2:4a:e6:d5:b1:06:c0:93:
                    20:1a:66:6f:fc:58:19:a5:18:8e:db:30:cb:a5:d1:
                    c6:1e:72:66:0f:64:15:81:b1:49:94:4a:c1:0c:9e:
                    c7:85:78:4f:c8:38:84:43:20:99:f1:2c:6c:93:b6:
                    8b:9b:cb:7d:b7:b7:fe:a1:4b:25:1d:55:c0:bb:83:
                    f8:76:83:91:9d:f4:94:ff:a3:b3:c4:14:a5:18:01:
                    0a:27:0d:f4:ee:6a:a6:ae:cb:f1:c5:36:0e:3b:43:
                    16:a1:c0:4f:9c:c1:ae:74:85:40:23:32:ea:c1:6d:
                    2c:70:61:43:4d:5e:c7:0d:ea:67:51:37:73:91:b9:
                    7a:03:36:fb:4f:18:39:58:09:1c:73:61:4f:be:4f:
                    91:8e:66:2e:5e:fb:8e:f0:86:cd:f0:6a:ef:5a:25:
                    a2:8c:90:89:9e:fc:43:44:55:a0:22:fb:d6:6f:bf:
                    be:b6:b8:85:70:08:a1:27:35:62:25:92:ee:6c:92:
                    50:8e:e0:6a:49:ba:d5:37:c1:aa:e6:29:f5:c5:29:
                    0a:84:b1:37:e5:4e:44:e5:d4:06:38:6e:b3:a5:cd:
                    31:30:a0:e3:4b:2a:2f:07:87:a4:c1:d2:6e:dc:50:
                    39:51:08:68:ef:ca:50:0c:e7:48:47:cd:93:5c:a6:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:AB:65:AC:3D:6D:2C:71:BC:D5:4F:0B:C0:4B:22:B5:28:6F:63
            X509v3 Authority Key Identifier:
                keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bb:db:2d:21:b4:6f:10:e7:7c:89:1a:2f:91:5b:de:21:e7:
         57:7d:b6:22:22:24:f8:b2:97:89:0b:3d:93:11:74:fb:96:c7:
         86:75:01:ab:02:8c:10:32:a5:28:2c:86:d5:9a:91:e8:46:e0:
         d4:70:e7:81:aa:63:78:f2:a3:9c:87:4f:62:2d:93:61:c4:fc:
         dd:92:01:9e:6b:c4:f8:29:8b:c3:79:ff:a5:92:ef:b5:2c:a3:
         7f:9b:97:77:e4:bc:a0:13:58:fe:5e:c7:39:63:5d:e0:7c:a0:
         75:bc:fc:c6:18:40:1b:55:ac:f8:44:51:33:47:7c:df:14:5e:
         0a:92:3a:84:e2:6d:d7:6b:a5:5f:7a:53:1b:dc:17:ba:9b:61:
         1a:98:31:c4:5e:8b:24:20:c5:7f:d7:2d:0b:16:c8:d4:a2:f3:
         7a:a2:41:42:6d:7d:cf:0e:df:1c:a1:04:3d:7f:ca:01:a7:e5:
         9d:79:32:70:79:d2:be:8e:79:26:ab:d8:6b:59:bc:2d:12:02:
         06:bf:d5:d0:f8:aa:67:8d:d6:6f:5b:8f:d3:81:16:e6:7f:ab:
         0a:e9:15:2d:45:25:f5:b5:5e:6d:d8:eb:7a:9b:86:ba:de:91:
         1c:cd:1d:30:74:1d:de:33:5a:2f:e0:54:b4:a2:17:56:cf:93:
         7c:29:36:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6316eAqZbpMhaqJrnDGQqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODc0NmE3NmNkYTgzNjkwMDlkMjg5NDFlZjE1NjIzOWM2
YTYzYTEwHhcNMjYwNjExMTgwMDI0WhcNMjYwNjEyMTgwMDI0WjAzMTEwLwYDVQQD
EyhjNTExYWI2NWFjM2Q2ZDJjNzFiY2Q1NGYwYmMwNGIyMmI1Mjg2ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHf7m+ne4krm1bEGwJMgGmZv/FgZ
pRiO2zDLpdHGHnJmD2QVgbFJlErBDJ7HhXhPyDiEQyCZ8Sxsk7aLm8t9t7f+oUsl
HVXAu4P4doORnfSU/6OzxBSlGAEKJw307mqmrsvxxTYOO0MWocBPnMGudIVAIzLq
wW0scGFDTV7HDepnUTdzkbl6Azb7Txg5WAkcc2FPvk+RjmYuXvuO8IbN8GrvWiWi
jJCJnvxDRFWgIvvWb7++triFcAihJzViJZLubJJQjuBqSbrVN8Gq5in1xSkKhLE3
5U5E5dQGOG6zpc0xMKDjSyovB4ekwdJu3FA5UQho78pQDOdIR82TXKbuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMURq2WsPW0scbzVTwvASyK1KG9jMB8GA1UdIwQY
MBaAFHqHRqds2oNpAJ0olB7xViOcamOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMt
NTJkZWRkZGVlMzkzLzEvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85MTNlMTItZjVlZC00NmY0LTk4MmMtNTJkZWRkZGVlMzkz
LzEvZW9kR3AyemFnMmtBblNpVUh2RldJNXhxWTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbvbLSG0
bxDnfIkaL5Fb3iHnV322IiIk+LKXiQs9kxF0+5bHhnUBqwKMEDKlKCyG1ZqR6Ebg
1HDngapjePKjnIdPYi2TYcT83ZIBnmvE+CmLw3n/pZLvtSyjf5uXd+S8oBNY/l7H
OWNd4Hygdbz8xhhAG1Ws+ERRM0d83xReCpI6hOJt12ulX3pTG9wXupthGpgxxF6L
JCDFf9ctCxbI1KLzeqJBQm19zw7fHKEEPX/KAaflnXkycHnSvo55JqvYa1m8LRIC
Br/V0PiqZ43Wb1uP04EW5n+rCukVLUUl9bVebdjrepuGut6RHM0dMHQd3jNaL+BU
tKIXVs+TfCk2ng==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:16 2026 by rpki-client