Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          ZlmpKzcpgZf1OCpeiqRm8gJBfE5Z1pIHtooFFp16irA=
Subject key identifier:   44:AC:97:91:19:97:C0:6E:39:81:EC:2C:AD:1C:EA:0A:37:42:98:56
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       019E88D9AE4861E004DD0354988349428AE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          031E
Signing time:             Tue 02 Jun 2026 15:00:27 +0000
Manifest this update:     Tue 02 Jun 2026 15:00:27 +0000
Manifest next update:     Wed 03 Jun 2026 15:00:27 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 8/RU8NvCRPSOUECncH2Zva2+EhuE//K6uO+co8zjMxg=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: n0V-RBhi7tOuMc1ibo0Y80Bk0qw.roa (hash: RzOvebI8Ja0tDDKfejDU+yIZ7pTZTRTQ0O8NlhB8m4M=)
                          6: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:d9:ae:48:61:e0:04:dd:03:54:98:83:49:42:8a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Jun  2 15:00:27 2026 GMT
            Not After : Jun  3 15:00:27 2026 GMT
        Subject: CN=44ac97911997c06e3981ec2cad1cea0a37429856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:9a:43:9a:59:52:85:76:9c:21:9e:0f:06:
                    bd:49:d7:5f:88:f6:a9:ce:dd:0f:59:df:40:0f:93:
                    07:d6:0b:ed:ab:70:7e:cc:fd:82:f2:7e:09:af:c3:
                    13:6d:f1:aa:ca:d1:4b:37:84:d8:1c:21:de:4a:6e:
                    bc:46:a5:0a:c6:a4:85:02:4f:e8:11:75:2c:a5:7b:
                    14:3a:f4:07:51:c7:98:d5:26:a3:bb:f3:ba:43:28:
                    d4:0b:79:68:b2:b1:85:9f:96:b9:cf:55:ad:e6:aa:
                    10:92:6a:f4:67:6b:58:15:39:53:e3:90:72:cc:c5:
                    98:ec:20:bb:5a:7f:94:09:20:f7:b2:4d:e8:60:88:
                    5a:b2:bf:ef:f1:c9:a1:fc:f0:39:b2:2a:36:30:d6:
                    eb:ac:aa:82:1b:7b:5d:6d:17:38:b7:cb:0c:00:0c:
                    23:aa:10:4d:dc:79:0a:2b:57:0a:85:8e:55:bb:4c:
                    98:10:43:e2:b2:1b:d8:9f:29:88:89:8d:89:7b:8d:
                    7e:bf:db:a2:ed:8b:b5:52:2e:36:65:10:8e:c6:25:
                    ab:39:3e:4a:aa:e2:f9:2b:87:dd:6d:bb:af:5c:31:
                    f5:d6:fa:23:6e:c2:5c:99:80:e2:e6:e1:11:af:78:
                    b3:3d:9b:b2:f0:d3:3a:c5:f0:a4:a0:14:31:cb:69:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AC:97:91:19:97:C0:6E:39:81:EC:2C:AD:1C:EA:0A:37:42:98:56
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:bc:17:5b:a0:4b:23:1f:e3:fa:6a:96:d5:a4:a6:4f:6e:
         3c:76:ad:17:51:e3:fd:20:99:c2:60:86:6e:46:96:5d:38:d9:
         a4:a9:a8:7c:04:e4:5d:23:d0:e5:d1:cf:00:f9:02:81:d8:de:
         e7:63:33:b1:87:c9:56:5b:fb:a8:0e:f2:f1:33:7c:80:a9:1c:
         ba:85:c6:33:9b:a0:27:af:4d:4e:70:5b:de:c5:27:5e:f3:98:
         7a:c0:26:ca:63:35:d2:c5:83:a6:27:ae:6f:7c:cd:22:2c:9a:
         34:63:61:c3:77:86:32:52:23:18:88:19:a2:13:8b:d7:21:bf:
         6c:5b:2e:3f:88:89:fb:a6:d3:9f:9b:3e:31:6e:27:0e:b8:c2:
         fe:29:8a:ac:50:13:f2:a8:85:7c:b1:3e:c2:9b:66:60:6b:ae:
         38:0e:b7:e7:49:d4:82:c0:bb:75:ec:f6:6e:f9:c0:36:78:66:
         93:83:4b:20:6a:f5:7f:9d:e2:d8:46:96:e7:aa:cf:94:1f:57:
         61:64:29:2f:7e:1c:f9:13:8c:f4:5c:aa:0b:10:f7:47:94:7d:
         ae:e8:3d:2d:d6:ca:98:1b:f0:c8:1a:57:96:76:4e:e7:63:eb:
         19:86:d9:8a:cf:20:31:8e:dd:c8:06:72:23:60:cf:ef:39:6d:
         fd:32:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:36 2026 by rpki-client