Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File:                     eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier:          /ZJ88/9OyU2tqUq9wFfoBP1OAjBlcajipEEMtVxYK/Q=
Subject key identifier:   2E:D9:E3:31:62:71:BC:29:AF:1E:9E:BF:EC:ED:78:A7:7A:5E:3B:9B
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer:       /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial:       019E31BBA759F1CC6A945535EF2FDCBBB039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number:          0B6E
Signing time:             Sat 16 May 2026 17:00:42 +0000
Manifest this update:     Sat 16 May 2026 17:00:42 +0000
Manifest next update:     Sun 17 May 2026 17:00:42 +0000
Files and hashes:         1: OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa (hash: XCOdkvew4k3OnvrnXuLCOWZ3jOmwLtq3F1NbKBNNtwQ=)
                          2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: 2dw2YbOy9TxC4LLESMgoVnU9u7VaKXvxj4iam1BJazQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:a7:59:f1:cc:6a:94:55:35:ef:2f:dc:bb:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
        Validity
            Not Before: May 16 17:00:42 2026 GMT
            Not After : May 17 17:00:42 2026 GMT
        Subject: CN=2ed9e3316271bc29af1e9ebfeced78a77a5e3b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:e3:f9:ac:57:5d:82:d4:09:ce:1d:70:e0:
                    b6:5d:e5:b5:74:64:2a:62:7b:b1:ac:26:bd:d1:33:
                    e9:16:d1:79:fc:b9:6d:7c:cb:a7:40:67:ce:f1:11:
                    25:ec:a5:da:81:c6:6d:4b:73:d2:bf:52:6f:23:c5:
                    4a:f5:dd:ab:68:55:36:d7:ea:87:fa:f1:38:f9:94:
                    d4:9c:f4:e0:18:16:5a:f1:70:10:d1:dd:41:b5:f4:
                    91:1d:d1:30:e8:12:d3:d0:f4:86:e3:9d:f7:6a:c8:
                    26:3a:36:16:67:3d:73:71:33:76:a4:06:a9:01:02:
                    1d:5e:43:2b:34:1b:8d:c5:ef:f6:d5:27:3a:a7:c2:
                    b2:31:08:23:69:23:3d:da:8f:88:46:2d:32:37:95:
                    a1:ff:49:2e:f7:17:07:70:bb:08:31:a7:e1:23:3c:
                    52:79:90:15:b6:24:ae:37:ae:a5:08:ea:4d:c9:37:
                    47:cd:49:e0:5f:29:7b:a9:a6:84:3f:82:2b:f7:27:
                    32:f1:df:f6:a9:d7:b6:ab:00:94:44:56:08:fd:3d:
                    8d:d5:82:1b:dc:70:60:72:98:8b:d6:de:cd:9b:bb:
                    d4:82:83:91:60:74:96:cf:7b:d1:50:62:cc:49:72:
                    9a:65:2d:75:65:03:a5:fa:65:19:15:7f:f7:41:f8:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:E3:31:62:71:BC:29:AF:1E:9E:BF:EC:ED:78:A7:7A:5E:3B:9B
            X509v3 Authority Key Identifier:
                keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:06:c4:57:1d:ba:c5:f4:29:c9:f5:5a:7c:83:15:c7:90:1b:
         f2:45:30:81:7c:5c:e0:69:9f:8b:64:1d:09:33:fb:3f:38:7e:
         3b:64:0d:74:03:c7:c3:4b:39:18:f1:cf:5b:44:d4:7b:ec:38:
         63:ca:5c:ed:df:d0:02:1d:72:60:86:46:3f:58:22:c6:63:1b:
         32:ac:e7:31:ad:0b:93:53:af:1b:80:39:d5:d2:8b:f8:04:ec:
         f0:d9:29:ad:4d:33:d3:c5:17:9d:7f:a9:dd:56:d4:c2:0c:3f:
         44:07:58:20:5b:b1:20:7e:c5:a7:07:8f:33:89:7d:57:3a:c2:
         6e:de:4c:c8:58:16:96:0d:b6:7f:20:43:79:30:89:ef:06:cb:
         41:c3:40:24:0e:27:f6:92:0a:38:70:b1:e3:13:f6:3a:6c:8c:
         44:57:ca:1a:47:66:c2:e9:0a:2f:f2:00:07:9c:65:0e:27:dd:
         4e:d5:2f:4c:9e:c0:58:a7:d1:ec:49:08:26:51:63:e3:c9:bd:
         04:4e:28:32:b6:a8:c5:74:33:8a:f1:61:bb:78:70:e8:f6:e6:
         d8:c7:ac:7f:25:59:eb:ee:29:8d:5b:cf:6a:3e:b9:9e:0b:ad:
         7e:a5:94:f0:97:25:4d:b3:d2:e4:13:a5:64:6f:81:6c:e0:d0:
         de:d0:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:15:05 2026 by rpki-client