Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File:                     eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier:          VOlvw/IUzDcZDfO3jvbi8eSs++cFIoEO+XAWeOhJKxI=
Subject key identifier:   CB:3E:63:5D:5E:DD:D4:29:BF:DD:CA:9D:AF:12:DE:64:79:58:F9:51
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer:       /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial:       019EB6C4FE04FE3E0F2C05FAA52FD39DFDC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number:          1952
Signing time:             Thu 11 Jun 2026 13:00:23 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:23 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:23 +0000
Files and hashes:         1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: A8I7u/VBaylDQTWXq2gDwHeBc+VDruU0gruW16BEOeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c4:fe:04:fe:3e:0f:2c:05:fa:a5:2f:d3:9d:fd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
        Validity
            Not Before: Jun 11 13:00:23 2026 GMT
            Not After : Jun 12 13:00:23 2026 GMT
        Subject: CN=cb3e635d5eddd429bfddca9daf12de647958f951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:61:da:3d:fa:ff:37:b3:a4:13:e9:39:f1:
                    c9:42:94:96:93:5e:df:cd:3a:60:13:aa:d8:93:b9:
                    24:9c:08:1e:5c:04:ec:4e:af:ee:65:5b:e6:8b:8a:
                    71:cc:d1:09:a6:0f:68:b5:c0:23:db:be:ef:f5:8e:
                    1a:46:d3:43:d9:b3:80:7f:74:58:99:5b:a1:1d:f1:
                    6a:f3:8a:7d:d3:12:ac:ee:63:ab:43:84:1c:22:3e:
                    fc:81:d9:71:85:90:34:2f:09:e3:74:e3:1f:0f:7f:
                    4d:c4:82:b0:3d:82:4e:f4:b2:99:91:c0:86:73:d8:
                    f2:5e:9f:a7:12:5c:e6:87:8f:dd:44:9d:0b:6f:5a:
                    89:ad:5b:e1:26:21:09:8a:48:03:a0:bc:a2:0d:25:
                    a9:8d:06:b5:b5:30:6d:37:0e:62:0e:ce:76:0c:44:
                    9f:e8:73:13:88:25:8f:a6:3f:a6:0e:0d:51:15:f9:
                    c9:db:5b:10:a5:3c:dc:ea:54:44:74:f6:ae:06:c1:
                    da:e9:1e:ed:ea:05:fb:16:19:ca:1e:57:be:bc:19:
                    c1:82:a0:e6:33:2a:9d:81:15:9e:48:18:d0:41:44:
                    f0:67:15:b6:f8:e1:c8:b1:03:bc:9c:33:a3:46:08:
                    53:d5:f7:5c:3c:be:ad:a6:b9:59:e4:12:36:a7:3e:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3E:63:5D:5E:DD:D4:29:BF:DD:CA:9D:AF:12:DE:64:79:58:F9:51
            X509v3 Authority Key Identifier:
                keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:dc:b1:df:29:64:03:35:9f:a9:c9:a6:c6:70:23:61:9c:
         0e:cc:11:b5:0f:88:4a:53:00:07:51:fd:86:73:9d:a6:3d:88:
         43:a5:cb:f0:fa:19:92:c3:12:6d:8b:36:6f:8b:5f:46:22:1c:
         ae:00:b6:6e:4e:16:3a:59:a2:1a:86:b3:3f:7a:1f:2f:9c:f7:
         a6:d1:e3:e7:ba:09:11:59:90:5e:51:13:e4:ef:d2:66:2c:12:
         cc:45:e7:aa:11:88:e8:ce:04:5e:51:2a:fe:f4:8d:84:88:79:
         83:30:c5:68:36:63:d2:27:36:bf:4e:ab:7f:00:d4:f2:3e:b5:
         7a:49:1e:22:3d:58:f2:65:11:d4:78:e7:91:bc:1c:c2:f4:28:
         d0:4c:ef:d9:d6:b5:4e:64:24:9f:ac:7d:d1:9c:05:fb:86:0d:
         01:c2:75:be:51:8d:08:52:8d:07:53:be:61:4e:ad:9f:a2:9c:
         c8:bd:52:32:86:ec:ea:29:5f:f6:81:38:42:11:ed:6a:8d:27:
         49:46:82:17:c1:a5:8b:e4:82:55:2f:ef:76:79:b8:fe:5f:2c:
         cc:0a:ac:fe:e1:bb:d7:62:62:2f:7d:01:3a:b5:cf:c7:cb:5e:
         fc:7c:05:a6:49:15:75:d6:36:17:ef:df:e1:4c:8b:ce:07:03:
         2f:cf:4b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xP4E/j4PLAX6pS/Tnf3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODM1ZDI1ODM0YWUwZDZiYzlkOTI4ZjY0NjEyN2ZiYzU0
YmQzM2QwHhcNMjYwNjExMTMwMDIzWhcNMjYwNjEyMTMwMDIzWjAzMTEwLwYDVQQD
EyhjYjNlNjM1ZDVlZGRkNDI5YmZkZGNhOWRhZjEyZGU2NDc5NThmOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrZh2j36/zezpBPpOfHJQpSWk17f
zTpgE6rYk7kknAgeXATsTq/uZVvmi4pxzNEJpg9otcAj277v9Y4aRtND2bOAf3RY
mVuhHfFq84p90xKs7mOrQ4QcIj78gdlxhZA0LwnjdOMfD39NxIKwPYJO9LKZkcCG
c9jyXp+nElzmh4/dRJ0Lb1qJrVvhJiEJikgDoLyiDSWpjQa1tTBtNw5iDs52DESf
6HMTiCWPpj+mDg1RFfnJ21sQpTzc6lREdPauBsHa6R7t6gX7FhnKHle+vBnBgqDm
MyqdgRWeSBjQQUTwZxW2+OHIsQO8nDOjRghT1fdcPL6tprlZ5BI2pz5n2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs+Y11e3dQpv93Kna8S3mR5WPlRMB8GA1UdIwQY
MBaAFHiDXSWDSuDWvJ2Sj2RhJ/vFS9M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMzEwNTEtYjkxMi00YjA1LTkyYWYt
ODIwNjI5NzM5MmQ5LzEvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMzEwNTEtYjkxMi00YjA1LTkyYWYtODIwNjI5NzM5MmQ5
LzEvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeXcsd8p
ZAM1n6nJpsZwI2GcDswRtQ+ISlMAB1H9hnOdpj2IQ6XL8PoZksMSbYs2b4tfRiIc
rgC2bk4WOlmiGoazP3ofL5z3ptHj57oJEVmQXlET5O/SZiwSzEXnqhGI6M4EXlEq
/vSNhIh5gzDFaDZj0ic2v06rfwDU8j61ekkeIj1Y8mUR1HjnkbwcwvQo0Ezv2da1
TmQkn6x90ZwF+4YNAcJ1vlGNCFKNB1O+YU6tn6KcyL1SMobs6ilf9oE4QhHtao0n
SUaCF8Gli+SCVS/vdnm4/l8szAqs/uG712JiL30BOrXPx8te/HwFpkkVddY2F+/f
4UyLzgcDL89LeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:33:01 2026 by rpki-client