Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          YUGsGhlxi2fpNedp7Q9gvdVvr9lLXOUqumUCLQeAMCc=
Subject key identifier:   4D:05:E9:10:B1:3D:BF:8B:6C:50:2E:D1:C2:C5:BF:21:C3:21:0F:51
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       019EF9F0F9E7C55C82082AE66A26BC1ABF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          1277
Signing time:             Wed 24 Jun 2026 14:02:59 +0000
Manifest this update:     Wed 24 Jun 2026 14:02:59 +0000
Manifest next update:     Thu 25 Jun 2026 14:02:59 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: HL1QvOZnbl1ZCIvFluDVKX/DpFsUXwrZ/Srzl3XV0Lc=)
                          2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
                          3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:f0:f9:e7:c5:5c:82:08:2a:e6:6a:26:bc:1a:bf:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Jun 24 14:02:59 2026 GMT
            Not After : Jun 25 14:02:59 2026 GMT
        Subject: CN=4d05e910b13dbf8b6c502ed1c2c5bf21c3210f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:3a:0a:d2:c4:ac:48:6f:66:6f:59:9a:29:
                    a6:c2:c9:7f:fa:07:7b:2a:46:1e:3a:ac:38:58:7e:
                    d2:11:0b:0d:6b:4f:6d:d5:1d:8d:48:ab:c1:36:04:
                    26:04:6e:e3:dd:a1:a8:c2:df:4c:1c:9e:c5:e4:b1:
                    a7:b9:ec:74:73:a1:70:c6:5d:3a:2d:c7:5f:8b:5b:
                    65:40:51:3f:8c:eb:8a:47:be:45:8e:9e:33:46:c0:
                    6c:de:cd:0c:36:cc:3e:fb:bf:de:86:9b:39:85:b8:
                    c4:e2:04:dc:fe:ce:f4:82:65:db:ba:c3:25:3b:1c:
                    b5:96:41:92:00:bd:f3:37:a4:7a:e3:81:10:26:24:
                    ec:cb:d6:45:b5:2c:43:25:c0:a5:b8:78:f2:aa:f0:
                    b0:9c:6b:34:91:53:eb:10:c3:e2:6f:a5:42:f8:48:
                    d8:f6:d4:c2:15:43:4d:07:f4:08:22:e8:73:c2:c3:
                    fa:78:37:64:4c:ca:49:c7:7d:1f:57:e0:34:55:b4:
                    e9:52:ad:6e:8b:af:f3:79:68:39:b8:6c:83:45:b1:
                    35:7f:cc:36:7f:a1:c5:2d:cc:b9:b9:a6:7e:6c:3b:
                    bd:82:99:69:7f:6d:14:7a:de:e9:10:e8:32:07:c5:
                    d5:69:08:44:7f:35:f0:23:58:cb:e6:88:f3:a8:2b:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:E9:10:B1:3D:BF:8B:6C:50:2E:D1:C2:C5:BF:21:C3:21:0F:51
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:0c:84:25:e3:51:81:d9:4a:a3:bd:d9:01:1c:44:0a:df:
         fc:24:3e:e8:1d:3b:a2:2c:c6:59:bd:a4:0d:38:c2:92:ac:5f:
         ee:b8:33:cc:e4:c8:cd:88:ff:df:39:2d:25:ff:0a:2f:0e:25:
         d1:89:23:a2:f1:88:c9:47:db:2b:71:3b:92:e1:73:d7:14:cf:
         7e:17:bf:24:dd:33:85:68:9b:85:a5:1b:83:f2:ad:d2:45:bf:
         13:44:47:12:6e:62:e5:40:5a:02:17:f3:a3:76:a2:8b:af:9d:
         a9:f1:7a:fa:42:44:cf:23:71:8d:b1:20:36:f4:a7:13:d8:2b:
         7d:7d:e3:e8:0b:92:bb:03:3e:eb:da:46:0c:e9:e4:58:a0:ca:
         d1:6a:75:85:51:4e:39:0c:ce:87:fc:9b:e9:ae:ff:01:a0:90:
         19:15:a2:fe:d1:aa:da:35:8d:34:63:27:80:4f:03:e1:03:37:
         c0:3f:7d:ce:24:a5:90:c0:a6:a0:03:10:8c:30:0e:eb:22:65:
         d8:85:c4:06:fa:18:b4:8d:31:2c:79:a4:42:47:22:4b:4e:7d:
         11:7f:4e:6d:6d:5e:98:ea:2c:37:bb:00:5e:e8:42:2a:8c:79:
         42:f9:b6:55:18:f0:b8:71:83:fc:f7:32:c3:e1:7b:fa:57:35:
         06:73:fb:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ758PnnxVyCCCrmaia8Gr9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjYwNjI0MTQwMjU5WhcNMjYwNjI1MTQwMjU5WjAzMTEwLwYDVQQD
Eyg0ZDA1ZTkxMGIxM2RiZjhiNmM1MDJlZDFjMmM1YmYyMWMzMjEwZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApug6CtLErEhvZm9Zmimmwsl/+gd7
KkYeOqw4WH7SEQsNa09t1R2NSKvBNgQmBG7j3aGowt9MHJ7F5LGnuex0c6Fwxl06
Lcdfi1tlQFE/jOuKR75Fjp4zRsBs3s0MNsw++7/ehps5hbjE4gTc/s70gmXbusMl
Oxy1lkGSAL3zN6R644EQJiTsy9ZFtSxDJcCluHjyqvCwnGs0kVPrEMPib6VC+EjY
9tTCFUNNB/QIIuhzwsP6eDdkTMpJx30fV+A0VbTpUq1ui6/zeWg5uGyDRbE1f8w2
f6HFLcy5uaZ+bDu9gplpf20Uet7pEOgyB8XVaQhEfzXwI1jL5ojzqCueVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0F6RCxPb+LbFAu0cLFvyHDIQ9RMB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOMMhCXj
UYHZSqO92QEcRArf/CQ+6B07oizGWb2kDTjCkqxf7rgzzOTIzYj/3zktJf8KLw4l
0YkjovGIyUfbK3E7kuFz1xTPfhe/JN0zhWibhaUbg/Kt0kW/E0RHEm5i5UBaAhfz
o3aii6+dqfF6+kJEzyNxjbEgNvSnE9grfX3j6AuSuwM+69pGDOnkWKDK0Wp1hVFO
OQzOh/yb6a7/AaCQGRWi/tGq2jWNNGMngE8D4QM3wD99ziSlkMCmoAMQjDAO6yJl
2IXEBvoYtI0xLHmkQkciS059EX9ObW1emOosN7sAXuhCKox5Qvm2VRjwuHGD/Pcy
w+F7+lc1BnP7Vg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:25 2026 by rpki-client