Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          MQ+L+mbYaCgulKDLTS8cH4Yr2n9pmbH447UMGplOXwQ=
Subject key identifier:   9C:5B:2B:0A:7A:4D:98:72:91:2C:28:1B:98:5C:D1:46:05:22:AB:5C
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019E995F324AE78FC5928CC24D364E676727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          12B2
Signing time:             Fri 05 Jun 2026 20:00:13 +0000
Manifest this update:     Fri 05 Jun 2026 20:00:13 +0000
Manifest next update:     Sat 06 Jun 2026 20:00:13 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: Y8biGL6gJ2CaYlGJ4MnZ5iy414omVD9TEXDCwx7nGlM=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:5f:32:4a:e7:8f:c5:92:8c:c2:4d:36:4e:67:67:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Jun  5 20:00:13 2026 GMT
            Not After : Jun  6 20:00:13 2026 GMT
        Subject: CN=9c5b2b0a7a4d9872912c281b985cd1460522ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:39:11:5f:3a:74:1c:99:a0:30:f4:92:87:
                    71:c1:3f:e4:47:32:44:72:d2:a0:e2:b8:d8:01:be:
                    07:5a:2b:12:92:c6:b3:7f:35:73:74:4a:31:0e:88:
                    0f:4d:df:e1:13:62:16:6a:d3:00:05:40:6b:93:58:
                    4b:9c:ba:1d:bf:c7:c8:eb:1a:31:cb:bf:70:9d:b3:
                    3d:39:f0:23:0c:ce:65:be:f3:a7:ef:54:7b:0c:26:
                    ec:1d:78:79:17:93:3c:25:1c:38:71:12:9c:20:4c:
                    c7:31:71:20:fc:aa:d9:c9:b2:7a:35:ef:42:78:9c:
                    34:55:2f:82:07:69:bb:5f:e4:77:ab:ca:75:86:2c:
                    04:bc:f2:e8:24:ac:3c:1e:7a:04:f2:7b:2d:2a:b7:
                    51:2d:f8:08:88:55:33:07:17:17:41:10:c6:14:3f:
                    cf:7a:77:e5:b8:8d:a7:30:12:b6:70:f4:e0:92:78:
                    86:27:41:89:ab:68:cf:10:61:80:53:5d:72:f9:03:
                    23:9e:65:9a:ad:ec:6b:fa:a0:4c:61:1e:bd:dd:32:
                    67:8d:b3:ef:c5:70:dd:09:77:57:bd:9b:88:a9:fd:
                    d1:9a:17:94:ea:03:4e:3f:cc:35:7e:c2:91:e2:3e:
                    32:c9:71:3c:f7:87:23:aa:cf:e6:3d:38:00:74:80:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:2B:0A:7A:4D:98:72:91:2C:28:1B:98:5C:D1:46:05:22:AB:5C
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:88:04:fc:5a:06:09:70:d4:1d:ff:9c:9d:2e:c2:58:42:
         56:ee:87:36:1e:c2:6d:28:2b:63:ea:45:e9:4c:77:92:6e:d1:
         08:a3:07:6e:c8:0a:31:e7:8a:2a:a5:40:87:10:d6:b1:e5:9e:
         03:4e:26:ab:3d:62:e5:fc:77:af:25:f0:2a:3f:55:6f:fe:53:
         e1:83:ff:18:11:5b:27:18:9b:b4:ce:55:8a:37:9d:f3:2e:67:
         1b:aa:cc:c8:26:67:74:bd:90:b1:8a:62:5f:9f:ae:5b:1d:19:
         4c:af:49:28:1b:10:f7:e7:a0:c2:53:a4:ca:d3:1f:36:84:6f:
         ac:26:eb:4e:0d:1f:f9:bd:9b:f2:6e:1b:ec:0d:f0:ea:cc:78:
         0a:7f:1b:cd:80:cd:d1:22:9e:55:b4:84:13:21:04:68:65:14:
         5d:fe:2e:f4:5c:a4:a6:5a:54:cc:2b:09:28:f1:2f:01:a4:bd:
         c2:3f:f8:c7:12:8b:e9:8e:30:7d:cf:3d:a9:5d:98:71:2c:2f:
         12:18:0c:d6:c5:24:ed:31:cc:5c:9c:9f:60:b0:2d:16:21:3c:
         57:00:8c:34:c0:23:9a:a1:1b:40:76:40:81:cf:2e:00:62:28:
         6a:fc:90:4a:e0:6e:ad:fe:b0:8b:06:51:d1:eb:6f:48:fa:db:
         a6:9c:f5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6ZXzJK54/FkozCTTZOZ2cnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj
M2RjMGIwHhcNMjYwNjA1MjAwMDEzWhcNMjYwNjA2MjAwMDEzWjAzMTEwLwYDVQQD
Eyg5YzViMmIwYTdhNGQ5ODcyOTEyYzI4MWI5ODVjZDE0NjA1MjJhYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbM5EV86dByZoDD0kodxwT/kRzJE
ctKg4rjYAb4HWisSksazfzVzdEoxDogPTd/hE2IWatMABUBrk1hLnLodv8fI6xox
y79wnbM9OfAjDM5lvvOn71R7DCbsHXh5F5M8JRw4cRKcIEzHMXEg/KrZybJ6Ne9C
eJw0VS+CB2m7X+R3q8p1hiwEvPLoJKw8HnoE8nstKrdRLfgIiFUzBxcXQRDGFD/P
enfluI2nMBK2cPTgkniGJ0GJq2jPEGGAU11y+QMjnmWarexr+qBMYR693TJnjbPv
xXDdCXdXvZuIqf3RmheU6gNOP8w1fsKR4j4yyXE894cjqs/mPTgAdIDBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxbKwp6TZhykSwoG5hc0UYFIqtcMB8GA1UdIwQY
MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt
M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1
LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVyIBPxa
Bglw1B3/nJ0uwlhCVu6HNh7CbSgrY+pF6Ux3km7RCKMHbsgKMeeKKqVAhxDWseWe
A04mqz1i5fx3ryXwKj9Vb/5T4YP/GBFbJxibtM5Vijed8y5nG6rMyCZndL2QsYpi
X5+uWx0ZTK9JKBsQ9+egwlOkytMfNoRvrCbrTg0f+b2b8m4b7A3w6sx4Cn8bzYDN
0SKeVbSEEyEEaGUUXf4u9FykplpUzCsJKPEvAaS9wj/4xxKL6Y4wfc89qV2YcSwv
EhgM1sUk7THMXJyfYLAtFiE8VwCMNMAjmqEbQHZAgc8uAGIoavyQSuBurf6wiwZR
0etvSPrbppz1iw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:02:39 2026 by rpki-client