Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
File:                     EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft (raw, json)
Hash identifier:          2TbWt9leNS8KyII84Idoig7gdglBTuV3xiHlk6M9Mw4=
Subject key identifier:   A5:F4:10:49:EA:7F:C9:14:38:3A:52:AA:65:13:EA:1A:2D:D2:03:22
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Certificate issuer:       /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial:       019E3004F83613A81186AA325405CC68C1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
Manifest number:          1042
Signing time:             Sat 16 May 2026 09:01:32 +0000
Manifest this update:     Sat 16 May 2026 09:01:32 +0000
Manifest next update:     Sun 17 May 2026 09:01:32 +0000
Files and hashes:         1: 9TG6jiqZVWNpx9zYkAPf4kzU-7w.roa (hash: UPvJJD4WPPdIrkPpjQB2axNpGKInNF9uAY3pA8FvcF4=)
                          2: EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl (hash: 3x77dPE8zaKQuGMlF0x0ulDmKoLtF51LoLSI9M7QLvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:f8:36:13:a8:11:86:aa:32:54:05:cc:68:c1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
        Validity
            Not Before: May 16 09:01:32 2026 GMT
            Not After : May 17 09:01:32 2026 GMT
        Subject: CN=a5f41049ea7fc914383a52aa6513ea1a2dd20322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:b7:8e:04:f3:06:3b:4d:91:5f:1b:98:5d:
                    67:b0:a0:fb:f0:2b:70:d0:74:9a:4a:cf:ea:bf:8c:
                    8e:87:39:30:d9:18:e9:67:6d:25:93:4b:32:b4:89:
                    cf:88:e9:1c:1d:82:33:9f:f3:f8:af:ca:b0:24:7e:
                    a9:b0:c7:84:0e:a9:14:22:d4:6a:21:2c:20:ba:a0:
                    10:5b:ce:76:e9:b6:4f:57:ee:63:76:7e:d0:a7:2a:
                    2d:09:b0:9f:e5:9c:d9:95:55:de:41:18:fe:5f:9a:
                    05:6c:b7:0e:46:89:dd:15:a5:da:65:a3:f2:ae:8b:
                    c9:92:0d:65:a6:33:54:d8:3f:bf:b5:e6:f1:d6:29:
                    73:b1:27:74:fb:cc:b0:db:8c:c5:40:f6:59:bf:70:
                    4b:fb:07:b5:b9:be:d0:c6:40:60:65:8e:2d:f7:c7:
                    5a:77:3c:71:ff:5b:b2:07:4a:ca:6b:df:ac:db:0b:
                    c0:e7:15:eb:22:40:83:ca:51:bd:9d:c6:fe:8b:84:
                    82:08:8c:84:e4:e6:5f:da:48:cf:24:ec:5f:82:69:
                    53:eb:3b:ed:5a:fa:a2:f7:d1:1e:f3:34:9a:87:3f:
                    59:bd:cc:1e:ac:c1:ff:94:1b:d9:08:45:0a:b1:3b:
                    cc:a7:03:88:9b:8a:3c:b9:71:14:c0:9c:4a:bd:f0:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:10:49:EA:7F:C9:14:38:3A:52:AA:65:13:EA:1A:2D:D2:03:22
            X509v3 Authority Key Identifier:
                keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:ba:3e:4b:6b:3d:94:ac:1e:71:02:10:d4:7d:02:f9:0e:
         61:2d:02:6c:62:ef:28:dd:3b:63:48:8a:c7:b1:ae:62:61:c2:
         7a:2d:21:ca:43:15:15:87:8f:43:87:b0:0c:24:77:c2:d9:63:
         e7:48:dc:f8:2a:37:e2:a8:ac:fb:d5:aa:f4:f3:b4:9f:58:e3:
         eb:8a:00:30:e4:b6:91:1d:a8:a3:de:e0:ad:64:c5:30:e4:3d:
         af:6e:ae:ec:eb:44:48:8f:b0:b8:7b:fd:ad:82:f2:69:d7:52:
         11:6d:ec:6a:2d:d8:54:da:16:54:f9:e6:b1:a0:fc:41:2f:0d:
         f9:b3:ef:69:c5:20:5d:a9:e4:78:7b:f5:fb:6e:32:5b:c7:bc:
         44:3f:c1:d8:1d:05:f7:e4:04:32:68:95:fc:cd:bf:ef:87:04:
         36:4c:78:f6:e5:fc:ce:d9:d1:69:a9:2d:d7:53:e8:46:a5:72:
         0a:d3:b1:58:48:eb:cd:ca:c4:71:fa:87:05:04:2b:a7:3e:13:
         95:63:39:39:aa:cc:58:8f:fa:6b:95:c6:15:e8:1d:36:9b:28:
         c6:20:7b:61:9d:61:4b:9e:b4:c0:c5:89:bc:13:80:bd:e0:ac:
         dc:22:c3:8a:93:80:a7:33:de:6f:2c:38:bb:25:bc:e7:f5:9c:
         9f:59:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:56 2026 by rpki-client