Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File:                     Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier:          G/AOnHS6k6E+XtNfQUTCvcskJzuIO89E5+8Rl5iuMPU=
Subject key identifier:   71:DF:82:C6:6B:42:E2:75:24:94:8B:27:3A:AD:0A:FE:C9:62:79:07
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer:       /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial:       019EB7335AB7CC7FFBDD647CD0486BBC8757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number:          0E20
Signing time:             Thu 11 Jun 2026 15:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:56 +0000
Files and hashes:         1: 1-q-fuZBo0laxVeBX6NwpVLainfk.roa (hash: GcGILGkicFW1BhS8ux6XwCmaky0PHjEEL1j6XCYq2ko=)
                          2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: uN2lIGcUWxpyXioDTVUEWghmC2i6CgY3Ws1HoZCwykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:5a:b7:cc:7f:fb:dd:64:7c:d0:48:6b:bc:87:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
        Validity
            Not Before: Jun 11 15:00:56 2026 GMT
            Not After : Jun 12 15:00:56 2026 GMT
        Subject: CN=71df82c66b42e27524948b273aad0afec9627907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:46:0b:8e:d5:05:78:87:b7:81:6e:aa:43:
                    62:41:6f:b1:68:44:ae:a6:3b:4e:78:e6:fe:2b:03:
                    dc:66:5b:5e:8a:5e:d6:bb:f5:30:ee:59:a7:be:c7:
                    15:04:ec:13:92:e4:f8:dd:ca:df:8b:cd:21:63:65:
                    d7:92:78:14:84:5e:73:3c:55:60:f7:1a:bd:dc:6c:
                    6b:32:d4:53:37:aa:ea:52:5a:b5:83:b4:2e:1f:42:
                    e9:0e:00:42:da:d4:59:1a:ef:1d:7c:88:28:0e:04:
                    be:c1:7d:15:bf:a7:e7:c3:6e:d6:b8:6d:ac:fe:b7:
                    d5:00:30:13:53:3a:5b:6a:92:55:c7:2a:af:21:34:
                    27:3f:33:1e:09:20:18:02:14:e8:aa:85:02:aa:8b:
                    3f:db:13:b5:24:5a:89:19:52:10:06:9c:c2:8d:97:
                    87:6f:9e:ee:b0:50:4b:53:0b:bf:62:54:04:27:ba:
                    0f:bf:15:65:e1:ad:0d:e6:37:78:60:7c:e3:d7:31:
                    a3:0c:74:02:8d:99:41:a5:a7:31:d0:bd:53:4c:09:
                    c2:a8:45:99:9f:b7:8c:b1:e1:80:96:10:8c:14:24:
                    23:74:c1:2c:7c:f5:8a:da:7e:b5:db:f4:2b:fb:20:
                    24:8c:bc:c1:b0:3b:c5:ed:79:47:d8:04:dd:60:bf:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:82:C6:6B:42:E2:75:24:94:8B:27:3A:AD:0A:FE:C9:62:79:07
            X509v3 Authority Key Identifier:
                keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:2c:27:8c:34:79:82:48:be:0b:e6:69:e3:43:a2:8c:53:0c:
         f0:1d:18:c8:0b:22:2b:00:d5:74:44:8d:e6:7a:b6:77:62:ad:
         56:93:e0:de:6c:a5:0b:d9:21:ca:2b:28:d7:e8:31:52:46:f6:
         1b:ca:98:6f:c5:71:ac:78:b8:7b:17:24:7e:3c:18:60:07:17:
         fa:12:f4:1a:17:e2:82:f5:a4:c5:3b:09:84:ef:4b:38:b4:29:
         85:b9:67:07:8c:4e:0c:87:b1:e2:a6:f1:06:ff:90:e5:ed:4c:
         14:49:e4:e3:60:f9:d1:c2:91:11:66:99:84:75:49:a6:f6:cc:
         72:22:48:48:d4:04:57:f5:93:dd:b9:ab:3a:43:96:7f:37:b2:
         56:b0:ee:74:d3:28:4a:57:8d:61:94:e2:a3:17:92:cd:77:f0:
         4c:7a:ca:42:c6:41:91:8b:28:d2:be:f3:a4:4a:14:06:b2:93:
         bd:43:94:93:05:36:66:ea:29:d8:cb:11:e1:02:c9:d8:05:c5:
         8c:51:d9:95:ac:1d:f5:44:21:10:8b:9a:27:3e:da:b8:51:5f:
         05:e2:14:a6:8f:cf:97:48:d1:83:e1:eb:c1:3b:67:29:26:c3:
         c1:3f:18:9d:e3:0c:96:05:c6:02:06:0a:86:09:30:3d:b1:73:
         37:81:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:08 2026 by rpki-client