Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          8Oc+UDvYqdvtmP2w5gjdCtDLZ6uEBsLeNVMrisr1T0o=
Subject key identifier:   27:11:14:79:49:BD:62:A3:11:EB:FF:09:5E:2B:35:2F:30:38:02:BE
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       019EB8EAC28B71FA40F2F30C4611D569FAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          1066
Signing time:             Thu 11 Jun 2026 23:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:53 +0000
Files and hashes:         1: 5V2uHMYB3AUKGtIMOIip7J3pWIE.roa (hash: SNdMO15bPZaXBCMvAcfZFL9fGPGQ8SDwl5MGeeyye2I=)
                          2: QCoWTqPLbJGw1zUEhRnFeDiw-yk.roa (hash: 5ldKqSvwDttirHKWjJFhqblT3JDzISSPbft9iHSvGCE=)
                          3: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: L7WRZVOUqYPmf5sJqKUqGShD7gESpzPNmoUD1GdzysY=)
                          4: tcrZxlSyhxTj8kiRDMPfiA4u4Z0.roa (hash: X3hmm+WjiPxOc2QFBzEzmGR0EXyXyN6SSxewOy8ufSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:c2:8b:71:fa:40:f2:f3:0c:46:11:d5:69:fa:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Jun 11 23:00:53 2026 GMT
            Not After : Jun 12 23:00:53 2026 GMT
        Subject: CN=2711147949bd62a311ebff095e2b352f303802be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:1e:e6:70:ac:3c:42:c8:41:9d:c7:7d:41:
                    9a:44:44:17:21:89:cb:80:84:bb:de:06:e7:30:af:
                    d9:dc:07:a1:89:e9:6f:07:75:f9:c3:46:67:aa:b5:
                    c3:d4:ea:b3:bc:6b:6d:39:40:f2:4f:7e:fc:aa:2d:
                    e6:2a:68:3f:ff:32:2a:58:f9:11:c5:d7:ab:86:94:
                    92:17:45:62:4f:33:77:2f:b8:44:ff:15:3a:83:e3:
                    f2:2f:8a:92:10:97:82:92:a9:6c:e3:3d:ba:c0:aa:
                    c9:f5:bd:83:0a:7d:76:f9:96:3f:f8:16:a6:35:43:
                    e1:17:82:12:c6:a6:ab:b8:10:7f:2c:5e:80:d7:53:
                    fb:4f:b0:e9:7d:71:84:60:97:d0:7d:4f:d0:72:a4:
                    89:e2:65:16:b1:d6:61:c8:73:80:e0:ff:e8:7a:32:
                    bc:02:9c:23:9c:0a:a4:26:27:dd:ee:1d:05:1e:6e:
                    f2:0a:a2:5a:9e:c8:f7:d9:78:09:b8:c9:f8:b1:12:
                    24:5f:05:6c:f7:60:6e:35:dc:f7:8a:42:30:6d:e8:
                    3b:17:d9:21:1e:b7:99:7b:fe:5f:7e:db:5d:33:c4:
                    b7:9a:b0:56:c1:2e:9c:c0:8b:e1:8d:1a:15:56:bc:
                    b3:cc:8e:0e:28:b3:cc:7f:3b:a8:b1:85:7b:32:ef:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:14:79:49:BD:62:A3:11:EB:FF:09:5E:2B:35:2F:30:38:02:BE
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:df:35:06:ae:78:df:87:4d:92:4e:32:96:70:63:d6:07:22:
         b2:bd:40:02:43:70:06:8f:6f:33:62:2d:2d:d1:be:91:ea:e5:
         36:9c:7a:c5:3b:67:37:46:7c:0f:0e:a0:be:d0:62:4e:54:b1:
         e8:79:28:17:ad:53:0e:88:d5:3b:25:ae:a1:1b:8e:6a:65:23:
         44:b7:c6:03:32:fd:e2:d7:8d:f8:60:35:26:21:cc:84:f9:7a:
         22:f5:ba:d2:35:14:68:66:94:ce:25:0b:82:e0:28:26:cb:1c:
         4a:3d:69:ff:5b:d7:c1:f8:31:5f:04:10:e7:31:9f:46:5f:fb:
         b6:43:07:77:c6:52:29:96:00:30:fe:ba:35:87:eb:53:53:5a:
         2b:7d:83:ad:84:a1:cf:98:8b:a8:eb:b4:d7:bc:61:6b:d8:b5:
         36:db:03:f0:12:45:a3:22:73:f8:df:ed:1c:77:c3:26:9f:5d:
         a8:48:3d:b0:bb:95:68:13:8d:f8:76:19:2a:a8:5a:cf:60:af:
         94:dc:4e:24:b2:ec:65:a6:8b:16:ae:d0:ab:f9:b2:f2:8e:57:
         e3:b5:46:67:b7:7d:63:c6:0e:8a:10:1d:92:0b:9f:91:d9:11:
         77:89:0b:d0:db:1d:53:5e:cd:50:cb:11:fe:0a:5b:1d:d7:36:
         7a:a1:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:10 2026 by rpki-client