Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          llsevKlK6A5rUo8atqhHxqNHhhXpuizijmpVAlE0T4w=
Subject key identifier:   5B:C0:D6:51:3D:9F:B9:24:A9:8D:C2:89:F7:FF:C3:6C:E3:E2:54:4B
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       019EBA6B5C659CB76FD6C02106702CDF4E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          15DD
Signing time:             Fri 12 Jun 2026 06:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:58 +0000
Files and hashes:         1: Oy65Flm_uwrvJdQB08a6SJ4kW8I.roa (hash: fu4fm6NabdEAcEXhd0h2UuWDUtPed2OsOBwT+zaFccI=)
                          2: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: DbJNrtZUykOh9wQ4yVtq1dD1gtEkn4tZzG0otHg5eP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6b:5c:65:9c:b7:6f:d6:c0:21:06:70:2c:df:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Jun 12 06:00:58 2026 GMT
            Not After : Jun 13 06:00:58 2026 GMT
        Subject: CN=5bc0d6513d9fb924a98dc289f7ffc36ce3e2544b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:10:18:12:9f:88:42:11:b8:9d:7b:0c:05:
                    50:2c:90:c2:17:88:ce:4a:78:f7:04:72:33:1a:7b:
                    c8:af:b3:1d:eb:fb:23:9f:20:da:e1:61:ec:85:34:
                    83:4f:c1:0f:ba:0a:3f:0e:f8:19:68:e9:98:34:71:
                    c6:62:67:69:a0:c9:22:8b:85:da:2b:3d:c1:70:b7:
                    a7:40:3f:c0:29:b0:e0:ea:b4:fc:80:99:f6:5a:72:
                    c2:2d:53:87:55:28:e3:91:6f:f7:46:6f:9c:cd:c4:
                    b1:b3:fb:33:cb:0f:fe:51:5e:14:83:50:d4:e7:a4:
                    9c:1c:58:c5:d9:60:fd:d8:41:3a:9b:8a:24:10:e0:
                    c1:59:85:79:8d:02:6c:b9:9b:c0:b2:31:16:72:bb:
                    ba:76:93:bd:2b:bd:70:40:42:23:15:e3:b4:51:82:
                    9b:74:59:ca:ca:4e:3e:86:03:cd:f8:be:b7:82:50:
                    81:51:d8:17:54:2d:00:01:36:ab:b4:e3:14:64:40:
                    d3:65:23:99:c6:c8:45:37:79:05:0c:c4:c3:42:12:
                    c3:24:ee:c1:93:60:c2:6d:e6:b5:4c:36:38:48:60:
                    e0:3c:fd:6c:08:08:5b:de:bf:5f:ef:83:be:ed:cb:
                    4d:c6:69:bd:65:55:ec:46:86:37:07:f1:19:ef:34:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C0:D6:51:3D:9F:B9:24:A9:8D:C2:89:F7:FF:C3:6C:E3:E2:54:4B
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:25:29:37:00:f3:a7:f9:f9:f5:df:3f:42:11:0c:2e:f0:3f:
         91:26:2b:b7:ea:d5:ce:bd:df:4d:06:7d:5f:20:a2:87:0d:a6:
         1e:2b:1b:4b:14:6c:bd:10:6b:3e:b5:41:0a:02:96:b4:f2:00:
         32:77:aa:42:06:72:47:cc:70:d6:a5:52:3d:63:c1:a5:08:b8:
         87:02:2c:27:c8:fe:93:43:5b:7b:3e:ef:20:1b:c7:5f:9a:5a:
         ae:0c:0a:d3:c2:dd:23:5c:a3:6d:c4:4d:2d:f7:f9:07:43:63:
         84:87:fc:c1:aa:d7:8a:ad:78:e4:5e:b7:51:f0:5e:ae:e0:a2:
         9c:3d:40:52:f5:46:99:c4:17:3a:7d:93:b9:2e:d4:7a:3c:49:
         60:78:e9:66:2c:6c:34:bd:bd:23:db:9c:c9:75:98:f2:04:21:
         3b:02:0c:bc:ca:21:b1:f5:ab:7e:3f:c0:5b:81:6b:5c:fd:6f:
         88:7a:3d:b2:75:cd:96:cd:3f:99:f8:2b:ed:ec:2d:9c:27:a1:
         50:70:42:be:cd:66:2a:dc:26:76:d6:24:0b:d4:2c:24:48:35:
         b2:59:ca:d0:6d:3e:8c:fc:94:3d:7e:07:88:45:0f:3a:04:87:
         8b:7a:0a:a0:0a:65:6f:03:6e:66:32:cb:33:44:71:06:f3:f9:
         54:94:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:11:52 2026 by rpki-client