Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
File:                     Mg58DOtLoqb0uW_EuuGruFMDWro.mft (raw, json)
Hash identifier:          /xoMCcsmrvJifUW2DWmXt725b3wkJBq4/WsDIvCkAbs=
Subject key identifier:   EE:EA:93:81:5A:68:6D:4D:28:55:63:14:6B:6E:01:A6:40:5D:14:47
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Certificate issuer:       /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial:       019EB98F24AD9B336C49498E0A2703C02AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
Manifest number:          18EA
Signing time:             Fri 12 Jun 2026 02:00:26 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:26 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:26 +0000
Files and hashes:         1: 190_tT_eCzOnPGNAuqrMRlV6QzI.roa (hash: rinomgyCwitmjvV/nuPRn6UtRWhrMNkhmKnZEnFuZcI=)
                          2: Mg58DOtLoqb0uW_EuuGruFMDWro.crl (hash: kWaIGVx4+ULNng+i4Kxu2DdYs/06cAcNh4le1OKo4Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:24:ad:9b:33:6c:49:49:8e:0a:27:03:c0:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
        Validity
            Not Before: Jun 12 02:00:26 2026 GMT
            Not After : Jun 13 02:00:26 2026 GMT
        Subject: CN=eeea93815a686d4d285563146b6e01a6405d1447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:48:42:48:03:cd:26:3c:76:7d:2c:d5:8e:
                    ac:43:d3:67:c5:a9:df:43:47:50:5c:24:0b:b2:d7:
                    52:a9:10:28:06:e5:5a:7a:8d:ae:c7:8f:da:56:3b:
                    e5:b1:26:28:9f:d0:4a:4b:52:d1:13:cd:27:8b:3f:
                    a3:e9:22:26:fb:ae:12:0f:d8:b4:7b:25:b9:ff:6f:
                    75:1b:08:b4:1b:fb:43:49:32:dd:3f:bc:08:12:f9:
                    72:a4:34:8f:44:97:7f:9b:4e:2f:8b:75:08:26:2b:
                    79:0a:8d:24:35:80:d4:cc:e9:e1:f8:d3:aa:25:84:
                    8f:ab:26:5c:96:1e:ac:bb:05:85:83:4e:0f:4f:a2:
                    6d:cb:a2:f3:00:88:35:23:66:ee:ff:72:f7:2b:5c:
                    17:56:45:66:05:21:85:73:e1:b9:81:eb:94:0a:4c:
                    f4:2e:78:1c:0f:6e:4e:33:47:db:69:a6:2e:ea:a1:
                    46:9c:98:f7:d8:7a:d0:d9:4e:42:5a:81:05:98:0d:
                    88:82:69:fc:6c:5e:ed:62:c9:00:2e:a3:dc:56:66:
                    b0:db:7e:d6:ef:1e:b6:24:fd:3e:5a:42:f3:ac:cc:
                    29:8a:dc:ec:93:1b:1d:4e:3c:e6:6e:04:06:14:ff:
                    f8:79:94:47:80:f4:f0:59:69:88:07:6b:c6:9c:b8:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EA:93:81:5A:68:6D:4D:28:55:63:14:6B:6E:01:A6:40:5D:14:47
            X509v3 Authority Key Identifier:
                keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:d5:fa:45:52:5b:b6:f2:a6:38:aa:fa:3f:5d:18:8d:de:
         3c:f4:6c:59:ed:f0:40:81:3e:52:fa:0c:97:4e:9d:f1:16:27:
         dd:e2:2f:51:a1:2b:53:95:69:a5:ad:95:97:2a:e4:7c:10:3b:
         7b:87:34:cd:58:bf:ae:53:f5:f2:04:5d:f0:0f:6e:c2:10:b3:
         5b:a5:b2:ed:ea:0b:1b:ab:62:8f:dc:2a:49:e9:2e:09:8c:e4:
         96:6b:66:26:f8:37:d4:c2:b7:8d:29:14:9c:1a:91:30:21:2d:
         f6:d5:65:00:b9:b9:1a:6e:92:1a:76:85:67:73:34:89:9c:fc:
         25:f6:89:67:b7:d8:87:8f:ca:87:6f:c5:81:32:e4:74:40:3c:
         69:9c:62:53:09:26:87:6e:e6:61:c1:ea:ed:b4:d7:07:9f:fa:
         b8:60:5b:56:39:6e:05:b4:d5:3d:65:fc:bd:c4:ad:51:42:df:
         45:9f:f0:1a:ae:09:e3:a5:7e:54:a0:34:df:85:db:93:5a:dc:
         9d:9d:91:1c:13:45:07:72:ef:8b:d7:f1:c5:cc:e3:74:f7:27:
         d5:2a:7e:2c:3e:8a:80:fb:07:ec:0a:2d:83:73:bb:79:d8:4d:
         43:c3:89:41:e0:ef:fc:61:d8:90:82:35:43:d8:87:c7:97:9c:
         c9:a7:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:50 2026 by rpki-client