Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
File:                     EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json)
Hash identifier:          czXpnZJMGYMjQXHN0NMSsrbw7g99IIZ3TvP8leybOOE=
Subject key identifier:   37:3E:8B:B7:AE:14:DA:6D:E6:03:93:7A:C9:AD:5C:A6:B4:35:3E:66
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Certificate issuer:       /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial:       019EBA34859287BEA18FF3A30B87702FA8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
Manifest number:          12BE
Signing time:             Fri 12 Jun 2026 05:01:04 +0000
Manifest this update:     Fri 12 Jun 2026 05:01:04 +0000
Manifest next update:     Sat 13 Jun 2026 05:01:04 +0000
Files and hashes:         1: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: JKYTZs+sNSfa5gGA7BPmYifY5HyGxgUoJNwStqSYOcs=)
                          2: Y3RLifHeY4_sa3VIPYwGKzpcW4g.roa (hash: YS0zGHaZp4/cwuLZ66DL6UHXKwRlU7yjEXPrJXt2e7g=)
                          3: qQzxZnlYtLrkELKfUzXCG4soudc.roa (hash: DTtfOYYSiBFfg8GDnnVl4CpMUOUjrg0lnpbdsfGYNEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:85:92:87:be:a1:8f:f3:a3:0b:87:70:2f:a8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
        Validity
            Not Before: Jun 12 05:01:04 2026 GMT
            Not After : Jun 13 05:01:04 2026 GMT
        Subject: CN=373e8bb7ae14da6de603937ac9ad5ca6b4353e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:e0:69:08:1a:74:f0:6a:43:8b:31:ed:ff:
                    0a:c9:44:04:51:48:f5:b7:03:e7:b3:f7:ce:99:b7:
                    2d:d5:7f:47:21:e2:d3:4e:6c:39:73:3d:93:cc:fa:
                    3b:15:7a:4d:53:0d:71:cc:e0:65:4e:bd:2e:d8:0e:
                    80:a8:7b:ad:9d:fe:2d:14:1a:ff:8f:63:d3:3f:72:
                    5f:13:9f:8c:af:bf:f9:f4:b2:ae:b2:f0:58:51:53:
                    44:a8:db:5b:32:42:fd:da:8e:62:fd:f2:9c:b2:8c:
                    2e:00:0b:fb:5f:bc:8c:9c:0d:85:30:39:c7:f1:a6:
                    44:58:6f:8d:c4:1d:d5:e9:46:d8:3e:cf:bd:53:74:
                    8d:2f:91:53:a7:9a:36:02:23:45:75:96:aa:36:72:
                    b1:b2:5b:50:de:af:bc:0c:7b:41:eb:a9:8e:2a:07:
                    8f:61:26:45:83:34:e4:76:3d:97:ea:f9:21:05:e5:
                    cf:73:f9:47:ff:ef:96:e5:c5:b4:55:cf:06:85:dc:
                    1b:74:99:3f:40:7f:28:3c:3f:47:db:84:6e:f7:5d:
                    f0:5c:de:15:ba:66:41:e7:0b:dc:c2:9c:c2:9a:63:
                    32:b9:08:00:8d:da:77:74:b8:59:77:55:eb:8d:6a:
                    b3:3f:86:8d:7c:44:b6:6d:20:65:37:3d:a1:fe:fa:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3E:8B:B7:AE:14:DA:6D:E6:03:93:7A:C9:AD:5C:A6:B4:35:3E:66
            X509v3 Authority Key Identifier:
                keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:1e:18:89:6b:3e:d5:fd:dd:a0:4f:ec:c7:01:75:60:bc:
         2b:b4:04:e4:9b:27:90:e8:05:37:63:f9:7e:67:a9:b9:0a:a0:
         86:88:bc:03:73:f7:70:e6:30:aa:ab:65:e1:d7:3b:81:53:bd:
         9e:c0:f3:5d:38:99:83:73:64:ee:19:b2:a0:e6:4e:8b:d4:38:
         5b:ee:1b:8f:e5:4f:2b:64:17:6c:24:78:66:53:f5:f3:80:39:
         4e:9e:16:f0:4e:22:aa:58:6d:ab:dd:49:90:38:71:63:8d:67:
         ef:74:c9:e3:3c:86:49:2a:7a:79:46:e1:99:c1:d6:fd:88:bd:
         c0:9d:56:2e:d8:c8:4d:1d:ee:cf:d2:f5:26:9f:89:4a:90:7c:
         dd:83:84:e7:91:6a:0f:f4:00:e8:b6:26:45:9d:fe:98:22:ef:
         19:ee:b7:c9:02:27:47:74:6d:58:76:c8:bd:9f:2d:e1:5d:7a:
         49:db:46:29:1a:6b:44:89:cb:bd:5f:d9:fa:20:4d:9e:3b:f7:
         98:0b:f1:46:2e:5d:bf:48:ac:86:76:ad:1f:fb:93:de:96:01:
         2d:c7:e6:23:e6:cb:94:b7:57:05:6d:2f:74:6b:39:10:e1:fc:
         9d:63:89:ee:0b:3d:60:35:fd:86:d4:ba:c4:02:6e:cc:38:ae:
         75:a9:c1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NIWSh76hj/OjC4dwL6jfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjYwNjEyMDUwMTA0WhcNMjYwNjEzMDUwMTA0WjAzMTEwLwYDVQQD
EygzNzNlOGJiN2FlMTRkYTZkZTYwMzkzN2FjOWFkNWNhNmI0MzUzZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH7gaQgadPBqQ4sx7f8KyUQEUUj1
twPns/fOmbct1X9HIeLTTmw5cz2TzPo7FXpNUw1xzOBlTr0u2A6AqHutnf4tFBr/
j2PTP3JfE5+Mr7/59LKusvBYUVNEqNtbMkL92o5i/fKcsowuAAv7X7yMnA2FMDnH
8aZEWG+NxB3V6UbYPs+9U3SNL5FTp5o2AiNFdZaqNnKxsltQ3q+8DHtB66mOKgeP
YSZFgzTkdj2X6vkhBeXPc/lH/++W5cW0Vc8GhdwbdJk/QH8oPD9H24Ru913wXN4V
umZB5wvcwpzCmmMyuQgAjdp3dLhZd1XrjWqzP4aNfES2bSBlNz2h/vpiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc+i7euFNpt5gOTesmtXKa0NT5mMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnoeGIlr
PtX93aBP7McBdWC8K7QE5JsnkOgFN2P5fmepuQqghoi8A3P3cOYwqqtl4dc7gVO9
nsDzXTiZg3Nk7hmyoOZOi9Q4W+4bj+VPK2QXbCR4ZlP184A5Tp4W8E4iqlhtq91J
kDhxY41n73TJ4zyGSSp6eUbhmcHW/Yi9wJ1WLtjITR3uz9L1Jp+JSpB83YOE55Fq
D/QA6LYmRZ3+mCLvGe63yQInR3RtWHbIvZ8t4V16SdtGKRprRInLvV/Z+iBNnjv3
mAvxRi5dv0ishnatH/uT3pYBLcfmI+bLlLdXBW0vdGs5EOH8nWOJ7gs9YDX9htS6
xAJuzDiudanBJw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:10 2026 by rpki-client