Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          ddVb8XS/pz7RjpIrAoZFff8zd5dacd88yd1EaGs8hKA=
Subject key identifier:   35:4B:EC:CA:5C:01:E1:3F:3D:CD:9F:3A:4A:07:1C:41:C8:3D:48:D5
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019E300549F019A0FB71EC39457C792A068E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0FF7
Signing time:             Sat 16 May 2026 09:01:53 +0000
Manifest this update:     Sat 16 May 2026 09:01:53 +0000
Manifest next update:     Sun 17 May 2026 09:01:53 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: kkPq9hFxuw0Zl4wHlSORTc0u+u0o5U5rwT2OobUi7io=)
                          2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:49:f0:19:a0:fb:71:ec:39:45:7c:79:2a:06:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: May 16 09:01:53 2026 GMT
            Not After : May 17 09:01:53 2026 GMT
        Subject: CN=354becca5c01e13f3dcd9f3a4a071c41c83d48d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:bb:8f:7c:6b:48:04:f4:41:47:58:e3:8a:
                    25:1d:7b:ed:55:55:8b:9d:08:7e:4a:2b:42:48:b3:
                    5b:a9:6e:08:36:96:e3:b8:e6:5d:c1:dd:ce:c3:56:
                    d4:69:39:40:0b:11:e4:ac:4f:32:22:3d:67:0b:2e:
                    09:68:2c:79:93:46:54:14:76:9a:95:3e:1d:af:0a:
                    61:ba:da:42:52:cd:ea:56:5d:6e:a9:0f:ef:cf:62:
                    c6:d7:48:26:3d:97:7e:cc:ac:30:5b:16:71:92:c7:
                    75:29:26:0d:d8:04:e9:1a:94:06:c4:93:69:13:b8:
                    f0:bd:8c:6b:8d:6d:a1:5b:4f:04:af:7d:d4:03:dd:
                    91:4b:7a:06:e0:b9:33:b9:1d:e4:ea:1e:0a:61:d9:
                    9a:a0:0a:0a:e4:97:6e:d2:30:03:9a:05:95:09:df:
                    8c:f3:0c:00:fb:ef:d6:eb:32:e4:ff:9c:99:3d:de:
                    11:be:fc:21:3a:d7:03:59:86:0b:98:69:cb:ce:d8:
                    3e:d6:06:69:1f:a7:21:39:a7:09:3d:88:00:18:cd:
                    6d:f3:0b:bf:1f:60:72:9a:95:1d:15:4f:9f:54:52:
                    45:68:be:bc:a1:88:36:85:cf:07:24:b1:6a:ac:e7:
                    08:a4:6e:37:e2:8e:06:f0:81:1f:0f:b3:94:ea:88:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:EC:CA:5C:01:E1:3F:3D:CD:9F:3A:4A:07:1C:41:C8:3D:48:D5
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:ae:69:38:f2:51:2f:cb:93:17:24:ad:96:c3:ee:c0:3e:
         61:8c:62:3a:02:3b:53:17:c7:86:77:6d:11:6e:31:9c:98:c9:
         b1:78:9d:e2:f2:97:a8:67:90:b7:2e:09:c1:c4:f0:60:43:ce:
         8c:95:53:e3:c4:0b:ed:58:c0:15:23:48:8f:d2:08:4b:f5:8d:
         26:13:3f:c9:20:85:61:cf:0d:0e:f5:79:53:83:8d:3f:42:63:
         ed:f5:71:b8:48:1c:72:b0:82:61:fa:a9:1e:60:de:2c:91:db:
         04:55:95:39:86:39:c9:0a:b5:f9:cb:16:a5:e5:8e:21:4c:f7:
         7d:c7:7d:83:60:8c:49:af:21:32:a9:15:58:95:1c:15:75:67:
         dd:7c:b6:28:ae:b5:ae:45:54:27:d3:e0:27:8d:54:c7:86:05:
         ce:ea:c1:65:ae:c4:cd:dd:d0:dc:87:06:ce:e0:a5:9b:06:d2:
         2c:f4:be:b2:07:8b:78:af:6b:f2:c3:63:ae:d5:58:18:f1:11:
         97:96:3c:dc:44:99:e4:48:1f:78:29:ac:ff:01:06:4c:41:91:
         d5:34:a8:58:58:dc:53:20:c6:3b:a9:86:3f:53:cf:3c:1d:78:
         47:70:f2:7f:c0:b8:f5:4e:0c:f2:9d:07:ee:bd:77:04:12:dc:
         0a:41:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:07 2026 by rpki-client