Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          ngAOyeWFTTiDYt9615SUq3uOHpDJEhNN0lp4mkMBRrU=
Subject key identifier:   E6:62:47:29:76:99:11:75:93:65:24:A5:A2:2A:23:A5:8C:45:07:11
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019E311717143DC0EA15D6A2DF0F642D9AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0949
Signing time:             Sat 16 May 2026 14:00:57 +0000
Manifest this update:     Sat 16 May 2026 14:00:57 +0000
Manifest next update:     Sun 17 May 2026 14:00:57 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: 092N17NMpekQYhmeK7+e3dFfitFLpZOCpR+ExVd9Zis=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:17:14:3d:c0:ea:15:d6:a2:df:0f:64:2d:9a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: May 16 14:00:57 2026 GMT
            Not After : May 17 14:00:57 2026 GMT
        Subject: CN=e662472976991175936524a5a22a23a58c450711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:b4:2d:73:d5:03:ef:48:94:05:8b:66:53:
                    1c:6d:57:a3:23:53:28:4c:fd:90:e2:f5:12:73:e5:
                    1c:7b:e0:b7:51:01:db:d7:50:59:12:44:32:2b:e4:
                    3d:28:88:08:c1:5f:04:d1:f7:32:1d:ab:1a:04:4c:
                    b5:5b:61:a3:23:84:2e:6c:e0:c2:73:2b:0c:d5:b1:
                    5e:16:9c:28:bc:95:3e:a5:53:58:fa:f0:81:41:02:
                    ac:32:48:ac:4c:71:58:f7:ab:6c:d9:f5:71:33:15:
                    bd:3e:eb:65:98:fd:9b:ff:e6:0d:9f:c3:89:8c:b0:
                    48:99:6d:68:ea:03:af:0a:c9:91:ff:52:6d:eb:7a:
                    e6:30:95:4e:f3:36:24:87:43:f7:98:1f:fd:af:4e:
                    ba:aa:57:06:cc:ef:f4:4e:d3:40:81:50:df:a0:0d:
                    2c:69:6b:8b:4f:41:68:54:26:fc:6d:9f:34:43:79:
                    08:6c:01:88:6d:d2:13:6d:ba:a3:58:0e:84:bd:a9:
                    cb:4d:6d:c5:1d:61:4d:bd:84:03:a6:c7:fd:97:27:
                    ed:91:1a:98:2f:86:ed:67:3d:30:99:5b:4e:cf:ee:
                    2b:73:e3:f5:ab:54:af:4f:a9:24:63:06:25:10:ed:
                    bd:e6:2f:43:5a:d1:74:39:f7:34:63:4b:40:3e:5a:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:47:29:76:99:11:75:93:65:24:A5:A2:2A:23:A5:8C:45:07:11
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ec:b4:3d:12:94:82:07:18:c1:43:19:ff:04:37:b7:f9:b8:
         0e:91:76:ca:9e:8e:14:39:ab:a7:9a:42:36:ae:c9:94:1d:96:
         bb:7a:93:de:b7:2f:0c:f0:1e:11:4f:33:58:f3:1b:ad:14:6e:
         1f:a5:5c:a6:27:08:ab:e7:eb:e7:a5:83:4c:c2:46:68:91:c0:
         d3:c7:8b:7e:b4:43:11:77:f3:f0:27:4c:ec:31:06:d9:fd:3e:
         58:00:c1:56:63:f4:77:3b:a6:fa:b5:51:51:76:2b:d2:98:ef:
         de:d7:84:d0:b6:30:8c:c8:d6:03:bf:14:9b:7e:f8:b0:f5:6a:
         a7:7e:e6:b7:82:68:84:75:12:1c:87:97:36:81:27:4a:66:0d:
         8c:1e:52:51:fb:92:b0:20:3c:75:a8:79:93:ee:eb:7e:17:3c:
         49:b5:de:15:3c:42:49:f1:18:79:00:12:b3:ad:20:14:b9:da:
         3f:30:0e:af:1d:54:22:41:6d:b0:a7:9b:36:48:e2:a2:39:44:
         57:65:23:93:a5:32:b7:21:31:a0:a9:a9:7b:18:ec:0e:99:18:
         a0:43:5e:23:3c:9f:34:cd:88:34:a1:4c:5c:19:96:19:ba:1d:
         5a:9a:1d:ea:97:a7:fd:39:6e:ae:f1:61:3c:20:9f:f9:0e:d4:
         51:3d:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:38 2026 by rpki-client