Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File:                     ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier:          RHmt2J6CQSu+8GWnizp/uQ7xhdRxJhBmzvDWPSHVW2M=
Subject key identifier:   D7:ED:DA:DB:92:35:6E:0B:A0:56:00:0D:02:F3:F9:D0:EA:5A:DA:CE
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer:       /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial:       019E5CDD2B078AE9918F9DF3F9BC58036E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number:          1927
Signing time:             Mon 25 May 2026 02:00:58 +0000
Manifest this update:     Mon 25 May 2026 02:00:58 +0000
Manifest next update:     Tue 26 May 2026 02:00:58 +0000
Files and hashes:         1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=)
                          2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: c6u1JmdnbZqtrOJvIrjnTk31l96b6cONw8p+F8A7gdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5c:dd:2b:07:8a:e9:91:8f:9d:f3:f9:bc:58:03:6e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
        Validity
            Not Before: May 25 02:00:58 2026 GMT
            Not After : May 26 02:00:58 2026 GMT
        Subject: CN=d7eddadb92356e0ba056000d02f3f9d0ea5adace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:8f:06:05:bb:86:2f:bf:b5:30:88:1b:d5:
                    f2:c0:09:31:19:ee:06:79:f9:f1:21:a6:7a:c7:9f:
                    f8:3e:e7:c6:cc:ec:44:50:d0:c1:3a:83:2f:fe:57:
                    d8:4b:f9:82:a9:ab:8c:06:cd:c9:75:94:a1:27:97:
                    13:24:80:36:16:ef:cf:bb:1b:07:3f:08:e0:33:58:
                    08:7b:f7:79:72:71:fb:30:6a:99:96:b4:c8:cc:55:
                    fc:87:fb:37:b7:26:84:3c:22:bc:26:ef:b8:c1:a3:
                    ff:c3:88:5f:2f:c3:c4:4d:3a:2b:9f:6f:8c:4d:45:
                    8a:23:9a:1f:13:21:7f:f2:70:37:5e:1f:ca:9f:b8:
                    48:4b:7d:1b:fa:cf:f3:2f:98:66:04:a3:65:6a:61:
                    58:d9:30:02:d6:1c:51:71:37:21:a6:6e:37:89:da:
                    02:d8:af:9f:78:d9:76:fa:10:08:c0:95:45:38:bd:
                    e2:f9:6c:1b:48:88:90:b7:2f:7b:9b:db:03:99:1c:
                    de:cf:e7:bb:ad:4a:9a:8c:21:ad:d0:5f:50:d5:18:
                    09:a8:7e:a0:5a:90:dd:5d:5c:48:30:ac:05:29:4d:
                    c6:d8:34:a8:27:9d:01:e2:f4:5b:8a:f0:af:3b:7f:
                    64:35:c0:f7:66:cb:43:57:78:c5:79:a5:0c:25:9f:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:DA:DB:92:35:6E:0B:A0:56:00:0D:02:F3:F9:D0:EA:5A:DA:CE
            X509v3 Authority Key Identifier:
                keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:40:ce:72:19:e8:5d:1e:9a:06:ba:a3:d7:cc:56:44:d1:35:
         fb:bd:66:62:a3:b8:6b:31:cd:c3:9a:2c:52:72:ff:cf:79:36:
         e9:4c:40:71:66:59:9d:5a:93:12:ce:4d:03:60:05:08:ad:b5:
         cf:f2:59:7d:2d:40:9f:3e:3f:83:09:e2:92:b0:8e:8d:db:03:
         6e:ea:95:71:58:92:c9:f6:08:74:4b:04:29:84:11:06:6c:fa:
         b3:11:1c:46:97:6a:43:55:9c:ef:cf:12:db:73:ab:fd:31:bb:
         45:3a:95:fa:25:39:ef:d4:3e:3d:de:cd:c2:a6:5b:c8:b2:4e:
         8f:da:66:6e:a1:be:91:29:ab:f3:fd:54:8f:63:2d:cb:5f:42:
         ce:7d:9d:9c:21:9d:ce:29:74:2c:d4:96:4f:45:57:f2:74:d8:
         d6:52:07:8a:64:92:fa:e5:31:0b:1f:ba:d7:fe:11:fe:62:27:
         8f:fc:ad:cc:c2:e3:37:ab:eb:3a:86:c6:07:70:e3:fa:0e:23:
         a0:b0:63:e8:00:a8:da:3f:39:f0:9c:25:93:13:9c:86:cc:96:
         43:18:c6:e3:82:f4:d6:07:d7:cd:f0:47:56:3b:15:b8:93:0e:
         8f:32:a3:17:d1:b5:7d:4f:50:17:5f:60:82:5c:df:0d:ef:96:
         ee:b3:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:58:14 2026 by rpki-client