Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          BJis8x+QsJBRPOV2Lmf6WwCSroCo0ePb1UD85HwlZZQ=
Subject key identifier:   32:7E:0B:D7:68:6B:D9:D9:7E:0E:E0:4A:83:AF:2D:38:39:EE:5A:DD
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       019EB7A1419820D359A68CCA99E18743BEA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          18EA
Signing time:             Thu 11 Jun 2026 17:00:59 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:59 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:59 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: MCmrM+48wTJmzZHf8a+u2/HamNR0a+rkPdXszaFCPRc=)
                          2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:41:98:20:d3:59:a6:8c:ca:99:e1:87:43:be:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Jun 11 17:00:59 2026 GMT
            Not After : Jun 12 17:00:59 2026 GMT
        Subject: CN=327e0bd7686bd9d97e0ee04a83af2d3839ee5add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:e7:53:bf:03:1f:40:b6:59:6a:02:80:aa:
                    da:3b:91:3d:74:23:61:f0:a4:85:30:79:d8:89:5a:
                    5d:31:3e:9b:21:b8:b1:63:30:b0:3d:1c:aa:20:b0:
                    c7:3e:88:01:c6:9d:93:33:22:d0:2f:b4:fb:3d:1e:
                    9f:51:1c:58:98:89:21:ed:7f:e0:68:fd:a6:b4:84:
                    ea:9a:cb:29:5d:35:a2:65:1f:7d:b2:46:8b:83:dd:
                    60:c9:de:fa:ca:28:18:fc:97:58:a8:83:f4:bc:30:
                    19:5c:a0:64:5a:84:31:cb:3a:c1:56:d7:69:81:23:
                    40:46:5e:bf:c5:d9:ba:48:a5:72:fb:8f:b8:57:41:
                    07:94:38:93:95:43:2b:23:31:49:94:91:5d:c5:3d:
                    e6:7b:fb:f5:1d:f6:e8:5a:31:63:05:c0:43:63:02:
                    5e:17:99:2c:ee:f1:d9:7a:ba:d8:6a:b6:47:70:9d:
                    b8:ad:3b:30:d0:27:05:e3:5e:0a:82:d3:74:ee:fb:
                    fc:95:67:a2:61:c0:04:96:c2:9f:f9:d5:48:19:14:
                    95:3a:e3:31:7d:f3:33:03:c4:f3:ce:61:d4:88:25:
                    10:32:0d:56:69:9e:d2:90:f9:bd:77:e6:9e:d0:c5:
                    e9:24:28:f2:e0:bb:98:eb:b9:b7:7b:8d:e2:15:2e:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:0B:D7:68:6B:D9:D9:7E:0E:E0:4A:83:AF:2D:38:39:EE:5A:DD
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:21:2b:8c:c4:a1:b7:c7:3d:ea:03:34:a0:ba:a4:e6:4e:
         c0:ad:e8:ad:d1:f1:d9:31:3b:09:35:9d:bb:6e:4e:a0:6f:12:
         87:c0:8c:02:92:c8:11:aa:c5:f6:8e:42:00:73:16:a1:bf:c6:
         88:bc:cd:e9:b1:39:cf:7b:dd:b1:69:12:6d:9d:6d:3e:e3:aa:
         6b:ca:da:71:cc:a6:aa:71:a4:5e:33:ca:28:84:9a:bc:0a:32:
         dc:8f:ab:0c:34:0e:7d:d0:ad:53:4f:3f:fb:cd:12:73:e4:e7:
         c4:fd:4c:5e:b3:31:af:69:2b:62:06:8c:10:24:4d:ba:9a:8f:
         95:de:05:d1:5d:8c:e8:32:cb:ea:e1:b3:e7:d1:49:5d:b8:1e:
         36:6f:9a:9a:69:0f:47:e1:e1:f3:78:a0:51:a2:82:f6:9d:24:
         c9:f4:83:f4:9b:8b:17:75:32:de:87:5e:6e:8a:ea:b5:13:d6:
         a1:d5:c1:13:bd:09:07:d2:0d:3a:41:70:39:e2:02:2a:b4:5a:
         5b:6c:7a:85:4c:cc:31:49:b2:28:4c:90:3e:6a:17:0a:70:dd:
         71:2f:d9:67:90:86:7f:6e:db:e9:29:27:2c:6c:f7:4b:6a:38:
         17:bd:51:58:ed:ba:20:c5:80:7b:3a:23:76:8d:71:02:5b:1f:
         98:ff:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:23 2026 by rpki-client