Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          GFyxydrJM19qZvlRhQCGUmeBEKJ88Sd9eKzaHLVmdJc=
Subject key identifier:   44:E4:BA:36:1E:4A:4D:8B:F0:77:43:C5:5F:1F:EC:74:16:41:7E:CD
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019EB8458859E90E6D31D611E991FC973C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          1038
Signing time:             Thu 11 Jun 2026 20:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:24 +0000
Files and hashes:         1: 9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa (hash: LvAW/dorcWJs7ZFyV1eDoNVGXIMQa9jTmGb0oFcyF74=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: XlbbB42ZYfKoGsFP+0X/QZQQjUnn3co3ovWoWi9MAg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:88:59:e9:0e:6d:31:d6:11:e9:91:fc:97:3c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Jun 11 20:00:24 2026 GMT
            Not After : Jun 12 20:00:24 2026 GMT
        Subject: CN=44e4ba361e4a4d8bf07743c55f1fec7416417ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:41:0c:d6:bd:2c:70:b3:7e:3b:80:2f:b1:
                    4e:1c:82:2c:a8:38:63:07:70:aa:ec:e3:ce:52:fa:
                    47:09:25:40:e8:c2:1c:0b:2f:3e:9f:d4:c5:d1:aa:
                    a8:f2:0e:46:2c:dd:59:50:da:ea:fa:22:5c:c8:96:
                    1b:79:e0:85:b7:b1:22:53:a8:a0:70:9f:8f:ea:75:
                    81:04:84:08:06:b7:e9:4e:78:f7:19:26:c5:f5:2d:
                    20:c5:56:a5:85:5b:62:58:1a:36:c3:c0:64:ac:5e:
                    c8:36:28:5d:d5:ab:7b:ec:d4:61:f2:f9:f6:86:e4:
                    60:a5:5c:eb:50:0a:b3:bf:d5:ce:85:25:b0:b2:33:
                    03:de:a3:0a:a4:c0:d7:0b:f7:40:96:7b:b1:6c:1e:
                    43:1f:53:ba:1a:87:0d:8d:20:92:49:02:11:ec:ba:
                    f8:26:8f:2c:82:93:bb:05:e2:04:89:8b:19:f9:87:
                    d2:81:03:e6:3b:6c:9c:df:c5:85:aa:74:8b:90:7c:
                    cb:e2:07:da:38:55:61:57:6b:3b:92:d5:c0:f5:1e:
                    cf:46:d2:bd:8f:8b:27:ec:d6:cc:d7:3a:c7:5c:51:
                    20:ce:e0:0b:4f:b8:46:c4:0e:81:77:38:c7:eb:51:
                    15:c7:41:d7:87:9e:9c:d4:e4:4a:ba:0c:66:ea:55:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:BA:36:1E:4A:4D:8B:F0:77:43:C5:5F:1F:EC:74:16:41:7E:CD
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:c1:73:3d:af:60:ed:66:c6:71:71:5c:65:b5:f3:09:ce:
         7b:0e:d7:f6:55:f7:7e:eb:40:f4:b3:14:79:94:1d:79:c5:b7:
         e2:7b:21:7c:10:2d:3b:c2:6d:48:ea:15:26:1e:5c:b4:34:de:
         56:1a:ed:c9:df:db:32:97:77:e0:0b:06:6b:2f:cc:aa:cf:84:
         8a:50:29:d4:80:c4:9e:3f:6c:36:ac:bc:4e:90:58:24:de:38:
         41:e9:9c:74:5c:7b:b7:27:24:b2:95:e1:f9:3d:3d:15:88:2a:
         d7:eb:81:f6:00:b4:60:fe:ed:64:b2:35:af:90:90:62:ce:43:
         0d:4e:d1:1c:a7:1c:b5:22:d2:ed:66:90:f6:e0:33:f3:c2:12:
         b6:19:5d:af:13:bb:9f:12:65:4c:1a:30:5a:59:1c:29:1e:40:
         7c:c5:76:2e:02:46:99:64:18:04:c8:a4:c2:d4:d7:5d:7d:96:
         9f:af:af:5b:01:73:46:0b:4e:32:54:bf:e1:46:ac:e0:0a:a0:
         a7:de:c1:ac:c0:a9:8e:22:69:3e:fe:43:e5:df:4a:32:69:fb:
         4f:a9:2d:dc:71:9f:4e:ad:50:fd:cd:7f:a3:4d:c0:89:b7:25:
         2d:ba:6b:41:da:6e:d2:9d:19:43:47:59:17:56:7d:f4:4b:09:
         a8:23:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:11 2026 by rpki-client