Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          wDVZpi6gfAJtukbmSGz8eznnBEhCj0bFas/EqlZUJWc=
Subject key identifier:   15:75:03:64:66:A0:A6:CB:36:1A:D4:A6:00:6F:E3:D2:AE:B3:75:53
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019E49C494D43A0799ABDEF2FF9BF0887BD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          191C
Signing time:             Thu 21 May 2026 09:01:20 +0000
Manifest this update:     Thu 21 May 2026 09:01:20 +0000
Manifest next update:     Fri 22 May 2026 09:01:20 +0000
Files and hashes:         1: 6oE2tV5xJLygHD8211ohyUC5Fhg.roa (hash: Z/3O7eTXu9453+Wb+f/D4hi5mlRSIZ2Q9SX36foWOhU=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: 1nK3ycxMcUZw8z1hMarX2XTtkv+48AynBXYKopkrkJI=)
                          3: FSc2LNK0DXWFbmxIzJTQoPNPaHI.roa (hash: GV3WKNU7MtJ1suHdu7xzv5MkwegHMMBiDtRM53ANEdc=)
                          4: a6C5SFiUk80yaQysAFlbgHQ3BJE.roa (hash: vtb8i4mZAE6TV6J6coLOSP+tnQ8FsVz6tF34wr10+CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 May 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:49:c4:94:d4:3a:07:99:ab:de:f2:ff:9b:f0:88:7b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: May 21 09:01:20 2026 GMT
            Not After : May 22 09:01:20 2026 GMT
        Subject: CN=1575036466a0a6cb361ad4a6006fe3d2aeb37553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:13:ea:0e:b5:d3:6e:d8:a9:80:fc:5b:a4:
                    62:0f:9a:b1:06:1a:24:35:1a:c8:b5:84:c6:b1:ee:
                    d9:4c:c6:c5:fa:9c:20:84:3c:d2:9b:88:a4:fc:1a:
                    32:cc:12:66:7b:e6:20:bb:97:23:e3:ff:c9:ed:fc:
                    57:12:22:37:ed:f2:37:e4:c5:c1:31:1e:99:7b:d0:
                    72:81:d1:93:05:20:01:a8:a7:94:b3:f4:ab:55:0a:
                    62:eb:7d:72:c8:d0:80:bd:9e:be:15:d7:a8:31:db:
                    c9:e5:80:38:be:5c:01:bd:8c:39:7f:bd:71:11:e4:
                    e2:03:4b:40:32:dc:f3:ad:38:35:90:ce:58:5f:c4:
                    29:33:82:5f:6d:d5:ab:43:05:52:ba:04:a1:84:2e:
                    2d:c0:96:eb:69:d8:f9:a1:ae:10:e4:e2:58:c4:37:
                    a2:24:25:89:d6:2d:bf:e3:10:1d:23:39:d2:8f:b6:
                    42:d6:74:68:4c:88:09:07:3f:da:1f:7c:c3:2c:5c:
                    15:d0:e6:cd:d6:e7:8e:16:b9:cb:3f:2d:2d:31:eb:
                    38:98:de:98:17:04:6a:c9:52:e1:c3:20:1b:c9:17:
                    e1:67:e8:05:74:00:01:97:e3:7b:4d:d7:d4:2d:41:
                    3f:1a:25:0a:80:06:d5:1c:d8:26:42:74:8b:ee:92:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:75:03:64:66:A0:A6:CB:36:1A:D4:A6:00:6F:E3:D2:AE:B3:75:53
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:94:9a:a1:59:9d:ff:dd:52:58:6d:1c:02:77:74:99:7e:7d:
         2b:89:08:dc:a8:7c:b7:73:46:8e:c5:6f:02:ce:4f:2f:7c:68:
         f9:6f:30:e3:a8:26:84:15:ce:b8:6f:c2:ad:5b:53:44:11:0d:
         17:22:81:ca:97:12:65:0c:75:5f:27:0a:96:7f:a4:97:b4:d0:
         fa:dd:9c:f3:b1:c6:3f:d1:58:de:5c:f2:25:b0:9d:c4:93:c7:
         e6:81:18:ed:b7:87:8a:86:e8:7e:fa:11:c6:fb:51:26:78:73:
         fe:36:b1:18:da:22:ab:8a:51:98:03:26:bc:7d:d9:30:82:18:
         fc:7e:11:ed:fe:d1:cf:cb:0d:09:85:6a:cd:5e:63:75:f2:f5:
         6c:a6:78:10:9c:06:e5:b5:bd:94:76:7d:a7:09:8c:12:2a:f7:
         4b:5d:28:59:84:f5:b2:6b:82:7c:81:5a:44:4f:ad:ee:b9:19:
         cd:65:d9:21:ab:2f:1f:1f:40:e4:dd:93:8b:86:8c:37:74:06:
         9b:e8:56:60:7d:95:44:29:af:f9:e3:6d:28:f7:3f:b4:33:86:
         04:70:c1:a5:64:f7:41:ef:80:29:f2:2b:17:09:3c:17:c0:e1:
         16:5a:65:2d:1e:bd:31:be:9d:18:17:71:f6:d0:1d:a6:cb:1d:
         bf:08:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:05:45 2026 by rpki-client