Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          wzLX9jqYdpQV52RISsG02iTq4QhhiyF/czUkmQK7EZ4=
Subject key identifier:   0B:75:01:CA:83:5B:F1:94:06:44:5A:91:71:61:17:BF:32:64:50:98
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       019E4F8FEBECDDBA6D9C5DD1D82185270264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          191F
Signing time:             Fri 22 May 2026 12:01:32 +0000
Manifest this update:     Fri 22 May 2026 12:01:32 +0000
Manifest next update:     Sat 23 May 2026 12:01:32 +0000
Files and hashes:         1: 6oE2tV5xJLygHD8211ohyUC5Fhg.roa (hash: Z/3O7eTXu9453+Wb+f/D4hi5mlRSIZ2Q9SX36foWOhU=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: qvl9g7u/OSnbe7WComwm4+2rKB+yBztClKjsvZxELdk=)
                          3: FSc2LNK0DXWFbmxIzJTQoPNPaHI.roa (hash: GV3WKNU7MtJ1suHdu7xzv5MkwegHMMBiDtRM53ANEdc=)
                          4: a6C5SFiUk80yaQysAFlbgHQ3BJE.roa (hash: vtb8i4mZAE6TV6J6coLOSP+tnQ8FsVz6tF34wr10+CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:8f:eb:ec:dd:ba:6d:9c:5d:d1:d8:21:85:27:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: May 22 12:01:32 2026 GMT
            Not After : May 23 12:01:32 2026 GMT
        Subject: CN=0b7501ca835bf19406445a91716117bf32645098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:df:5c:1c:a7:47:f8:8a:7b:58:c0:57:c4:
                    94:0c:b3:95:ac:14:87:96:ef:b0:76:f8:b0:77:b3:
                    18:ad:c9:71:d0:57:ec:34:78:4f:02:02:e3:0d:07:
                    78:b4:b7:4f:30:68:43:b8:b1:09:c9:e0:01:6a:f5:
                    b2:6e:54:31:bd:a6:41:51:ef:c1:f1:96:2a:9c:c1:
                    2e:83:86:ba:21:f3:e3:ae:af:9d:fb:5a:bc:18:32:
                    d3:7a:4b:97:a3:da:7b:0f:b1:31:8b:0f:48:47:99:
                    62:7d:48:4e:c6:9a:d3:11:6c:d0:3e:ef:a1:54:5f:
                    3e:f2:ab:a6:56:7a:a6:f2:e3:af:1b:68:9f:2c:39:
                    57:99:4f:55:81:6e:1e:3c:a3:0b:ac:df:83:3c:3f:
                    78:7e:ab:b4:a3:a5:f4:cc:4d:85:ec:5c:58:05:43:
                    4d:36:45:22:ef:5b:bf:fc:05:94:63:46:db:d5:07:
                    45:a6:ef:3d:5b:c0:26:0a:8a:30:6a:69:7b:47:ef:
                    48:17:d7:df:ed:8d:86:4d:81:05:93:57:3c:3a:ee:
                    9c:a2:79:57:82:6e:46:7b:c6:fa:8e:3f:d0:54:3a:
                    ec:68:bb:22:eb:22:49:10:4b:37:4d:3f:da:ac:05:
                    2a:d4:e2:19:02:b2:3e:d9:99:1d:5b:a8:30:21:34:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:01:CA:83:5B:F1:94:06:44:5A:91:71:61:17:BF:32:64:50:98
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:51:67:99:bd:53:a3:92:15:40:64:6c:ee:b4:c4:9d:5a:44:
         89:bb:54:4a:e7:65:ff:97:45:e8:81:a1:4a:9a:0d:7d:4b:02:
         89:ff:ce:bf:c3:7a:2c:4d:b3:d5:72:d2:3d:a9:39:50:35:06:
         48:62:bb:9f:36:42:be:ca:0e:59:51:2b:a9:17:b2:6d:6a:43:
         fe:90:b5:69:21:8a:19:16:fd:54:bc:c9:a7:9b:f8:45:68:b8:
         18:54:1d:f9:c1:d8:44:80:65:6a:57:60:8e:17:07:a1:42:0c:
         f7:88:96:24:ae:07:23:b2:b7:7e:d9:1d:7b:4d:dd:ef:5c:a5:
         3d:9e:b7:ea:bf:19:95:08:69:a1:9d:ed:06:89:16:17:01:d6:
         cf:ba:92:17:81:87:0e:c1:7b:c9:4d:69:0a:ff:d9:d8:29:ca:
         b3:c8:8c:b6:56:13:f8:60:af:d6:4a:4a:98:b6:f1:88:c8:f7:
         66:7a:c6:5f:8b:5e:f6:78:dd:96:78:e5:76:5e:c7:7d:06:34:
         77:a9:61:0c:b7:fb:6f:7c:d5:a0:b6:9e:be:29:9a:0c:b9:a1:
         71:bf:3f:74:a2:bd:5f:2f:fb:f6:ec:3b:55:21:55:a6:3a:13:
         39:b5:4e:78:2f:b8:50:8d:5c:6c:59:3b:8a:d1:77:8d:c9:fe:
         a3:8f:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:49 2026 by rpki-client