Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File:                     eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier:          r+dXOhuqZbR2w9lXi6riyHSKO3TidkTUQSoZJ7X9qYc=
Subject key identifier:   E4:A5:B2:ED:FC:BD:7B:77:AB:56:5B:33:46:4E:95:77:E5:48:29:78
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer:       /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial:       019EC1B75771CF0E1B25FE09D2B61B1FBA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number:          1965
Signing time:             Sat 13 Jun 2026 16:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:18 +0000
Files and hashes:         1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
                          2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: AToNq4TX1wZd9QoxpwDAjDcjX+7qOyRbHNgdrBtOsxg=)
                          3: g2b0tfI5DAyRO9sqLcgf2kKw8tI.roa (hash: b/mHAHFQZqIoz/hcls8xHY15nIJE9JGUhZwiQd60kVE=)
                          4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:57:71:cf:0e:1b:25:fe:09:d2:b6:1b:1f:ba:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
        Validity
            Not Before: Jun 13 16:01:18 2026 GMT
            Not After : Jun 14 16:01:18 2026 GMT
        Subject: CN=e4a5b2edfcbd7b77ab565b33464e9577e5482978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:44:1b:b9:71:99:6b:27:7d:75:c6:7d:ba:
                    0c:ed:75:1d:e8:b2:14:34:c5:96:db:0f:1d:49:fe:
                    da:b0:a0:57:33:18:ef:04:de:d3:bf:87:24:12:82:
                    5c:85:af:0f:8d:79:27:99:e1:5b:a9:af:9e:64:0c:
                    cc:0d:f1:c6:b8:a3:62:50:fd:d5:7b:6d:f0:33:3c:
                    ba:03:1c:ff:e9:64:95:97:3c:9d:0b:c3:d8:5f:64:
                    70:84:2b:8b:bf:f1:fa:c7:97:a5:34:10:5b:f6:f5:
                    f1:b2:1d:dc:39:13:f1:87:df:aa:a3:5b:52:c8:08:
                    3a:b3:6a:04:b4:db:47:ae:39:31:2e:6f:b9:5f:03:
                    ba:dc:42:0f:3b:65:75:eb:02:37:31:eb:15:d9:ab:
                    ce:4b:41:d9:7d:8a:06:a9:7e:37:eb:24:4c:67:a7:
                    b6:b7:18:54:dd:3d:18:da:5d:88:ef:3f:ae:33:4b:
                    e0:87:a4:9d:33:4f:3f:ac:57:c3:a7:8f:ff:0c:9a:
                    1a:8a:df:ff:56:7c:c6:c9:c7:d0:85:37:5c:9e:d8:
                    2f:ec:2f:c9:f0:be:94:59:47:76:cf:d8:5f:c5:33:
                    ea:52:de:6a:2c:e0:e9:a1:c8:6d:b0:1c:16:f4:f7:
                    ad:40:25:8a:8f:ad:75:a7:a8:b8:87:2e:e8:c0:ae:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:B2:ED:FC:BD:7B:77:AB:56:5B:33:46:4E:95:77:E5:48:29:78
            X509v3 Authority Key Identifier:
                keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:17:18:8d:40:de:31:96:3c:e5:bf:11:9d:fa:9e:d0:b3:b8:
         ac:4e:d1:76:0c:68:a0:d0:c0:fb:6a:8f:5d:af:50:4b:3f:9b:
         0d:11:98:c3:39:0f:94:e4:df:57:6d:d8:ae:f8:18:f0:19:40:
         79:21:95:3c:be:2f:fa:25:00:ad:8f:05:9a:2d:88:33:70:2b:
         f8:b3:79:24:38:de:0a:12:23:10:23:58:1c:2f:64:03:e9:34:
         03:c4:95:76:d3:dd:0c:1a:92:09:1c:da:fd:6f:38:d2:d1:7e:
         3d:64:d0:b1:2a:d9:9d:1d:e3:8c:3d:a8:b4:64:4b:2c:c9:73:
         44:d3:cf:3c:26:45:0a:d8:5e:3c:8b:c3:cf:d8:3b:6a:d5:c4:
         a4:75:85:32:e1:0b:b2:2e:dc:95:c3:b1:27:81:92:50:1c:1a:
         80:bb:94:cb:26:63:3d:11:3e:96:15:c0:90:3b:c2:65:1d:df:
         e6:03:72:f8:d4:7d:ec:af:dc:10:42:b6:9d:64:db:35:0b:88:
         9b:fb:62:6d:27:5c:af:9b:af:12:f0:9b:c8:68:e9:85:80:f8:
         07:41:4b:f5:1e:2f:44:0e:f9:ad:ba:63:29:68:a8:be:52:a3:
         9f:98:d5:b1:fd:08:97:41:1d:86:46:16:6a:ca:cc:fd:73:90:
         b3:b6:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:29 2026 by rpki-client