Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File:                     ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier:          7nU+KtjX/nPiHjOfQs88BtUIW9ckJU7qs843j6RKV/g=
Subject key identifier:   3E:77:33:10:4A:64:FA:BD:F7:34:75:FE:87:50:62:78:97:7A:71:AB
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer:       /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial:       019E9B17E41BCBEDF33F4491F191D346B339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number:          048E
Signing time:             Sat 06 Jun 2026 04:01:34 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:34 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:34 +0000
Files and hashes:         1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
                          2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
                          3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: pcFF/JnqG61sDuhY2ZKc+BfZBbbxe5YLSvJcuheRz5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:e4:1b:cb:ed:f3:3f:44:91:f1:91:d3:46:b3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
        Validity
            Not Before: Jun  6 04:01:34 2026 GMT
            Not After : Jun  7 04:01:34 2026 GMT
        Subject: CN=3e7733104a64fabdf73475fe87506278977a71ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:36:a1:e7:b1:ae:55:aa:85:88:9b:de:88:
                    46:ad:24:cd:be:fb:7a:f2:87:2a:a7:f7:51:7e:7c:
                    27:a8:47:48:52:b6:ef:c4:06:9b:f8:8e:9a:03:2e:
                    ad:eb:d4:49:72:d1:9e:8f:b0:ed:35:ab:ca:fa:f0:
                    dd:b5:5f:d0:12:3d:4c:85:91:a0:c4:48:f7:18:6d:
                    0a:28:58:58:72:89:6e:67:c0:33:d3:07:25:9c:45:
                    c6:9a:98:25:de:da:cd:70:e1:4f:6a:f1:83:18:0f:
                    fb:ae:9f:6f:7a:55:ea:d2:45:cf:77:b5:30:2d:dd:
                    c3:bc:3c:e6:9b:9a:3a:28:f7:9b:d3:99:be:93:a7:
                    55:fc:a1:7a:d4:cc:80:8d:1b:c7:87:31:4a:bf:1b:
                    49:2e:32:b0:42:45:c4:20:70:f9:be:43:2d:0b:c9:
                    5e:29:e6:fd:c9:98:26:7c:76:82:68:7b:8b:88:c7:
                    d4:a8:92:f7:c2:6e:35:f7:31:7a:cc:f1:cc:c6:ef:
                    c9:c4:49:eb:bd:89:f9:f6:de:9e:fe:7b:55:89:79:
                    b0:10:1c:a8:ae:f9:70:e1:d9:76:5d:53:56:ea:a3:
                    50:c0:37:c4:1c:25:01:1d:cd:32:30:42:77:76:f7:
                    c5:82:63:b1:97:94:76:95:cb:d2:ee:5f:8b:54:fe:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:33:10:4A:64:FA:BD:F7:34:75:FE:87:50:62:78:97:7A:71:AB
            X509v3 Authority Key Identifier:
                keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f0:c5:8f:36:70:9b:66:07:5c:e0:a6:4a:58:86:b9:20:79:
         16:16:2b:93:a1:1d:c0:1d:c1:01:97:89:d4:f5:de:58:0e:da:
         f0:f1:69:6c:86:34:93:89:e7:f0:8a:b4:0f:fc:2a:94:03:c7:
         9f:b8:19:55:1e:88:8b:4f:35:df:3d:90:e7:f4:cb:e7:dd:bf:
         15:ee:40:55:12:c5:38:c5:49:e9:ff:15:d0:f9:10:20:43:6c:
         65:f0:11:f3:f6:32:9f:d1:15:e8:99:b3:0e:cd:12:b3:88:ce:
         dd:7a:94:1a:75:a8:04:15:c2:95:01:b0:b7:5e:9d:1e:64:a1:
         8a:d3:72:65:ad:61:d7:8e:70:80:9e:49:d6:c5:40:0e:96:96:
         9e:59:b5:cf:6e:30:93:6f:04:93:90:f6:92:58:ae:be:86:75:
         a5:e9:0b:49:6b:1d:fb:76:7a:bb:6a:f7:f0:b0:3c:b6:c2:77:
         ab:46:df:c9:87:16:56:27:41:ed:42:ed:b8:1a:68:24:a6:b8:
         db:63:f1:7f:3e:b8:b8:ae:68:da:0d:4c:45:b2:fa:07:b6:27:
         6f:ea:59:49:f3:fe:6b:c8:f2:99:84:82:9e:e4:9f:44:3c:30:
         84:30:69:cf:dd:f2:cb:3b:b6:3b:05:f6:5f:2d:df:b7:c4:a0:
         a0:d8:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:15:37 2026 by rpki-client