Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          MiBP+gcsisO8msDT3dJ84UyJsagfbHuJOAtFmWGzE4E=
Subject key identifier:   65:4C:C0:55:77:EE:6A:72:A0:7E:F1:0F:3F:8A:A8:9D:84:4F:E4:05
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019ECA8D30567B4BF6A59E1D1F171968A5F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          117D
Signing time:             Mon 15 Jun 2026 09:11:51 +0000
Manifest this update:     Mon 15 Jun 2026 09:11:51 +0000
Manifest next update:     Tue 16 Jun 2026 09:11:51 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: rhGoXshEJW44JWUJqesTkMVZjfnrWpQSTh71j1JEHLw=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 09:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ca:8d:30:56:7b:4b:f6:a5:9e:1d:1f:17:19:68:a5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jun 15 09:11:51 2026 GMT
            Not After : Jun 16 09:11:51 2026 GMT
        Subject: CN=654cc05577ee6a72a07ef10f3f8aa89d844fe405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:7d:a6:c2:c9:3c:37:54:04:6d:e8:63:3d:
                    65:9f:ad:78:43:b7:33:81:59:45:a6:c9:be:8a:cd:
                    ab:b2:06:d8:4f:0b:7d:99:a8:ab:02:47:e4:11:02:
                    2c:87:78:ee:49:ee:6b:e8:57:21:c4:66:6c:03:0b:
                    6a:2c:86:e2:0d:dc:37:bc:8a:d8:71:40:b1:5b:38:
                    80:74:b0:96:00:60:33:1d:2d:65:fa:23:0f:f1:4e:
                    ca:48:73:aa:9a:7e:bf:09:ff:54:3d:e4:0a:1a:b8:
                    30:6b:fc:f6:5a:27:bc:b4:6f:27:29:b0:dc:3d:86:
                    6a:3e:60:be:81:2d:f6:4f:d0:96:29:ce:5b:c0:77:
                    16:ee:bd:c8:65:68:2e:d8:ef:f1:2f:4f:14:8d:19:
                    e3:74:22:92:fd:34:32:b3:b4:98:25:ca:ec:42:a3:
                    ae:73:1b:0d:e3:c8:36:17:b9:72:f8:d9:7a:10:20:
                    e3:90:8f:29:45:1d:d8:60:a9:22:54:cc:f4:82:ea:
                    17:7f:09:41:99:32:bf:8b:06:06:e0:50:4b:2a:cb:
                    1a:a0:0d:cd:aa:51:00:8c:22:92:8e:fd:aa:c9:07:
                    38:6a:b0:f9:84:70:9f:8a:34:e0:59:4b:2f:e4:cf:
                    6e:b2:e7:86:d5:5c:a9:16:82:d5:1f:e2:e9:6a:37:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4C:C0:55:77:EE:6A:72:A0:7E:F1:0F:3F:8A:A8:9D:84:4F:E4:05
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:76:67:86:53:cc:de:ac:de:2f:48:a2:e4:ef:d8:00:52:
         ca:c0:0f:d1:74:f7:7a:0c:76:7d:f8:39:c7:6b:b4:ae:70:d7:
         39:16:e0:ed:84:d3:db:41:8d:ff:ac:08:ff:e6:1c:04:bb:1f:
         34:5a:3c:3c:55:b1:50:b7:d8:fe:9d:ad:ee:a4:a3:e1:ff:d3:
         0b:2e:aa:82:91:56:aa:52:79:12:8b:74:35:11:aa:99:db:6c:
         e4:5b:e2:03:8a:be:d9:8c:87:36:40:b4:d4:35:19:f5:7f:a4:
         8d:ef:6f:00:46:29:04:45:34:e0:08:70:98:43:99:49:8e:a7:
         67:a7:a6:62:f7:27:bf:20:63:d0:51:8f:70:71:53:fc:5b:b6:
         99:41:73:88:16:ee:16:25:c4:5d:fc:f4:d5:05:46:d5:04:30:
         45:fa:11:e3:ba:89:7c:3c:91:fe:85:7a:3a:18:71:a8:d6:94:
         b5:df:39:70:f1:4d:5e:10:db:20:9e:f4:dc:b5:69:7c:0e:e5:
         f9:b7:83:a1:2d:c3:2e:32:64:05:97:8f:b8:4a:0c:95:2b:c5:
         ad:23:1d:24:ca:13:0f:37:9c:7a:ce:13:9f:3d:c6:88:24:63:
         67:9f:02:fc:29:0a:82:82:13:67:98:0e:28:d3:99:61:f0:d8:
         d0:62:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 19:45:29 2026 by rpki-client