Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          VgijUt/5Yi99w6Mf+RSGa5KHaEm3Ctzw92aUbugoYN4=
Subject key identifier:   3A:07:DE:5D:47:DA:BC:EE:61:D7:7B:F4:D7:60:E6:EE:FF:FA:3D:12
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019DE9D9FC4A48C346829277E3B8F311E328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1107
Signing time:             Sat 02 May 2026 18:01:10 +0000
Manifest this update:     Sat 02 May 2026 18:01:10 +0000
Manifest next update:     Sun 03 May 2026 18:01:10 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: yfgvWGgZXVxZ/uM1dDMiS0KxVRB8JqdFzwT3x5MJB9U=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: wnQxwp_lBcwaYlV8R_aLBhYHQ_4.roa (hash: +gVljvgpDov6yW4C4I3llwkta8lISO5nE4TcWGYyKfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e9:d9:fc:4a:48:c3:46:82:92:77:e3:b8:f3:11:e3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May  2 18:01:10 2026 GMT
            Not After : May  3 18:01:10 2026 GMT
        Subject: CN=3a07de5d47dabcee61d77bf4d760e6eefffa3d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:ea:46:76:68:72:31:0d:63:5c:0b:ef:68:
                    e5:13:3c:5b:d7:00:ea:5f:5d:db:ef:2c:d0:aa:2f:
                    06:62:55:b7:ed:8f:c1:49:df:6b:68:7f:fe:57:1e:
                    85:5e:b5:70:4b:ff:d1:63:b1:b3:79:54:91:a5:52:
                    1c:74:2a:03:28:b9:6e:ac:d6:e0:bf:0c:c5:1c:dc:
                    d2:ed:04:e5:3a:40:13:5a:0b:8d:f6:bd:95:e1:17:
                    82:24:8f:31:de:cf:f5:4d:0b:5f:af:5b:42:3c:e0:
                    4a:bc:9e:61:37:6f:cf:fb:5b:d7:36:d8:39:5a:fc:
                    c5:84:94:67:0d:27:86:c1:94:bb:0a:d0:c2:2c:f9:
                    93:3e:f9:b1:fd:e7:97:85:fb:bd:e5:17:90:b0:b1:
                    7e:5f:bf:d6:dc:1e:f9:d8:41:bc:84:31:ed:11:ad:
                    aa:15:b8:48:a2:63:98:02:e0:7e:e6:53:8e:59:a2:
                    43:f6:bf:35:57:00:c5:01:ee:79:40:1b:02:e8:5d:
                    3b:7d:c6:5c:cd:b8:89:35:cc:40:47:61:24:d4:b7:
                    87:17:39:b5:ee:11:7f:3f:8c:44:8a:e5:d4:5b:5e:
                    ad:3c:d2:00:df:b9:bc:e0:0a:88:7a:e5:ec:8f:5f:
                    69:9e:74:ce:5c:23:db:c6:2e:f3:51:df:7a:f7:ff:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:DE:5D:47:DA:BC:EE:61:D7:7B:F4:D7:60:E6:EE:FF:FA:3D:12
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:73:81:c0:63:82:c7:e2:6d:76:97:61:09:9c:9b:67:b9:37:
         d9:29:ee:bc:94:f9:df:bf:7e:3c:46:c6:c3:19:d0:3f:4b:42:
         8e:4c:4a:e8:a2:20:37:ff:40:f6:ec:29:f5:cf:10:f7:c4:62:
         5d:24:42:4c:90:ad:b7:6b:97:ea:0e:9e:1b:5c:ae:56:e7:02:
         a0:fb:f3:90:d9:b7:3f:27:57:5d:b8:d3:6d:e7:87:bf:d6:74:
         38:6c:33:18:a8:59:30:44:38:6a:e5:5d:a3:6e:33:72:e5:65:
         4c:f9:7c:6b:78:21:70:89:34:4a:50:11:1e:b8:29:be:66:e4:
         3b:06:cb:06:01:d7:cb:dd:e1:93:49:16:95:f5:73:ee:b0:fd:
         eb:84:e6:55:5f:fa:1a:11:94:02:69:ab:4a:d7:31:bc:bb:9c:
         ed:85:c5:97:c3:07:94:58:4f:bf:5f:2f:f4:eb:0c:c9:09:a6:
         f6:5e:f6:04:b0:37:8c:26:fd:4f:1e:dd:7d:39:39:c7:9e:78:
         55:ce:b5:c4:19:bd:d1:81:c9:cd:16:3c:9e:ee:cf:64:72:77:
         0b:67:5a:5b:6d:4f:41:30:46:9c:ce:d0:63:91:04:3f:42:b3:
         eb:1b:b1:84:d5:8b:8d:d7:2e:8e:75:bf:24:65:23:7f:b5:31:
         74:53:6c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3p2fxKSMNGgpJ347jzEeMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwNTAyMTgwMTEwWhcNMjYwNTAzMTgwMTEwWjAzMTEwLwYDVQQD
EygzYTA3ZGU1ZDQ3ZGFiY2VlNjFkNzdiZjRkNzYwZTZlZWZmZmEzZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTbqRnZocjENY1wL72jlEzxb1wDq
X13b7yzQqi8GYlW37Y/BSd9raH/+Vx6FXrVwS//RY7GzeVSRpVIcdCoDKLlurNbg
vwzFHNzS7QTlOkATWguN9r2V4ReCJI8x3s/1TQtfr1tCPOBKvJ5hN2/P+1vXNtg5
WvzFhJRnDSeGwZS7CtDCLPmTPvmx/eeXhfu95ReQsLF+X7/W3B752EG8hDHtEa2q
FbhIomOYAuB+5lOOWaJD9r81VwDFAe55QBsC6F07fcZczbiJNcxAR2Ek1LeHFzm1
7hF/P4xEiuXUW16tPNIA37m84AqIeuXsj19pnnTOXCPbxi7zUd969/9Z+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoH3l1H2rzuYdd79Ndg5u7/+j0SMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHOBwGOC
x+JtdpdhCZybZ7k32SnuvJT5379+PEbGwxnQP0tCjkxK6KIgN/9A9uwp9c8Q98Ri
XSRCTJCtt2uX6g6eG1yuVucCoPvzkNm3PydXXbjTbeeHv9Z0OGwzGKhZMEQ4auVd
o24zcuVlTPl8a3ghcIk0SlARHrgpvmbkOwbLBgHXy93hk0kWlfVz7rD964TmVV/6
GhGUAmmrStcxvLuc7YXFl8MHlFhPv18v9OsMyQmm9l72BLA3jCb9Tx7dfTk5x554
Vc61xBm90YHJzRY8nu7PZHJ3C2daW21PQTBGnM7QY5EEP0Kz6xuxhNWLjdcujnW/
JGUjf7UxdFNsFw==
-----END CERTIFICATE-----
Generated at Sun May 3 03:12:47 2026 by rpki-client