Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          g/LGaLlubnpctW7F+BCz9SxaW2DC+aYmVnmheibOj9U=
Subject key identifier:   E2:60:FE:F4:50:83:D3:65:DF:7F:6D:16:99:A2:B7:BC:19:04:17:FA
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019F29243FDE378DB9DD2C3B9B1DEC63BD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          11AE
Signing time:             Fri 03 Jul 2026 18:01:09 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:09 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:09 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: fyBf+jNPYQ9k360G+7lMHAZISwf0W4UgFDyU30Aovtc=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:3f:de:37:8d:b9:dd:2c:3b:9b:1d:ec:63:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jul  3 18:01:09 2026 GMT
            Not After : Jul  4 18:01:09 2026 GMT
        Subject: CN=e260fef45083d365df7f6d1699a2b7bc190417fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:30:d9:eb:19:7c:81:5e:57:e1:f4:61:81:
                    90:f3:1d:d5:ce:0b:c3:8c:c1:39:a6:ea:41:39:1c:
                    51:3e:30:fb:06:36:8f:84:50:ac:15:6b:f7:36:c0:
                    29:e0:48:3a:49:23:70:5f:bf:57:97:17:4b:12:ed:
                    cf:b0:91:dc:2a:14:ab:f7:a1:09:05:7a:e4:86:f0:
                    59:f6:59:98:2a:2d:2f:75:60:53:87:6c:38:5d:85:
                    63:97:63:87:1a:51:b3:ef:7d:47:fd:5c:d8:12:d8:
                    94:f4:ce:d4:25:dc:ee:36:06:58:e7:3c:bf:8c:07:
                    5a:d8:2c:60:ca:de:1a:6a:3c:17:e3:dc:93:f0:5a:
                    9a:64:6d:46:0a:dc:60:a9:bb:d4:b0:bc:5c:34:a5:
                    1c:bb:85:7b:7b:7e:1a:32:3d:c4:d6:33:c2:d1:c0:
                    54:0e:af:13:90:ac:3e:e1:76:97:dd:64:31:1e:6e:
                    cd:9a:ab:bf:a3:8d:d3:39:05:a9:1a:54:47:54:ff:
                    6d:22:1f:f1:d1:80:76:c8:fd:4e:07:a3:c0:1f:f6:
                    80:80:86:25:58:3c:d6:73:c9:be:0e:08:17:a4:90:
                    cb:cc:04:19:df:13:84:dd:ea:ae:ac:c1:28:88:f4:
                    37:70:46:a6:21:19:83:fe:0b:22:cc:ad:bd:56:0f:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:60:FE:F4:50:83:D3:65:DF:7F:6D:16:99:A2:B7:BC:19:04:17:FA
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:0b:24:20:44:6b:d6:02:a8:a2:b8:05:d2:b3:f7:83:7b:
         3e:b9:3f:9f:22:47:79:67:cb:4e:e2:2d:95:3a:51:0e:84:74:
         f3:7d:bf:b9:18:f6:37:f0:6f:39:1b:b6:b9:17:fa:ba:2b:e1:
         6e:2a:e9:d3:7f:2b:fe:24:a5:6d:04:1f:fa:98:18:35:e5:aa:
         ae:83:b6:42:c1:a1:10:0f:1a:40:98:94:44:8a:3e:d5:0a:80:
         45:ee:db:88:ae:ac:98:89:3b:39:03:9b:ad:9a:33:c4:26:56:
         79:43:b5:6a:b5:23:94:9d:ac:05:f8:53:cb:b4:c8:80:30:2d:
         24:36:ed:ec:4e:64:91:8f:4b:15:e3:ac:00:e8:77:ca:f0:cf:
         0a:3a:d0:b8:60:21:2d:b2:a7:4b:36:5a:c9:eb:6b:68:90:7d:
         63:7d:c4:c3:ae:43:2b:b4:56:d1:b9:04:05:a0:c3:38:2d:96:
         3b:19:11:89:4d:c7:74:3e:14:9a:67:19:9e:c2:3c:48:fd:db:
         5a:9f:55:f5:df:35:7a:42:8c:34:06:19:27:cc:7d:21:6d:19:
         1e:4d:25:b0:ed:d6:c5:77:8f:36:01:ac:0d:51:d4:34:36:b5:
         ed:83:a8:f2:a3:22:86:72:b4:68:2e:c6:5a:a8:78:d5:24:65:
         d8:af:b1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pJD/eN4253Sw7mx3sY71sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwNzAzMTgwMTA5WhcNMjYwNzA0MTgwMTA5WjAzMTEwLwYDVQQD
EyhlMjYwZmVmNDUwODNkMzY1ZGY3ZjZkMTY5OWEyYjdiYzE5MDQxN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFsw2esZfIFeV+H0YYGQ8x3VzgvD
jME5pupBORxRPjD7BjaPhFCsFWv3NsAp4Eg6SSNwX79XlxdLEu3PsJHcKhSr96EJ
BXrkhvBZ9lmYKi0vdWBTh2w4XYVjl2OHGlGz731H/VzYEtiU9M7UJdzuNgZY5zy/
jAda2Cxgyt4aajwX49yT8FqaZG1GCtxgqbvUsLxcNKUcu4V7e34aMj3E1jPC0cBU
Dq8TkKw+4XaX3WQxHm7Nmqu/o43TOQWpGlRHVP9tIh/x0YB2yP1OB6PAH/aAgIYl
WDzWc8m+DggXpJDLzAQZ3xOE3equrMEoiPQ3cEamIRmD/gsizK29Vg+mDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJg/vRQg9Nl339tFpmit7wZBBf6MB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpwLJCBE
a9YCqKK4BdKz94N7Prk/nyJHeWfLTuItlTpRDoR0832/uRj2N/BvORu2uRf6uivh
birp038r/iSlbQQf+pgYNeWqroO2QsGhEA8aQJiURIo+1QqARe7biK6smIk7OQOb
rZozxCZWeUO1arUjlJ2sBfhTy7TIgDAtJDbt7E5kkY9LFeOsAOh3yvDPCjrQuGAh
LbKnSzZayetraJB9Y33Ew65DK7RW0bkEBaDDOC2WOxkRiU3HdD4UmmcZnsI8SP3b
Wp9V9d81ekKMNAYZJ8x9IW0ZHk0lsO3WxXePNgGsDVHUNDa17YOo8qMihnK0aC7G
Wqh41SRl2K+xaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 3 22:48:47 2026 by rpki-client