Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          ps0AjSV5brhGYXkYoIe/BQiXmyfpE4M8ByIII/xAYtw=
Subject key identifier:   3F:72:DB:13:77:F8:71:15:93:88:EB:F6:42:37:33:A0:DD:FA:2D:1F
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019E0EF8E49FC7012E4FBECC8116C40E51AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          111B
Signing time:             Sat 09 May 2026 23:00:52 +0000
Manifest this update:     Sat 09 May 2026 23:00:52 +0000
Manifest next update:     Sun 10 May 2026 23:00:52 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: tHMPhP5IYp5Mvb46Z3lG/jy3OwQX5+sEBnROejrHQcA=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 18:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0e:f8:e4:9f:c7:01:2e:4f:be:cc:81:16:c4:0e:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May  9 23:00:52 2026 GMT
            Not After : May 10 23:00:52 2026 GMT
        Subject: CN=3f72db1377f871159388ebf6423733a0ddfa2d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:8c:8b:b1:ec:4a:d0:bb:b9:a5:9d:50:81:
                    e2:e8:7b:0e:7a:34:6e:f0:6b:9f:29:9d:3f:a8:9b:
                    ea:1c:b7:fd:c2:42:59:86:57:f6:56:43:7b:df:bc:
                    94:ec:bb:e9:c3:18:f6:0b:4a:0f:7e:90:ee:c9:6e:
                    16:eb:56:e0:33:a8:46:bc:6d:cc:5c:5b:d2:9b:6b:
                    0e:d5:fd:fc:74:56:f6:a6:f5:ce:4a:b3:22:ec:6f:
                    4b:b9:9c:59:28:4e:9e:83:a4:86:60:83:12:79:96:
                    ac:28:36:cf:e6:d0:54:0c:f5:df:4f:65:0d:42:cb:
                    45:6c:92:e6:2a:a5:9e:38:ee:43:ff:73:7a:bf:55:
                    80:25:ce:d1:80:81:b7:a8:7b:a8:81:2b:89:3d:a0:
                    79:57:73:46:bd:07:ad:e3:29:0c:a8:e1:d7:04:86:
                    21:5a:d5:eb:32:b2:b5:66:3e:c3:41:b3:14:9c:0a:
                    73:8c:9f:b6:3c:51:b9:7c:57:d6:f4:02:6c:ff:37:
                    de:65:ab:38:31:0f:10:14:eb:cd:b4:35:c8:fa:7e:
                    a1:82:13:c1:52:36:18:2c:3d:8c:91:cd:1e:9c:f7:
                    d8:d3:34:5f:81:1e:df:07:3e:26:fc:22:b3:87:02:
                    6d:43:7d:78:fe:cc:f3:6b:00:4d:39:92:98:50:a2:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:72:DB:13:77:F8:71:15:93:88:EB:F6:42:37:33:A0:DD:FA:2D:1F
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:84:fe:56:b1:81:ec:3a:b1:d3:8a:75:22:95:04:ec:98:70:
         fd:f9:0f:df:82:2b:09:3b:e4:1e:ba:fd:5c:10:b4:6e:b2:0f:
         5a:b0:0b:85:7b:6a:5b:74:9d:33:b8:66:1a:75:9c:71:41:56:
         7d:d3:9a:3a:09:c1:80:b9:2a:49:b4:1b:70:e4:b2:90:e3:71:
         9e:b3:05:dc:b3:62:db:48:0b:96:be:96:2f:73:59:2e:b4:ba:
         21:26:3d:d8:f4:58:cb:89:2a:cf:4e:f4:ee:cc:7d:ab:f7:89:
         47:be:d4:3a:92:70:28:20:f8:d5:48:c5:24:1a:b1:34:a6:2f:
         fa:7f:a0:70:ed:5b:bc:cb:9d:4d:b4:36:c1:48:5d:18:44:b6:
         c3:3b:74:71:38:48:da:27:5f:a5:93:0d:8b:77:8e:3f:ce:34:
         a3:96:95:da:b3:c1:4c:96:07:6e:55:d1:ab:51:46:2e:29:9b:
         00:b0:bc:20:e0:a8:62:e4:55:e2:0d:94:09:43:fb:b3:1c:54:
         8f:cd:62:21:8e:2e:54:89:a4:e0:0d:91:f5:13:15:8a:7a:92:
         2d:83:8d:82:4f:18:87:07:5a:d9:09:9c:76:61:90:25:e4:c2:
         10:80:ef:a6:57:76:12:cb:e2:9f:d2:90:67:fb:05:66:09:24:
         a6:a0:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 03:40:00 2026 by rpki-client