Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          Q0GARb5BobwtO2kPtQjyVs4EqFzBVh7eMTDekS3tOyw=
Subject key identifier:   83:F4:C2:B2:46:B5:7E:38:76:EA:CC:B4:44:B1:2E:B1:7E:D8:1E:60
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019E3D89497068D02B2700B1B1B24D208A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1134
Signing time:             Tue 19 May 2026 00:01:07 +0000
Manifest this update:     Tue 19 May 2026 00:01:07 +0000
Manifest next update:     Wed 20 May 2026 00:01:07 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: wSxwgi/YidW9OAoy+ewku0Mz1dk2IK142lmX95C7Auk=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 20 May 2026 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3d:89:49:70:68:d0:2b:27:00:b1:b1:b2:4d:20:8a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May 19 00:01:07 2026 GMT
            Not After : May 20 00:01:07 2026 GMT
        Subject: CN=83f4c2b246b57e3876eaccb444b12eb17ed81e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:75:82:8f:72:77:db:55:be:9f:57:49:13:
                    c9:4a:b0:f0:bf:e3:8a:d7:f4:ce:c0:49:1f:58:27:
                    7a:9b:9b:c4:d5:c6:bc:21:ce:df:68:09:af:0e:1f:
                    7c:b9:54:8a:e4:00:5c:14:7d:43:49:e8:3d:7b:c4:
                    9b:a2:43:54:88:19:42:a1:24:68:7a:fb:fe:04:80:
                    7a:e6:3b:d6:21:af:da:b6:29:e0:91:d3:f1:ac:f5:
                    43:8a:ea:b8:56:91:a3:50:17:eb:a8:06:7c:19:1a:
                    08:eb:15:a8:aa:4e:87:3c:d4:4d:5b:12:a0:64:01:
                    66:93:4d:bd:6a:10:75:83:6b:94:13:e3:32:d9:4c:
                    50:c5:ab:8e:1a:93:cb:74:33:cb:66:a1:db:d0:79:
                    8c:03:29:ff:ac:28:98:d0:ce:4d:06:0b:33:5f:ee:
                    70:cf:9d:42:40:81:ec:84:c8:a4:da:91:c2:6c:5d:
                    48:0b:ff:b2:78:d3:d5:ae:4f:19:92:72:9e:19:80:
                    6f:bf:b4:68:ef:18:14:4d:9d:69:c1:33:98:e2:70:
                    f6:f7:10:24:7b:2d:62:b7:86:5d:bb:92:de:9a:be:
                    78:24:25:4d:89:bd:14:09:0b:05:63:be:16:57:22:
                    e7:60:c2:e4:39:2a:57:dc:ca:2b:8b:3e:47:ed:e0:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:C2:B2:46:B5:7E:38:76:EA:CC:B4:44:B1:2E:B1:7E:D8:1E:60
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:34:52:5b:1b:ed:c9:b3:ed:f7:df:87:2e:1a:d3:5e:27:
         ee:40:83:f7:03:39:eb:c7:75:bb:95:df:55:70:75:dc:05:46:
         7b:06:0b:ba:c2:61:14:be:8f:cc:0c:47:92:82:b3:f8:e3:cd:
         8b:8f:6c:73:fe:56:a5:01:ea:45:08:4d:43:4b:61:b4:61:5f:
         3b:d6:ed:d9:f5:d9:59:5f:77:1c:c7:08:be:92:9a:24:61:e3:
         96:aa:81:1d:9c:68:c3:ec:bc:ef:22:62:9f:18:bb:0a:25:04:
         91:24:fc:99:c1:36:cd:20:60:c5:fd:27:3d:b0:ad:40:fc:b7:
         19:10:1d:0f:45:ab:90:81:5c:f7:9d:86:e9:ac:ff:5f:28:20:
         5e:a5:ca:69:ac:39:eb:04:2e:2a:e0:73:a1:1c:df:dd:1b:41:
         1c:8a:e7:05:c4:2c:46:dc:7d:34:dd:a7:58:32:ba:47:ab:4e:
         8b:e3:59:26:8c:85:38:e4:1b:e3:c4:bc:bb:8c:3d:79:34:6c:
         fd:52:9f:60:9d:3a:7b:af:8a:9b:de:67:a4:df:2c:75:d3:4b:
         27:65:71:ea:33:55:b2:56:8c:4b:0e:04:d8:be:ce:e5:ce:c4:
         d0:5d:af:78:8b:34:29:9e:66:9e:b1:e0:80:af:04:56:dd:e3:
         58:1b:79:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ49iUlwaNArJwCxsbJNIIoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwNTE5MDAwMTA3WhcNMjYwNTIwMDAwMTA3WjAzMTEwLwYDVQQD
Eyg4M2Y0YzJiMjQ2YjU3ZTM4NzZlYWNjYjQ0NGIxMmViMTdlZDgxZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD91go9yd9tVvp9XSRPJSrDwv+OK
1/TOwEkfWCd6m5vE1ca8Ic7faAmvDh98uVSK5ABcFH1DSeg9e8SbokNUiBlCoSRo
evv+BIB65jvWIa/atingkdPxrPVDiuq4VpGjUBfrqAZ8GRoI6xWoqk6HPNRNWxKg
ZAFmk029ahB1g2uUE+My2UxQxauOGpPLdDPLZqHb0HmMAyn/rCiY0M5NBgszX+5w
z51CQIHshMik2pHCbF1IC/+yeNPVrk8ZknKeGYBvv7Ro7xgUTZ1pwTOY4nD29xAk
ey1it4Zdu5Lemr54JCVNib0UCQsFY74WVyLnYMLkOSpX3Moriz5H7eC/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP0wrJGtX44durMtESxLrF+2B5gMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPY0Ulsb
7cmz7fffhy4a014n7kCD9wM568d1u5XfVXB13AVGewYLusJhFL6PzAxHkoKz+OPN
i49sc/5WpQHqRQhNQ0thtGFfO9bt2fXZWV93HMcIvpKaJGHjlqqBHZxow+y87yJi
nxi7CiUEkST8mcE2zSBgxf0nPbCtQPy3GRAdD0WrkIFc952G6az/XyggXqXKaaw5
6wQuKuBzoRzf3RtBHIrnBcQsRtx9NN2nWDK6R6tOi+NZJoyFOOQb48S8u4w9eTRs
/VKfYJ06e6+Km95npN8sddNLJ2Vx6jNVslaMSw4E2L7O5c7E0F2veIs0KZ5mnrHg
gK8EVt3jWBt5Nw==
-----END CERTIFICATE-----
Generated at Tue May 19 10:21:22 2026 by rpki-client