Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          lnySxUK9KsbX9lfcinOC4QIwnUnU5zTcg64XVwGt4Tc=
Subject key identifier:   40:62:13:66:6B:BA:0A:F0:75:8B:8D:B4:C9:8F:79:59:7C:60:DB:B9
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019E6DD13B030DEE2BD84960741F67AC4B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          114D
Signing time:             Thu 28 May 2026 09:01:29 +0000
Manifest this update:     Thu 28 May 2026 09:01:29 +0000
Manifest next update:     Fri 29 May 2026 09:01:29 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: XQc7Zvv3dvINaspvY1Kj8uKidOCgmrVG65Uvor8/OxY=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 May 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:6d:d1:3b:03:0d:ee:2b:d8:49:60:74:1f:67:ac:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May 28 09:01:29 2026 GMT
            Not After : May 29 09:01:29 2026 GMT
        Subject: CN=406213666bba0af0758b8db4c98f79597c60dbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7e:43:ef:ac:07:85:99:9d:ff:f5:58:9c:04:
                    40:38:d6:0e:d3:7b:8b:5d:3d:47:3c:d4:c2:90:b0:
                    34:67:1d:39:7a:46:04:0e:23:69:1d:8e:dc:a4:76:
                    8a:d8:21:24:22:eb:f0:c9:84:e8:3c:b9:14:08:0e:
                    97:6c:3f:37:48:9f:4b:3a:f9:de:a4:71:e2:8e:dc:
                    dc:08:77:e6:6b:2a:ac:3e:dc:47:7e:fa:9a:9b:10:
                    e6:48:69:cb:fc:27:fd:80:6f:57:06:aa:b7:cd:f7:
                    79:31:f4:d6:96:50:4a:0a:b7:5d:81:4b:d7:57:05:
                    d1:0b:cb:37:6d:07:dd:df:5c:1f:54:0c:ed:50:70:
                    34:d6:33:5d:4f:4b:65:34:cb:ba:11:1a:dc:3c:96:
                    eb:27:d5:21:92:b9:ef:1b:4b:92:4e:20:15:05:d9:
                    06:00:c0:72:d5:37:e3:7c:a6:c8:33:88:ba:b5:0e:
                    36:29:42:40:b3:81:7f:fb:66:cc:16:f8:dc:a3:1d:
                    41:3e:94:1a:04:b2:06:90:9b:d7:34:c3:81:39:a4:
                    04:4f:82:4e:de:cd:22:00:e2:d3:1d:6b:73:06:3e:
                    03:c6:76:a8:fe:c9:cd:14:cb:22:f0:c6:b8:e6:20:
                    d2:70:8b:6e:c8:af:dc:d9:a8:35:27:1f:bd:f3:06:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:13:66:6B:BA:0A:F0:75:8B:8D:B4:C9:8F:79:59:7C:60:DB:B9
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:81:c6:65:37:d4:67:11:f1:33:9b:db:40:13:6e:b8:33:bb:
         aa:ff:ae:dd:22:7c:9c:88:2a:29:c2:46:92:1a:d5:3d:f8:10:
         10:bd:ae:e0:cf:94:23:f9:96:af:09:a3:1a:49:e2:59:00:e1:
         02:aa:0c:98:2b:12:73:86:b8:c8:ec:39:fc:cd:e1:a4:4e:99:
         dd:f2:f3:1a:e8:73:ba:4c:a2:13:9e:43:21:17:72:ba:5a:df:
         81:59:52:42:00:84:28:80:f9:97:45:a5:41:df:97:08:f4:a6:
         f3:41:eb:30:cd:7c:50:10:2d:2e:ac:29:58:e0:50:90:7f:d3:
         b0:0c:68:e5:91:e4:ef:2a:cc:03:e4:7f:c3:e8:5a:49:69:85:
         b8:fc:7b:73:ab:0e:b6:f7:45:ad:ee:d0:e5:02:27:17:df:dd:
         dd:ac:d6:58:f5:cc:04:4d:27:f2:5f:ef:35:4f:bf:04:e4:a2:
         03:b0:d1:59:01:83:72:11:e1:79:f2:ab:3b:4c:55:0a:b1:ff:
         a3:a8:fa:77:42:b8:e5:6c:d6:0a:7e:a8:4f:a9:cb:3d:91:ec:
         7a:5d:41:b7:cc:51:17:f2:dc:cd:38:54:4a:78:cf:2c:46:0d:
         fd:c9:cc:d5:d0:24:4c:2e:21:f6:0d:22:7c:dd:70:85:f5:e5:
         83:7b:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:05:14 2026 by rpki-client