Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          BJzJKcUN0oQkUxzpD77LPj1pTHPH0Wzh/HMTMalH550=
Subject key identifier:   AD:53:E8:54:E6:84:56:8B:7B:78:B0:B0:8A:7B:1A:0F:B6:89:E9:74
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019E7D44630C709FD3AED8E5F27FC46D61B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1155
Signing time:             Sun 31 May 2026 09:01:34 +0000
Manifest this update:     Sun 31 May 2026 09:01:34 +0000
Manifest next update:     Mon 01 Jun 2026 09:01:34 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: /ipLsnwp77mGlhu+bvBQbZc+TmC9Xpx/4f4TDZE5CkQ=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 09:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7d:44:63:0c:70:9f:d3:ae:d8:e5:f2:7f:c4:6d:61:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: May 31 09:01:34 2026 GMT
            Not After : Jun  1 09:01:34 2026 GMT
        Subject: CN=ad53e854e684568b7b78b0b08a7b1a0fb689e974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:d2:eb:2f:e1:03:90:90:99:17:11:52:55:
                    69:85:84:25:96:0f:5c:b3:88:bf:71:4f:52:3c:d7:
                    f9:88:e4:ba:0f:49:8c:ee:df:3e:6c:f2:42:0b:0c:
                    a0:99:bb:4e:91:94:43:26:cf:aa:e4:62:a2:9f:44:
                    a9:8e:17:57:a8:fb:75:85:8f:98:bf:ad:79:38:92:
                    89:ef:77:d1:39:b3:86:0b:f8:26:f3:94:25:de:a7:
                    54:29:fc:de:b3:8e:ee:5c:94:b0:74:d3:df:bf:7c:
                    3c:fd:87:bd:6e:e8:a1:af:e5:d0:2a:fd:ee:8a:6e:
                    51:07:19:7d:09:3a:2e:64:71:12:42:a6:47:da:25:
                    44:1d:f4:f8:1e:f1:38:0a:9a:9d:4a:52:78:69:51:
                    b6:ac:04:c8:35:88:70:70:d6:d6:93:1a:55:22:be:
                    5b:be:86:ed:29:a0:82:25:04:0b:57:9a:70:c6:2a:
                    14:f4:e7:ad:65:57:5e:6e:1f:80:3f:19:9d:68:96:
                    c4:9d:cc:a1:4e:9a:3b:37:d6:7f:1b:e2:5e:c5:29:
                    70:8b:8c:31:8a:5e:f6:04:d8:ac:63:99:06:66:71:
                    90:a3:72:10:39:0a:02:9d:84:c1:e0:0b:0e:13:c7:
                    d7:de:b4:28:3b:8d:76:02:80:3c:a2:f1:f5:e2:6a:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:53:E8:54:E6:84:56:8B:7B:78:B0:B0:8A:7B:1A:0F:B6:89:E9:74
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f5:26:ac:30:d8:78:9d:01:83:79:57:eb:33:c0:c5:64:d8:
         63:be:ec:dc:e2:47:5f:fd:84:97:19:3f:c9:2f:df:13:99:cf:
         4c:71:39:3d:da:be:e7:41:97:22:7d:e6:21:8e:ec:c0:d0:81:
         05:77:5c:40:8d:d5:c7:1c:5c:0d:d1:71:9d:8a:e3:f1:38:11:
         34:7e:50:44:34:13:46:7a:bd:b6:f3:e2:85:49:7b:84:6d:90:
         bb:ba:a0:7e:0a:eb:85:fa:89:e6:fd:f3:d2:9a:e5:98:49:9e:
         e4:d8:8a:26:f1:8b:5e:c0:22:d2:25:ea:78:5f:97:c2:2a:7b:
         60:9b:62:a3:fc:d5:95:f8:b3:21:44:60:99:51:fe:ca:48:ef:
         8e:0f:9d:10:75:62:43:a8:35:d3:82:7f:12:f5:2d:c6:6f:df:
         a1:a2:13:fb:9b:19:95:16:99:69:26:c3:cf:8a:0c:69:8f:d0:
         61:b5:55:57:1a:b1:06:03:1c:8a:4e:d7:f0:b7:c2:f6:fc:b8:
         93:e3:8b:96:85:5b:0e:e2:18:80:82:b5:61:15:85:a9:a6:7f:
         e5:17:d6:3f:c8:e8:2e:67:dc:e5:c5:68:5b:57:92:5b:97:42:
         b7:16:55:65:b1:e1:c6:e8:ed:38:5d:c0:e8:d7:ab:6f:34:73:
         33:d6:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 15:10:40 2026 by rpki-client