Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          u0GaUxsN6i8UqqciBy0L+svihzht7z1faD9jz6ssHyI=
Subject key identifier:   51:ED:AD:85:9C:A1:5E:62:42:2D:6A:41:0E:32:C1:9D:ED:1D:1D:2A
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       019E3117E36D18A0E23D423E75443DA846B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          0EEC
Signing time:             Sat 16 May 2026 14:01:49 +0000
Manifest this update:     Sat 16 May 2026 14:01:49 +0000
Manifest next update:     Sun 17 May 2026 14:01:49 +0000
Files and hashes:         1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: dX/CSM8ZqqokTBvAShsqz3MC37wNPQXStAG+/74GrHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:e3:6d:18:a0:e2:3d:42:3e:75:44:3d:a8:46:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: May 16 14:01:49 2026 GMT
            Not After : May 17 14:01:49 2026 GMT
        Subject: CN=51edad859ca15e62422d6a410e32c19ded1d1d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:6e:7f:30:0e:17:76:11:07:bb:07:b2:ab:
                    7e:19:e3:88:0b:5e:1e:47:af:32:33:bf:da:6f:f4:
                    68:6a:8b:10:fb:44:74:71:14:dc:80:3a:0e:3f:0e:
                    30:c3:34:63:07:15:ae:ce:36:08:32:2e:c8:61:9b:
                    c9:1e:c4:fc:f9:4d:5b:6c:0d:45:e3:30:2f:85:2b:
                    93:f6:9e:cc:7c:fc:a3:c8:de:5e:b7:cb:a5:6a:b9:
                    6c:8e:c3:1d:45:c4:ea:90:fb:c3:84:87:8e:dc:30:
                    34:ef:53:26:a6:a3:08:d5:eb:81:b0:c0:76:ed:2a:
                    1c:75:dc:c9:8c:89:6e:92:8c:a4:1b:28:df:14:8f:
                    a7:31:cd:c7:a1:8a:12:66:2c:bf:cd:e6:09:d1:97:
                    78:68:d5:11:6e:e7:70:d9:3a:cf:d3:18:f7:dd:7e:
                    8a:3c:ed:1e:27:71:44:7e:05:61:c4:40:49:11:17:
                    38:6c:84:be:58:f0:90:72:85:23:7c:15:15:20:aa:
                    be:cd:27:ab:e1:55:df:d1:d8:a7:ae:97:4d:0c:dc:
                    fd:93:a9:2d:b5:a2:c9:55:6b:25:2f:88:a1:4c:5b:
                    2e:f8:38:2c:94:cd:b4:06:b4:86:c9:dd:60:6f:b5:
                    6b:f4:93:be:48:8f:06:0b:53:b5:3f:ef:9a:e5:6b:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:AD:85:9C:A1:5E:62:42:2D:6A:41:0E:32:C1:9D:ED:1D:1D:2A
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:78:8d:0d:4e:61:db:c9:18:9b:88:87:fc:37:65:28:b9:
         a3:18:d7:27:fd:00:fb:c5:33:e1:14:13:d1:16:58:96:8b:33:
         ac:82:76:d6:9f:10:d8:cd:02:65:e3:e9:38:75:ea:1c:d0:c1:
         29:22:31:19:b4:a9:a0:0f:97:38:b4:33:13:df:3f:4a:39:6c:
         b6:bc:7c:32:e9:5f:48:4c:82:2a:b9:ae:63:0b:ae:38:79:1b:
         8f:eb:bb:85:0f:75:a6:68:82:96:69:5b:fc:77:f0:51:bb:39:
         95:a7:36:ce:b1:59:42:57:b1:7a:96:00:1a:e7:8f:21:90:14:
         3e:09:10:36:4b:1c:c2:29:a1:d8:3e:2a:82:25:82:2e:54:c5:
         da:83:7e:d6:99:d0:b6:fd:a6:15:9f:27:12:42:2e:f0:89:4a:
         e6:8b:ec:21:0e:83:5b:34:59:a3:7a:cd:7d:8c:fb:95:01:15:
         67:ea:cc:d7:ae:02:16:57:23:49:ed:ab:6c:f4:6c:17:c9:e8:
         06:b5:2c:2d:e6:de:44:7f:84:45:8e:0d:77:78:b9:11:85:30:
         de:e7:5e:72:95:c2:ca:67:60:63:a5:0f:bb:2d:58:50:49:c4:
         52:8a:33:e4:07:fc:16:d4:29:12:77:65:8b:4d:c4:19:4a:2f:
         63:7c:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:00 2026 by rpki-client