Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File:                     ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier:          Dfuhj120/D3Cm44+xAU1Iw2YOh5HHnPswLT6Fj84moc=
Subject key identifier:   0F:72:B7:07:19:53:FF:D0:59:6E:35:11:5E:DF:D2:34:B8:A7:6A:BE
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer:       /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial:       019F156663C2D5DA5C76F58F5E90350CEBED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number:          117C
Signing time:             Mon 29 Jun 2026 22:00:59 +0000
Manifest this update:     Mon 29 Jun 2026 22:00:59 +0000
Manifest next update:     Tue 30 Jun 2026 22:00:59 +0000
Files and hashes:         1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: b46J4D5f/PI+pr/VRmDvZ4/QCELlcVApED7ZtW3AM4w=)
                          2: Ow_V3D3LkyTM_r00ewpLU-JasWM.roa (hash: n2QpzWe5qjli0Yj1OxzqDbdWwdmykVdSNeAfSZ+0exo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 21:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:66:63:c2:d5:da:5c:76:f5:8f:5e:90:35:0c:eb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
        Validity
            Not Before: Jun 29 22:00:59 2026 GMT
            Not After : Jun 30 22:00:59 2026 GMT
        Subject: CN=0f72b7071953ffd0596e35115edfd234b8a76abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:24:47:df:33:31:30:6b:9e:18:95:36:e0:
                    b3:74:76:31:a4:95:1b:0b:0b:6b:74:ac:e6:af:e7:
                    c5:d1:39:cc:4f:54:30:23:70:22:14:cd:33:a7:47:
                    8f:3a:62:cc:21:06:9f:b8:70:bd:df:a7:d4:21:13:
                    15:0a:22:73:60:ee:f5:06:f5:08:31:64:c6:64:37:
                    96:5a:65:fe:69:f1:19:db:38:33:12:ea:c1:5b:e5:
                    98:a0:44:e3:93:6b:23:38:46:bc:13:04:f7:85:1f:
                    0c:7b:41:57:95:95:55:8f:01:11:b1:9e:2f:0a:ae:
                    1c:83:75:5a:fc:ef:79:e4:04:60:f4:c5:f2:5a:ac:
                    e4:67:be:ce:d9:25:d4:61:85:11:41:ae:cf:8f:ee:
                    ea:f5:02:c6:70:21:43:1d:8e:51:6f:78:9d:d4:1c:
                    ed:a2:97:43:b3:80:e9:3f:9e:0a:80:3d:36:92:77:
                    21:82:59:59:d1:c7:68:6d:4f:da:c5:5a:82:8e:31:
                    1e:73:cd:07:8c:30:3c:23:18:9d:88:28:f2:27:1b:
                    d5:22:b9:11:95:5c:5c:6d:0d:0a:8b:99:4d:24:bf:
                    43:24:99:87:34:f6:d9:61:f6:e5:72:20:28:93:e9:
                    a4:5c:ae:d4:3b:f6:5d:09:c8:80:c2:ed:e2:2f:9b:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:B7:07:19:53:FF:D0:59:6E:35:11:5E:DF:D2:34:B8:A7:6A:BE
            X509v3 Authority Key Identifier:
                keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:68:8c:ff:f3:1c:35:ed:30:58:7f:2a:a9:8f:7e:76:c2:
         f9:f2:52:4d:cb:11:58:94:60:58:b9:5a:8c:35:19:c1:a9:0e:
         45:31:f5:61:bb:4c:f6:a6:e4:57:19:bc:be:6e:9e:4c:50:dc:
         d3:37:e0:58:e9:4f:aa:9c:b7:e8:06:df:9c:48:43:7d:9e:89:
         e1:cb:c2:04:ef:99:bb:73:25:5a:20:bb:30:d6:65:15:1a:06:
         3b:03:d7:bb:cc:8f:d8:51:25:71:b1:23:61:85:b7:d1:a1:5e:
         2b:4f:23:2e:5b:a6:f7:fc:9f:a3:4a:e7:7f:fa:bd:0c:ea:aa:
         a6:f4:d0:9d:ee:8f:e8:0a:0c:13:c2:f2:b0:b5:b8:40:83:f5:
         1d:49:97:53:39:e3:81:49:30:bf:86:45:8e:8f:0f:eb:ce:9e:
         a2:60:50:a3:19:3e:2e:89:c3:2b:3c:3e:16:c3:6d:35:c7:0c:
         23:88:a7:f2:b1:55:b6:64:5a:c5:b8:4f:77:bb:ca:ee:b6:ba:
         db:65:cd:02:0e:a3:7c:f5:69:3b:a3:22:aa:03:38:65:58:79:
         1f:71:24:28:92:39:a9:41:d7:29:c0:06:23:7b:9c:9f:63:e1:
         48:fc:dd:8e:a7:c3:a5:7d:8a:70:70:8d:c8:70:72:22:2a:b4:
         d1:42:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:03:50 2026 by rpki-client