Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File:                     EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier:          5RnPhc5CNHBVvPwOkGEQWI29JNhPWCZXqwcD3cmmSVs=
Subject key identifier:   B4:AB:C9:4C:5E:10:82:BD:1A:15:91:25:73:1E:6B:14:32:F7:48:5D
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer:       /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial:       019F1830D8515E67101C86A51B4009E41D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 11:01:22 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:22 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:22 +0000
Files and hashes:         1: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: kjnUAH+obxO+wMKxGpAgVQ8adycXhAyZTsiGttqIeEA=)
                          2: U_-2UYbUafidz0RvuYiVijfVX6M.roa (hash: ZQqMuemSiQ1z6tjxPqoZVYUGHROLqLybPtB8D6Kleus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:d8:51:5e:67:10:1c:86:a5:1b:40:09:e4:1d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
        Validity
            Not Before: Jun 30 11:01:22 2026 GMT
            Not After : Jul  1 11:01:22 2026 GMT
        Subject: CN=b4abc94c5e1082bd1a159125731e6b1432f7485d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:5b:87:8a:9c:9a:fb:e8:bb:17:44:f1:9d:
                    56:b5:c2:50:be:e9:9a:cf:9d:cf:78:ef:3a:d2:d1:
                    7b:81:59:5d:8e:6a:50:51:dd:70:e9:25:31:9e:7b:
                    d3:cb:5b:2a:45:15:33:09:db:0d:ff:1e:9d:c3:18:
                    2c:6c:f8:34:65:5c:fc:30:3c:9d:eb:15:e0:83:99:
                    d1:13:55:42:9d:a2:fb:29:9b:2e:98:78:fb:0a:ec:
                    a3:a9:21:a1:ea:cc:81:c4:e9:0f:5e:ad:b1:b3:ae:
                    2c:30:c9:cb:67:fe:ce:ea:5d:33:15:e6:58:68:04:
                    7c:a6:10:5f:3e:0b:f4:f5:30:02:e2:df:75:a2:40:
                    3a:25:be:e3:59:e8:53:e0:03:57:29:91:89:b0:9d:
                    ee:ad:5a:ca:34:b3:ad:bc:4d:ae:3e:e5:99:f2:6a:
                    ca:31:da:21:51:87:4f:2c:77:24:32:72:1a:1c:c4:
                    da:ef:ec:fb:c8:3a:8e:3b:43:78:a2:8d:96:33:60:
                    0e:c4:25:47:0b:e1:8f:15:66:b7:03:d1:e6:75:c5:
                    46:73:c5:53:fc:90:ca:c9:dd:36:30:37:c4:8a:f3:
                    f9:42:dc:4d:c4:b7:71:7d:3f:bd:cc:95:3d:8c:46:
                    02:cc:80:8d:88:8a:0b:05:d0:45:bf:f9:8e:82:fc:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:C9:4C:5E:10:82:BD:1A:15:91:25:73:1E:6B:14:32:F7:48:5D
            X509v3 Authority Key Identifier:
                keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:a3:3b:51:a3:8e:3c:9e:e0:a1:8e:a3:1c:b9:74:f9:93:
         79:7b:b0:2b:77:c5:fe:0f:cd:b4:71:cf:a0:a6:90:fe:6b:4b:
         b7:77:f1:d8:38:d2:b4:9a:7c:30:67:52:bb:02:25:37:8a:ba:
         98:d0:65:5c:b9:a8:18:95:10:54:ab:43:5c:b9:99:bf:d6:1e:
         89:35:f2:1a:e6:49:d5:d4:56:2d:ca:6b:bc:27:8f:a3:a2:fa:
         20:88:2a:13:c7:42:17:7e:f9:26:80:a5:9e:10:de:6f:0c:53:
         a9:9b:3d:9e:63:2e:46:2d:1f:9f:e7:be:02:73:d0:14:95:7d:
         d1:72:bc:02:45:a4:1b:b8:e0:96:9b:d5:63:77:42:08:9d:cc:
         58:fb:c1:ec:de:48:a8:42:a8:56:f4:6c:d7:55:e1:f5:1a:61:
         df:f7:00:3e:55:98:04:28:9f:13:cf:5b:9c:28:7b:67:2e:09:
         71:0e:65:a3:a2:be:9f:96:e0:38:33:18:06:af:3f:84:29:f5:
         9f:81:b0:d7:c7:66:c4:41:dd:b6:08:49:84:3a:cc:5e:e3:c7:
         8b:a7:77:c5:23:46:42:fd:96:8d:23:a2:b2:17:8e:c5:a1:6b:
         66:5f:30:2a:c8:c8:20:32:9c:9d:72:ed:1c:86:09:40:61:8e:
         5f:38:5a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:23 2026 by rpki-client