Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
File:                     1-10-EU-84s8PkgQxxWp8c9_aWn4.mft (raw, json)
Hash identifier:          qRxCbTiCCw+vHUVSmhvfuXjjMlovk3E95qUnhCgXuIM=
Subject key identifier:   B2:F6:6B:6D:AE:33:F0:34:D6:EF:D2:A6:A5:A3:0D:2B:C8:44:5C:2C
Authority key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Certificate issuer:       /CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Certificate serial:       019E3004B14E9EFAD25416D04F9A15BE55E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
Manifest number:          07F1
Signing time:             Sat 16 May 2026 09:01:14 +0000
Manifest this update:     Sat 16 May 2026 09:01:14 +0000
Manifest next update:     Sun 17 May 2026 09:01:14 +0000
Files and hashes:         1: 1-10-EU-84s8PkgQxxWp8c9_aWn4.crl (hash: OTAPar25l7Th4x0YCFJ0SEzpEfP96aDnLStxnE7g9Gg=)
                          2: 23AYOOaVoufpy4xd9Alqi_jS77E.roa (hash: 0MJaveh/kuuBV9yvWEU4idipLN+sF7fKt/tc5Z+vmYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:b1:4e:9e:fa:d2:54:16:d0:4f:9a:15:be:55:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
        Validity
            Not Before: May 16 09:01:14 2026 GMT
            Not After : May 17 09:01:14 2026 GMT
        Subject: CN=b2f66b6dae33f034d6efd2a6a5a30d2bc8445c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:81:c5:8e:fa:24:88:f6:2d:69:23:70:b0:fc:
                    d5:01:30:02:b8:ca:6e:40:80:33:1d:4f:37:7f:1b:
                    70:98:1d:f3:fe:40:f5:4f:f2:85:51:f5:af:a0:95:
                    1f:31:b8:da:cb:1b:d6:6d:59:a8:7b:75:b1:ef:29:
                    3a:5f:22:5e:84:13:76:ce:8e:4a:a3:bd:4c:f1:7b:
                    04:42:f1:8b:31:c5:5e:8d:fc:7e:c3:49:7d:f6:2a:
                    b6:e9:53:50:09:81:4c:67:a5:70:6e:40:5e:64:fa:
                    00:4b:54:aa:1d:0a:70:93:97:e7:c2:07:bb:93:56:
                    5b:7f:f0:68:8a:d0:a6:0c:ba:63:4f:60:a7:97:3a:
                    17:72:7e:c4:35:6b:6c:aa:99:84:ed:f8:2c:71:e1:
                    d0:f1:07:b5:dd:77:96:2a:b5:f0:81:af:2c:ed:1d:
                    6c:18:2e:18:45:38:d7:3d:66:81:be:c3:3f:a5:d1:
                    a0:03:74:dc:8d:86:bf:f3:d7:e1:9d:eb:a6:14:ba:
                    d7:d1:2d:8f:62:e9:22:20:ab:3f:0a:0a:a1:01:fb:
                    78:cf:e3:b9:cc:ea:71:50:6d:6c:5f:6e:6a:c5:80:
                    77:2b:5e:35:2d:a1:a7:2b:a7:dc:8b:8b:38:a0:01:
                    33:00:45:3f:cb:40:12:29:3b:16:9b:85:37:95:f7:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F6:6B:6D:AE:33:F0:34:D6:EF:D2:A6:A5:A3:0D:2B:C8:44:5C:2C
            X509v3 Authority Key Identifier:
                keyid:FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:29:01:3b:54:0f:20:f2:02:71:23:2d:ab:51:ed:50:52:65:
         fa:7a:6b:e1:85:0d:34:03:86:62:87:5e:cd:7b:44:9d:27:60:
         33:50:7f:1b:e8:72:18:d1:31:d8:bd:fc:92:97:54:0c:31:9f:
         8d:09:17:6b:18:8a:b1:63:16:7f:c8:ef:1d:28:6a:81:ff:ce:
         eb:c5:32:f0:37:fd:88:65:84:ae:7f:9f:32:20:13:b9:40:19:
         4e:22:f5:31:12:ca:bc:fa:68:95:d5:1c:50:4b:86:6a:0c:61:
         87:12:16:cf:8e:c2:20:3d:e1:16:b3:f2:65:46:f2:28:ef:c7:
         b5:b9:6c:7b:6a:d3:f1:4a:a5:da:60:19:ec:01:4d:7a:4a:7d:
         0f:de:f7:fc:7c:d8:1f:3e:e3:a7:b8:8a:ae:d3:98:4d:d1:47:
         39:a6:3f:59:af:7b:73:30:e7:83:ea:86:ab:f5:35:e8:2e:b1:
         0c:54:fb:89:2f:3a:88:cc:93:a5:bf:9b:5e:fd:3a:fe:58:fa:
         a6:7b:03:75:d8:d2:e6:e7:8d:83:6f:b9:32:08:b7:c0:ef:d0:
         88:db:b1:f4:ad:1d:6c:6f:cc:8e:0b:41:90:8c:f2:ea:f3:63:
         55:62:0c:65:a2:8a:6e:3e:bf:46:48:1d:27:e7:e5:69:99:0b:
         e9:16:25:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4wBLFOnvrSVBbQT5oVvlXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNWQzZTExNGZiY2UyY2YwZjkyMDQzMWM1NmE3YzczZGZk
YTVhN2UwHhcNMjYwNTE2MDkwMTE0WhcNMjYwNTE3MDkwMTE0WjAzMTEwLwYDVQQD
EyhiMmY2NmI2ZGFlMzNmMDM0ZDZlZmQyYTZhNWEzMGQyYmM4NDQ1YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IHFjvokiPYtaSNwsPzVATACuMpu
QIAzHU83fxtwmB3z/kD1T/KFUfWvoJUfMbjayxvWbVmoe3Wx7yk6XyJehBN2zo5K
o71M8XsEQvGLMcVejfx+w0l99iq26VNQCYFMZ6VwbkBeZPoAS1SqHQpwk5fnwge7
k1Zbf/BoitCmDLpjT2CnlzoXcn7ENWtsqpmE7fgsceHQ8Qe13XeWKrXwga8s7R1s
GC4YRTjXPWaBvsM/pdGgA3TcjYa/89fhneumFLrX0S2PYukiIKs/CgqhAft4z+O5
zOpxUG1sX25qxYB3K141LaGnK6fci4s4oAEzAEU/y0ASKTsWm4U3lfcwVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLL2a22uM/A01u/SpqWjDSvIRFwsMB8GA1UdIwQY
MBaAFPtdPhFPvOLPD5IEMcVqfHPf2lp+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xMC1FVS04NHM4UGtnUXh4V3A4YzlfYVduNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvZTcwZDk4LTQyNmUtNDZmZS1hZmFm
LTgyMTM5ZjNiNDMzYy8xLzEtMTAtRVUtODRzOFBrZ1F4eFdwOGM5X2FXbjQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YyL2U3MGQ5OC00MjZlLTQ2ZmUtYWZhZi04MjEzOWYzYjQz
M2MvMS8xLTEwLUVVLTg0czhQa2dReHhXcDhjOV9hV240LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZikB
O1QPIPICcSMtq1HtUFJl+npr4YUNNAOGYodezXtEnSdgM1B/G+hyGNEx2L38kpdU
DDGfjQkXaxiKsWMWf8jvHShqgf/O68Uy8Df9iGWErn+fMiATuUAZTiL1MRLKvPpo
ldUcUEuGagxhhxIWz47CID3hFrPyZUbyKO/Htblse2rT8Uql2mAZ7AFNekp9D973
/HzYHz7jp7iKrtOYTdFHOaY/Wa97czDng+qGq/U16C6xDFT7iS86iMyTpb+bXv06
/lj6pnsDddjS5ueNg2+5Mgi3wO/QiNux9K0dbG/MjgtBkIzy6vNjVWIMZaKKbj6/
RkgdJ+flaZkL6RYlJA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:32:27 2026 by rpki-client