Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          feUQMcuPqmTSQqc4I6cFMc/4vnBuC9ErRbHKoKb7DrQ=
Subject key identifier:   AE:FC:2B:36:D1:C6:D4:77:A0:2B:18:E5:F9:A0:53:8D:0A:66:E4:CA
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       019E57B72E180C8BCCB2FC4C2285736B2D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          1381
Signing time:             Sun 24 May 2026 02:01:23 +0000
Manifest this update:     Sun 24 May 2026 02:01:23 +0000
Manifest next update:     Mon 25 May 2026 02:01:23 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: WYjwnelnMbP3IRgZPU7UhulaKcOb1yeAPoSHc3ToL4M=)
                          2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:57:b7:2e:18:0c:8b:cc:b2:fc:4c:22:85:73:6b:2d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: May 24 02:01:23 2026 GMT
            Not After : May 25 02:01:23 2026 GMT
        Subject: CN=aefc2b36d1c6d477a02b18e5f9a0538d0a66e4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:ff:ac:e4:00:7e:6f:9d:ad:ac:c3:bb:a6:
                    b9:c6:d5:4a:ec:84:93:78:51:ee:82:ca:f8:9d:7d:
                    6f:fb:59:67:09:ae:cb:97:c7:2f:a0:30:ef:db:61:
                    8f:e6:3a:a6:65:54:1e:22:de:bc:91:fe:8a:69:3a:
                    8f:40:8f:a5:2a:69:4f:57:42:24:f1:a3:4b:e1:e7:
                    3c:a1:03:3a:79:6a:cd:35:03:d1:c1:f5:11:00:7c:
                    36:36:ca:1c:1f:2e:f0:87:5e:6b:13:e1:85:60:2b:
                    96:c4:31:fa:e8:ac:25:6b:f0:bb:a0:c8:fc:75:ba:
                    20:fc:09:78:d9:3e:d5:97:7c:39:a1:2d:d6:9b:be:
                    e1:b2:37:b7:ca:c7:82:ca:c1:52:90:95:74:00:77:
                    cd:3c:af:6c:d0:d5:ea:e3:cb:4b:99:87:42:03:3c:
                    20:3f:be:98:7f:b5:e3:a0:84:aa:5e:a1:a9:f1:2d:
                    f0:29:8f:95:98:20:a4:65:fa:21:05:ce:16:0a:85:
                    90:86:52:8a:9e:10:e1:c8:66:9a:98:95:4b:11:98:
                    08:70:87:ee:f4:9c:21:ba:ce:c5:8d:2d:00:98:08:
                    c9:de:7c:22:22:54:95:49:d3:cd:93:52:77:53:ba:
                    e6:b7:be:eb:e6:c1:60:a0:ce:7d:be:6e:71:b1:15:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:2B:36:D1:C6:D4:77:A0:2B:18:E5:F9:A0:53:8D:0A:66:E4:CA
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:77:e3:63:ac:bb:6b:35:4c:95:c2:7e:04:0b:56:41:de:02:
         c9:32:1d:b5:43:10:4f:44:b4:6b:c4:ac:e3:f1:f5:37:65:ea:
         b2:dd:4e:3e:35:7e:e4:65:5c:00:e1:ba:22:b2:7b:2d:3a:ec:
         7b:be:75:a8:9e:98:e8:55:a3:40:16:93:f9:7c:b0:b2:a4:1b:
         f4:01:65:f1:3a:24:ab:b5:7d:e0:44:9f:fa:d5:df:c2:f5:1d:
         93:e3:fc:1d:d1:fc:31:39:17:0a:ee:f5:52:bb:cd:b2:db:dd:
         db:f4:a1:fe:2f:2f:5a:3f:6d:d8:a1:dd:4a:04:31:a6:e1:37:
         f1:3d:f0:6a:55:a8:ec:dc:e9:19:fb:83:3c:ea:ee:99:17:f5:
         55:09:44:c8:5d:d6:c2:33:a5:5c:af:5b:c8:88:e1:c6:22:a3:
         8c:e0:6b:c9:95:eb:e6:26:2b:0a:7e:77:bd:71:7f:a0:d7:dc:
         ee:42:92:70:fb:7b:f2:d2:ed:be:a4:ea:3e:3f:93:cc:9a:8e:
         0e:93:1b:51:36:fc:d1:ad:3c:9e:8b:52:5f:27:30:1c:87:21:
         86:3f:1d:25:ad:46:13:aa:10:33:58:d0:38:d9:f0:43:de:3c:
         a8:3f:74:a7:a8:b0:31:48:64:1e:78:06:81:3d:0e:85:f0:55:
         d7:ee:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:05 2026 by rpki-client