Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          yEYOyvcHSmZ+P2W4zIO5jkzXn+vAX2OLisIDPnLAfUE=
Subject key identifier:   91:BA:DC:CF:19:4F:E1:67:2A:76:93:EE:DC:50:A1:24:48:F8:E2:12
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       019E30A998E237AEF4CF2AB57AD49B239826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:01:21 +0000
Manifest this update:     Sat 16 May 2026 12:01:21 +0000
Manifest next update:     Sun 17 May 2026 12:01:21 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: DCKKukxVKsFaIrVTAusb5BAFg1cRErEcSJbZrppZoJQ=)
                          2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:98:e2:37:ae:f4:cf:2a:b5:7a:d4:9b:23:98:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: May 16 12:01:21 2026 GMT
            Not After : May 17 12:01:21 2026 GMT
        Subject: CN=91badccf194fe1672a7693eedc50a12448f8e212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6e:1e:04:c5:7f:ed:9a:24:7e:b0:66:52:74:
                    a1:c7:b5:83:77:0f:bd:df:23:c6:6b:3a:9d:3b:c1:
                    ea:f5:30:4e:82:19:7f:05:a9:43:c6:53:ee:8f:11:
                    87:2e:3c:f5:16:9e:f8:34:b6:b6:06:bb:ba:bc:bb:
                    4a:06:e0:ad:87:89:9e:49:e2:46:27:ab:2e:5c:8f:
                    95:7f:78:14:26:3e:1a:31:ce:c1:8d:e8:3a:94:64:
                    f0:16:76:33:0f:5f:5e:42:a4:75:d0:50:fd:18:8e:
                    73:c7:aa:25:59:a5:ed:4a:2e:fd:25:7c:e2:c9:e2:
                    14:5c:cb:71:52:74:42:c1:40:da:d0:4e:3e:8b:d7:
                    75:84:17:9d:43:9c:b6:25:9c:3e:b5:11:02:74:fe:
                    4a:f6:5b:5c:d4:56:2e:b0:9b:cb:d0:23:08:a3:cd:
                    7f:40:eb:e5:aa:42:31:40:85:5e:4e:90:77:39:85:
                    73:03:17:44:6e:6a:98:9f:c0:73:96:22:e0:84:b0:
                    d9:0e:1f:96:da:ae:c7:91:7c:ba:e4:c4:82:87:dd:
                    62:6f:58:90:4b:31:e4:0c:76:90:fa:4f:71:af:7d:
                    43:ec:f5:14:5d:82:e7:c9:68:d2:58:23:0c:e1:b2:
                    78:be:a8:1c:11:74:77:52:f7:42:27:ce:07:d5:57:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:DC:CF:19:4F:E1:67:2A:76:93:EE:DC:50:A1:24:48:F8:E2:12
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bd:ce:7f:59:e1:05:54:c7:52:e9:80:a4:88:1d:17:c9:04:
         68:67:99:bf:42:11:ac:ad:b7:fc:e3:a3:4a:f4:d3:b0:d5:ab:
         85:bf:c5:ec:d2:c8:8b:40:7e:bc:16:3d:a3:90:72:44:bd:0a:
         bb:ad:52:ed:3e:4e:3e:53:8a:2d:0b:61:bd:07:38:b2:5f:41:
         90:c6:01:29:cb:8f:21:05:4a:cf:7a:91:71:16:fa:2d:0d:a4:
         cb:80:e0:34:22:61:4b:08:5d:0b:00:0d:d6:10:90:df:7e:d2:
         63:27:72:dd:61:ef:f5:0a:5a:d1:6c:eb:0a:f6:f8:6d:ad:76:
         59:dd:16:fc:38:e8:00:f3:e7:3c:cd:a5:4a:a5:4e:70:34:ca:
         cd:e3:83:42:36:66:32:11:a9:43:d1:9d:3a:fa:bb:8b:1f:10:
         42:8a:74:14:a9:5a:e9:fb:8e:26:69:33:32:f9:72:e4:9f:7d:
         a7:49:1d:29:d3:fc:b5:53:3f:9a:83:39:7d:63:bd:8c:4b:2e:
         d8:43:f4:07:70:7b:7a:f7:9d:b7:e3:25:c8:6f:28:bd:58:49:
         a4:ab:a2:41:2a:b0:8f:d4:3d:37:36:a4:12:ed:ae:5b:44:cc:
         65:1d:ca:1b:7e:55:a0:89:d3:2b:42:13:2d:b8:ff:f3:11:48:
         f2:36:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:42 2026 by rpki-client