Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File:                     e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier:          pvdtWusZ/K2OWYx4hdPyDtKNn22MYDG5lvh/iyWSv+w=
Subject key identifier:   70:35:CA:B4:0A:62:54:61:E2:D0:3A:A9:B0:D1:21:F4:85:E7:61:77
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer:       /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial:       019EB95815921FDCE9078558D603A204A94B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number:          170A
Signing time:             Fri 12 Jun 2026 01:00:18 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:18 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:18 +0000
Files and hashes:         1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
                          2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: 7XsgXvqlKR/+N146CUln9SNJZGXbqfx8G0ZHR1Lodyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:15:92:1f:dc:e9:07:85:58:d6:03:a2:04:a9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
        Validity
            Not Before: Jun 12 01:00:18 2026 GMT
            Not After : Jun 13 01:00:18 2026 GMT
        Subject: CN=7035cab40a625461e2d03aa9b0d121f485e76177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:52:0d:f0:59:44:05:63:d1:59:d7:1e:a4:
                    52:25:be:44:39:2d:3c:f6:41:97:33:87:ac:8b:47:
                    25:f2:75:bd:e4:d6:51:23:9a:6b:5b:56:6d:80:89:
                    85:4c:ff:a0:0c:31:39:b3:0f:92:74:ef:c9:0f:36:
                    72:98:fd:78:1e:19:7f:00:7f:5c:8d:e6:87:95:ae:
                    29:58:7d:3f:0e:2c:7a:ff:94:e7:1d:15:40:6d:c2:
                    55:46:35:4b:a6:83:65:47:eb:20:ab:e1:d4:68:85:
                    4c:49:f9:76:e2:82:33:42:e8:46:54:0e:70:a2:99:
                    47:ae:fa:cd:58:e5:ca:22:d9:98:09:a0:57:11:36:
                    e7:d2:d4:21:04:0e:fc:3d:c5:18:b3:59:09:f5:4a:
                    2f:bf:3a:de:1a:dc:03:2a:75:ca:df:67:e5:ef:6c:
                    f1:78:1c:96:36:9a:6f:c7:61:53:41:f1:b6:48:f7:
                    43:14:8b:9b:de:6e:7a:cb:ed:26:0f:3b:22:9b:17:
                    23:69:d6:21:f3:eb:2d:b5:d8:0a:69:4e:15:0c:79:
                    64:18:54:7e:36:59:62:7d:49:08:b7:6d:df:b7:51:
                    25:e7:91:d8:8f:d7:49:5f:3b:93:bd:f8:b1:92:69:
                    c1:38:a7:fd:4e:bd:36:91:79:92:a4:6e:7f:03:c2:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:CA:B4:0A:62:54:61:E2:D0:3A:A9:B0:D1:21:F4:85:E7:61:77
            X509v3 Authority Key Identifier:
                keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:ac:53:a0:1d:5e:59:fb:69:1b:39:a2:12:66:5a:08:cc:
         55:bc:5e:b4:5e:a7:be:51:e0:27:c2:e2:86:6a:03:d0:17:03:
         e0:14:f6:57:d3:66:87:b2:3d:d4:85:d5:cc:22:c9:fc:ef:48:
         9a:3a:ba:8c:72:0f:36:02:22:0f:ee:bd:69:05:a4:57:97:9e:
         49:cd:7a:62:02:ec:1e:f3:54:46:14:55:22:05:9d:2b:d2:6f:
         d2:88:2a:b3:b1:f2:81:8d:29:0e:32:7c:83:1a:33:99:94:37:
         67:83:6d:19:d1:af:c4:1e:50:21:96:62:16:50:93:42:6a:e9:
         ad:1c:36:eb:8b:55:28:82:dc:29:74:d3:20:9b:28:52:2e:b3:
         4b:48:b5:14:d5:4d:5d:4a:aa:7a:f7:e9:e3:2e:d3:e7:a8:64:
         70:67:e7:b6:69:ea:af:c8:0a:3c:17:62:8a:8f:fe:ac:9f:00:
         29:2f:f8:c9:8b:ff:e0:e1:99:ac:b8:14:fe:2b:39:5a:3d:e9:
         ae:71:91:f4:bf:ba:d3:04:ed:e3:7f:27:8d:7f:bd:12:fe:1b:
         a8:e1:62:e6:fc:3b:ad:e6:bb:0a:12:28:fc:20:d1:a6:b5:4a:
         ef:f0:0f:a9:fe:5c:79:2f:81:b6:84:45:6c:f4:38:a4:86:11:
         66:ab:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:31 2026 by rpki-client