Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          mUFZ3OJCsxRYDgyl3pWGMnFlwXdHNBN36TUXrtNBrsM=
Subject key identifier:   5F:D9:93:5C:AC:19:41:E6:3C:3D:5C:2A:31:40:55:5C:F3:CD:24:1F
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       019F826711470EAA3473D7022FD94DF32717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          19C0
Signing time:             Tue 21 Jul 2026 02:00:20 +0000
Manifest this update:     Tue 21 Jul 2026 02:00:20 +0000
Manifest next update:     Wed 22 Jul 2026 02:00:20 +0000
Files and hashes:         1: FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa (hash: PInGgvuIsGqqB1mQYMtujlsnjDmQI8gDdHkxsOyMUeU=)
                          2: P3pv-gZEfvCnIHWDfdg0yxOLxts.roa (hash: 8lfgDiix8CJcXEjBEwv/AE7QhJ7ckMyzADEA5O86Bjg=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: Pfto6LgSuqweHptMAAAgwRxEnAoQsr2O3s7k9hpDss8=)
                          4: fdTnyPooQgysuP5rftvVBVmGZkM.roa (hash: 1Ez2zy7PUBhosjdmVB2WhVRBoqQ4qi56zfybOmR+pWs=)
                          5: jbu7YVaEChenzG9Nd_JwZvXoWTI.roa (hash: xb+DIZFFqeE3EtRAWh6vIJmLk/CrtqEEWekcTpnXn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:11:47:0e:aa:34:73:d7:02:2f:d9:4d:f3:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Jul 21 02:00:20 2026 GMT
            Not After : Jul 22 02:00:20 2026 GMT
        Subject: CN=5fd9935cac1941e63c3d5c2a3140555cf3cd241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:f0:2e:95:87:2d:0b:b5:5e:a0:a9:96:ce:
                    b1:76:16:19:11:51:8c:42:c7:c6:d7:f4:72:a9:b4:
                    8a:b5:8f:51:98:b0:2c:ea:34:d0:49:0e:53:ad:60:
                    d4:5c:df:76:ea:43:2b:62:1b:96:d3:ad:1b:99:2d:
                    43:2c:d4:9a:f9:14:5a:48:d0:f8:2b:6f:a7:82:df:
                    a9:e4:6d:1e:38:36:f0:a1:5e:e5:69:83:67:e4:23:
                    9f:74:8a:9d:65:73:5d:10:d6:90:c9:64:93:b8:61:
                    2b:a3:e0:ee:f7:e4:3f:51:87:2f:67:54:8f:6d:71:
                    75:ba:e6:e5:eb:7a:7f:a2:b9:38:3e:ce:dc:28:56:
                    50:87:9e:1f:75:ec:23:02:2f:4e:bd:26:ed:14:1e:
                    fb:f2:94:d9:7e:d0:7c:cd:cc:a8:fa:c9:d5:b3:c1:
                    9a:7c:27:81:a9:28:9c:90:d7:6e:16:1b:b9:31:42:
                    37:2c:4c:6f:18:d0:e6:4f:7d:de:7f:a9:9c:64:7e:
                    a0:a3:3b:a0:23:d6:59:e2:0d:66:bd:45:cd:f8:67:
                    78:1b:4a:06:e7:c8:65:d8:c3:8a:d5:af:1d:dd:a8:
                    f7:4d:a8:60:a5:80:83:d7:90:fc:70:e8:f7:c4:1e:
                    57:5d:33:db:65:fd:42:d6:9c:60:99:b0:fa:f9:77:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D9:93:5C:AC:19:41:E6:3C:3D:5C:2A:31:40:55:5C:F3:CD:24:1F
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:50:44:78:a0:0c:0e:4e:58:31:ac:7d:64:dd:5c:2f:ca:a6:
         5b:ae:4e:f1:3e:19:e4:7a:fe:1d:39:9c:f2:a4:00:ef:64:ef:
         89:ca:cb:9d:54:32:a0:0a:57:90:9f:a8:7a:74:99:81:33:9d:
         ee:2a:ab:d1:52:5a:dc:11:13:53:05:f3:c1:c5:d5:1f:ad:e9:
         b7:fe:35:8e:a5:ba:a1:00:0f:f3:e2:50:16:ec:9b:bb:65:7d:
         21:8b:9f:8e:95:6b:4f:82:43:6b:ab:21:07:0a:23:2f:3e:b9:
         c5:47:a2:ec:52:2b:4e:a4:b1:d4:ec:ab:b9:99:0c:05:08:b4:
         24:79:37:42:45:1c:87:25:f6:7b:65:1f:ca:bf:42:9a:a8:9f:
         55:ed:1e:cf:61:0e:a1:d2:8a:f5:04:3d:89:1d:63:70:30:03:
         30:24:5a:22:db:39:8e:37:6a:96:2b:31:5b:fd:f2:76:ab:f0:
         8a:4f:e6:6f:c0:b3:30:62:a2:29:48:64:e3:af:f4:f3:5e:6a:
         c1:a6:2d:0b:cb:bb:7b:b5:18:9b:60:d4:de:94:60:11:45:10:
         5d:9d:1b:d0:92:a5:78:15:3b:72:de:e0:8e:ed:9f:95:65:55:
         bf:4b:4e:dc:e3:47:b9:a2:d5:b1:c3:80:c3:3c:95:8c:a4:02:
         9f:a2:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:40 2026 by rpki-client