Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          D1b9on3FyE5Q2ig9IhmMFO7KulUhyNpbw71eYlFZPJQ=
Subject key identifier:   2F:2D:FA:BC:F8:C4:29:44:57:74:A0:5D:EC:2C:CA:3F:5A:31:A5:E8
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       01A001DDA3BB9206608EC3252197F603FE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          10DF
Signing time:             Fri 14 Aug 2026 20:01:37 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:37 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:37 +0000
Files and hashes:         1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
                          2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: exPhR0Kh2Ud45b83YAKcHpAHiZ+ErCUa7johEbgoB1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:a3:bb:92:06:60:8e:c3:25:21:97:f6:03:fe:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Aug 14 20:01:37 2026 GMT
            Not After : Aug 15 20:01:37 2026 GMT
        Subject: CN=2f2dfabcf8c429445774a05dec2cca3f5a31a5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:a6:96:78:5f:f7:e4:5f:39:b0:95:81:10:
                    63:82:ee:20:e2:58:c7:74:c8:b5:28:60:c7:d2:66:
                    fc:d8:2f:63:f7:d2:2b:8d:37:f3:bb:1c:ec:9f:7b:
                    03:28:e8:4d:6b:4f:bb:4a:24:2c:64:4a:59:74:fd:
                    a3:81:bd:7f:0d:90:81:ac:57:d5:31:e6:72:ca:a3:
                    f1:6c:38:c6:08:7c:8e:2e:1f:c9:b3:df:5c:68:a8:
                    24:be:11:76:32:66:37:9b:1b:0e:83:ab:c6:cb:fe:
                    2e:50:be:17:93:54:1b:09:68:fc:6a:6d:de:9c:d2:
                    45:2f:1f:22:91:1f:8e:28:ce:72:e8:a8:0c:91:be:
                    f4:1d:c1:2b:16:33:30:3a:e9:89:4d:8e:e2:d0:72:
                    bf:89:5d:dc:54:eb:af:41:b3:21:26:0a:68:05:14:
                    ce:b4:20:ff:2d:b9:69:60:d6:6d:4b:76:0b:00:2b:
                    67:63:6d:40:16:7a:b8:dd:fd:fa:ca:f3:f0:58:8c:
                    87:c3:ee:1d:98:65:f4:40:65:b8:fa:d6:42:a7:ed:
                    e7:6e:4b:5d:85:84:79:99:e8:91:40:77:50:2d:1a:
                    9d:9e:85:97:53:96:9b:fc:62:9a:b6:27:5e:fc:55:
                    18:ad:c9:ae:a6:f9:90:5a:5f:19:2c:ae:d0:3f:20:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2D:FA:BC:F8:C4:29:44:57:74:A0:5D:EC:2C:CA:3F:5A:31:A5:E8
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:d1:8b:3b:2d:0f:c4:47:cc:1d:39:ce:3d:2f:9a:83:3c:
         49:41:3d:73:40:c6:bc:d3:17:9c:c4:f4:65:99:62:43:5e:72:
         c8:7c:5c:f2:58:e9:5b:2a:a8:4c:a9:06:0f:6c:17:f7:c8:7e:
         c5:72:33:67:b1:98:f8:8b:76:f0:da:db:9c:49:15:58:20:aa:
         72:28:cd:96:a3:58:2a:c7:c5:0f:6e:91:9c:a7:e2:ef:4e:05:
         58:bf:c5:80:32:e8:f1:13:17:65:79:7d:2f:a1:9e:96:25:05:
         1f:e3:1a:65:d7:49:f4:c3:e2:ae:f7:70:60:f3:69:57:da:d5:
         e0:c3:38:d3:05:d3:0b:ea:63:aa:cb:0f:22:af:0f:cb:05:a0:
         36:ec:94:76:dc:86:21:56:70:79:59:dc:ad:55:26:15:c1:2f:
         e5:22:cb:5f:61:de:d0:03:1a:77:4f:de:f9:dc:08:8f:1e:51:
         f5:c9:d0:60:e4:e1:c7:de:66:16:43:b2:94:24:6c:d8:20:34:
         f4:17:ff:28:32:06:c8:bf:d8:18:b0:f5:5f:43:67:ed:27:ce:
         31:58:36:55:50:49:ac:43:76:ce:d2:e2:1b:7d:69:9f:a1:cc:
         be:02:6f:4a:ea:58:62:72:53:bd:27:e4:51:a3:9e:17:a4:27:
         f4:12:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:36 2026 by rpki-client